Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier: aFFCJU9JDp7peBT4ZxdF75CSer5ZcqD6x4ieFeDOVGY=
Subject key identifier: 09:41:F5:DB:57:A9:72:FD:AE:8E:1F:37:74:96:F2:F3:5C:46:32:CF
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial: 019A71B87B69B3152F3059249E8CCAD25E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number: 0803
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: hW4kPx5/ttBVNt/yyIxwkHXQn2o9dg/Iy09BqcyzWf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7b:69:b3:15:2f:30:59:24:9e:8c:ca:d2:5e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=0941f5db57a972fdae8e1f377496f2f35c4632cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:b1:cc:e5:c4:fd:59:11:0c:ce:65:21:2d:
c2:bc:8a:c8:2f:78:00:60:39:99:38:56:a7:82:87:
f9:67:42:52:bd:29:d8:b0:aa:1f:a5:21:5e:a5:62:
1b:d4:89:44:42:ed:62:9d:95:5f:1f:82:bf:11:50:
16:63:18:19:9d:a6:fc:73:c4:eb:be:5f:f5:1b:07:
fd:a6:3f:29:92:26:35:dd:b6:12:38:f2:f3:f8:f7:
c9:8e:db:44:65:65:58:c8:0c:28:91:e2:6a:65:41:
dc:33:38:f6:92:14:07:3d:30:f7:53:ec:d0:85:03:
76:82:35:ab:0a:1c:6b:fe:57:21:f0:b0:b5:32:84:
5b:86:00:43:b6:c2:4c:2f:a5:c6:d2:a8:3f:88:d7:
5e:5b:5d:b5:55:24:af:10:40:29:80:76:39:96:32:
c8:ac:38:eb:56:12:2a:42:d9:b5:51:49:d7:52:bc:
66:05:46:a4:e3:b1:86:e3:a0:5d:00:b9:64:87:4f:
56:14:a2:9d:9d:22:eb:32:01:f7:18:be:5e:a1:6b:
f9:b8:2c:14:f7:6c:58:58:b7:ac:1e:be:06:5b:66:
2c:1d:b6:86:6b:7b:6d:57:dd:56:22:5d:65:91:49:
1a:b9:f0:7f:30:dc:64:da:d1:d1:9b:18:83:38:fa:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:41:F5:DB:57:A9:72:FD:AE:8E:1F:37:74:96:F2:F3:5C:46:32:CF
X509v3 Authority Key Identifier:
keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:73:7f:68:53:05:41:0b:ee:3c:f0:48:26:c9:b3:63:8c:58:
d9:72:1b:73:60:0f:27:ad:33:d0:7b:d9:63:f8:95:39:76:01:
02:ef:3b:67:64:2d:42:5a:07:64:73:aa:91:7d:0d:fe:9e:f5:
83:3d:63:11:c4:9e:3a:a5:16:5a:52:ea:ec:e8:78:9e:00:6d:
3b:dc:a6:f7:c9:2d:d5:c6:d1:51:a5:b7:f4:4f:8c:02:bd:ab:
23:99:07:7f:e5:9f:e0:6a:0c:5f:a9:8f:fe:ce:8c:9c:65:4a:
93:29:ea:69:d1:2e:82:ee:4a:60:a5:3c:3c:8e:03:a3:1a:db:
91:fa:64:ba:7c:10:07:fe:c0:42:70:40:22:98:88:6a:11:77:
07:fb:be:6d:a4:1b:9a:e1:9f:c4:0e:0d:39:01:5d:18:27:4c:
bd:aa:bd:01:ae:cd:a8:66:30:50:5c:b9:c9:90:bc:e8:e8:2b:
02:24:20:b9:61:6c:19:f4:da:e8:1d:5b:e5:af:45:d4:9a:23:
a9:7e:be:b0:c3:7c:02:ee:1b:a3:31:fc:4f:80:7b:9d:7f:d7:
ae:06:2c:8f:c4:9b:54:a2:92:c8:1b:67:7e:36:f8:9d:e8:64:
cb:51:dd:3a:5c:cb:fa:6c:a5:43:1c:e0:5d:67:be:be:8c:71:
ef:c1:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:34 2025 by rpki-client