Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
File: YXe1tkvknoGZlf7n8-NiG9ymrow.mft (raw, json)
Hash identifier: 7LZnemNjcYz2cQdVLqOJZcxUw9GuC6z1OVozoD0hetM=
Subject key identifier: B0:EC:F9:6C:05:D3:D9:B2:B0:7B:04:F4:81:BE:FD:5D:67:76:88:56
Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
Certificate issuer: /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Certificate serial: 019A714A2D69E945A22C944E6A825178A1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:17 +0000
Manifest this update: Tue 11 Nov 2025 05:01:17 +0000
Manifest next update: Wed 12 Nov 2025 05:01:17 +0000
Files and hashes: 1: YXe1tkvknoGZlf7n8-NiG9ymrow.crl (hash: HbIFAxLSCTg8xf+2tWWl9BddO6CPKrf7AesQwY6lKzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2d:69:e9:45:a2:2c:94:4e:6a:82:51:78:a1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Validity
Not Before: Nov 11 05:01:17 2025 GMT
Not After : Nov 12 05:01:17 2025 GMT
Subject: CN=b0ecf96c05d3d9b2b07b04f481befd5d67768856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:59:67:e1:61:5e:20:33:dd:f4:45:0c:df:
f4:10:08:98:b0:8e:33:3f:76:8e:99:93:7a:de:53:
be:67:e8:64:58:01:ba:b5:43:1d:4d:37:f4:3b:18:
0c:12:3e:1d:1e:02:0e:88:1e:72:d7:96:84:27:43:
22:42:35:dc:90:7c:a1:53:83:37:08:21:3b:5a:ca:
0e:04:8f:8d:19:56:bb:cf:32:97:a6:88:a7:7c:84:
b0:bb:7a:66:c7:3e:2a:32:dd:7b:0f:51:8b:73:e4:
7e:0c:4c:6e:96:fe:fa:c7:c1:6f:34:9a:b7:3e:45:
b4:15:25:39:c1:ba:fb:58:87:a6:ec:73:a9:d3:f1:
5f:ab:35:8c:4f:79:8d:c3:39:07:95:70:5d:c0:5d:
1d:03:2b:b9:22:72:e4:a6:87:da:42:4f:af:56:de:
27:7b:33:53:d9:f8:80:18:65:98:07:a0:59:ff:00:
f9:28:a9:ac:08:4d:43:bb:c6:6d:39:8c:9b:04:ad:
a1:ca:f3:25:a7:01:c7:22:7a:73:b6:de:af:57:ab:
5e:03:48:4a:15:cf:df:7a:05:62:77:0d:ef:db:df:
1a:05:14:8c:dc:80:be:c2:6c:c2:90:46:e2:d2:fd:
bd:24:ee:8b:38:cf:bb:53:c5:b1:26:fa:90:7f:74:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EC:F9:6C:05:D3:D9:B2:B0:7B:04:F4:81:BE:FD:5D:67:76:88:56
X509v3 Authority Key Identifier:
keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:57:54:d8:43:bf:14:3f:a5:9d:e9:be:12:54:6f:40:07:cf:
f4:6f:75:64:33:8d:50:61:f5:d1:54:29:6f:2a:4a:94:4c:dc:
0d:a3:60:94:7f:1e:65:18:d2:50:a1:46:24:b2:94:d9:9a:ff:
91:1f:0d:38:3f:46:d1:e2:19:ee:2b:fe:ee:f7:6b:a7:a4:18:
09:d4:91:5d:6d:fe:4e:6b:6d:96:47:3a:23:42:3d:76:e4:1e:
a6:9f:14:40:82:fd:6d:d0:f8:cf:a4:8b:bd:5e:4e:86:7e:f2:
ba:7b:81:72:b9:d1:46:b2:7e:60:4b:64:37:21:0d:02:c2:f0:
09:3b:32:97:e7:42:2b:66:02:86:83:4d:70:40:62:20:73:b7:
d0:a0:c7:fb:5f:6e:ed:2d:2e:1c:9f:9c:80:63:93:0b:b8:ae:
d9:f5:02:5e:4f:7d:af:2f:74:81:e5:fc:0f:c6:90:b6:6e:9e:
44:83:f5:1b:ef:ae:82:33:ec:88:2b:ba:51:a3:bf:03:8f:8f:
79:9e:9c:ea:f7:cc:82:4b:22:e8:ff:74:3b:c9:e2:5f:98:dc:
95:8b:65:a3:3b:3b:c3:39:41:b6:3b:0e:18:7e:b6:ca:18:9f:
f5:60:28:02:0b:5d:8b:f5:f3:d0:16:d3:d8:b8:97:15:29:da:
e1:67:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:22 2025 by rpki-client