Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
File: yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json)
Hash identifier: hC25oIP7ODeh0V99m9iPc4ss2yzBEEx0fBdUHhHRm1s=
Subject key identifier: 35:52:94:4B:21:97:1F:B7:DA:9E:C1:32:5F:D6:98:55:4B:02:36:A6
Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
Certificate issuer: /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Certificate serial: 019A7112E5D6F80266DDD11FCFF76B2485F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
Manifest number: 0DD7
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: 4JpJN6V5KwrmwpQscOcExB8hBV22XFYjC/WWfOLdedg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e5:d6:f8:02:66:dd:d1:1f:cf:f7:6b:24:85:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=3552944b21971fb7da9ec1325fd698554b0236a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:a2:cd:8a:d9:a0:15:5b:42:1f:74:64:5d:
81:97:d4:02:aa:0c:f5:d7:7e:b9:2c:4b:91:e8:9b:
13:c0:b1:b3:c0:e5:02:5d:5c:18:77:31:23:ea:5f:
9b:fc:93:2f:ca:87:a3:71:2e:9c:28:12:f2:58:18:
f5:df:21:48:55:91:e8:62:ba:41:75:9e:f5:d4:5c:
9f:54:2e:6e:6b:fe:3b:4d:0c:04:04:99:ac:02:d6:
7a:69:49:88:b9:db:d5:03:fa:2a:2a:3e:2a:98:ec:
5c:f1:f5:a5:af:02:ff:32:fe:a0:f6:b0:a0:6a:8e:
03:12:33:b1:39:b0:50:d9:e9:c8:73:8c:28:ce:77:
15:51:ea:94:36:f6:62:83:5f:f4:ca:83:65:94:c6:
c5:ba:f8:d2:0b:6e:6e:17:08:d5:b1:72:7b:4f:53:
8f:21:d5:1a:19:61:e8:68:b3:e6:aa:ab:65:48:7e:
64:72:78:4c:93:55:ab:dc:ea:f1:9e:20:80:e4:1f:
10:88:4c:6c:ca:b9:a9:ef:6d:cd:70:f0:d0:97:b0:
70:b8:3a:63:9d:53:22:f2:c3:ef:80:54:86:4b:ff:
44:c6:e9:5c:b0:35:12:63:cf:54:53:9b:27:41:f6:
a2:95:ca:ee:b6:60:ac:e6:a8:5c:e2:6f:0a:64:9f:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:94:4B:21:97:1F:B7:DA:9E:C1:32:5F:D6:98:55:4B:02:36:A6
X509v3 Authority Key Identifier:
keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3b:95:84:b6:c5:e5:ff:88:da:dd:33:b8:bf:2c:9c:2a:c9:
c5:80:ae:dd:a6:72:66:bc:3c:4e:53:98:f0:40:47:ce:42:b7:
0c:54:6d:ac:ed:88:7a:5b:89:c0:b3:9e:5e:2b:c6:b6:e9:78:
5d:81:4e:d7:23:c8:ef:21:48:c0:f7:aa:11:4b:1c:64:ad:78:
2d:e1:0a:10:95:00:3f:af:28:7a:e4:5a:18:e4:53:ee:bf:1d:
e3:00:eb:d2:02:43:95:fa:fd:7b:76:9a:8e:e0:d4:5a:39:2b:
40:17:21:b3:e7:0b:ba:ed:d5:8b:bf:06:b7:e0:1a:78:07:9a:
7b:b4:0b:16:cf:7c:58:15:60:08:b6:58:5b:27:49:84:1d:dc:
c0:5d:3e:05:d0:22:fa:ff:18:1b:36:c4:e5:df:e1:21:53:10:
11:0d:89:ff:d3:cd:1b:ac:a5:fd:ec:7c:06:ab:69:c2:7a:b8:
71:c1:ab:cd:cc:54:f2:7a:a1:67:6e:db:1c:0b:a1:b2:83:ba:
42:39:a0:f4:25:11:72:64:3b:07:c8:6c:4f:83:ba:3c:1a:8e:
2c:4e:b8:a3:0d:ff:42:50:12:3b:88:c6:cd:cf:b9:f9:2a:02:
cf:d2:82:65:37:f6:23:30:a2:41:df:24:a5:69:dd:89:32:bc:
3e:b2:92:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:09 2025 by rpki-client