Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: 86a8yZr2ds+nW5WuhC5V2WUaB6q0saBtN9oa4SFOkYU=
Subject key identifier: C5:97:9D:38:AA:BA:83:37:DC:B1:DC:49:5B:31:CF:29:F1:26:A6:A2
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 019A72CA8C783AD6BA70D1790C3D491B137F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 11E3
Signing time: Tue 11 Nov 2025 12:01:08 +0000
Manifest this update: Tue 11 Nov 2025 12:01:08 +0000
Manifest next update: Wed 12 Nov 2025 12:01:08 +0000
Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: 52+ODpMXdudwYqxjGotttm99BqFqOFrgq1b6FKvg9LI=)
2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:8c:78:3a:d6:ba:70:d1:79:0c:3d:49:1b:13:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Nov 11 12:01:08 2025 GMT
Not After : Nov 12 12:01:08 2025 GMT
Subject: CN=c5979d38aaba8337dcb1dc495b31cf29f126a6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:35:21:c9:ad:61:f6:cf:40:67:4e:eb:83:
33:14:70:d3:e3:4f:2d:96:6a:a8:fe:5d:b8:b2:7a:
2c:e0:32:03:ec:2d:23:59:34:f9:0f:95:32:0e:e4:
b7:89:af:d1:eb:27:20:9d:96:a3:2b:64:d6:06:70:
f6:2a:45:92:7b:47:ce:9c:c9:cf:c5:d5:9f:d5:57:
60:bc:e9:61:b2:a5:b6:d0:d8:ce:44:2e:d0:75:93:
0f:fc:6b:83:15:2c:80:5d:26:09:73:14:20:12:8d:
d5:cd:1d:c1:97:a9:0c:a8:af:43:21:0b:a9:22:a3:
5f:87:74:77:2e:07:32:38:6f:9c:ae:62:26:08:46:
0d:cb:c3:26:83:c9:9a:f2:19:a4:b4:f3:9c:2c:ea:
74:74:7e:5b:06:ec:8c:c4:be:c2:50:ae:97:eb:9b:
c5:bc:ee:33:6d:9c:1f:d6:4f:5c:9b:49:21:4d:ed:
04:4b:56:ff:2b:d9:ba:60:05:54:e6:46:11:f9:85:
5e:57:67:be:e4:6d:d3:4d:11:5f:de:bc:7e:c4:35:
8f:f1:60:6a:e3:14:a6:75:45:1e:62:7a:d0:7f:73:
ec:ca:62:1f:40:29:d4:ef:3e:1d:90:1d:07:b0:18:
68:98:b6:a4:af:60:eb:07:1f:ec:a7:1d:57:1b:e8:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:9D:38:AA:BA:83:37:DC:B1:DC:49:5B:31:CF:29:F1:26:A6:A2
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:b9:a7:35:fa:4b:1c:e0:84:5c:d8:8f:fc:c9:54:66:fe:
28:44:6d:aa:36:87:d5:28:13:a1:6b:b3:46:3d:b1:16:de:e8:
22:8f:02:4a:c2:55:59:bb:78:a5:45:9b:27:23:82:9d:27:14:
1d:4b:5b:de:9f:40:e7:c2:7b:55:a6:1e:af:e7:fd:04:d7:eb:
83:3e:ff:01:4e:43:5a:b0:e6:a4:09:bc:7e:dd:7e:91:74:6f:
3a:a3:07:95:ca:b3:21:f5:1f:ce:10:d6:ce:76:7b:9f:1e:4a:
ca:3d:bd:eb:6b:b1:8f:be:eb:35:12:ac:2e:a3:b4:97:e5:ed:
ed:08:61:00:4c:08:c6:dd:94:d1:8c:ba:b2:8a:38:cf:4a:65:
11:27:08:bd:be:9d:e4:38:06:6b:db:ba:2c:23:eb:6b:1f:9b:
b8:8f:71:11:db:53:f9:43:21:86:ec:f4:d8:c1:1f:3b:4c:7f:
b8:1b:f1:f5:5e:1b:23:e1:e4:82:98:ec:be:0a:7c:f0:32:9f:
97:27:4a:3a:93:13:c8:a0:85:51:57:87:e9:2f:ce:71:f8:4e:
f2:2e:1c:94:bc:d8:99:e6:82:fb:d1:94:5b:73:b8:ab:fc:4a:
1e:b6:2f:e1:24:a3:f4:d1:29:64:fb:7f:ce:6a:12:ed:61:e6:
60:b3:6c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:48 2025 by rpki-client