Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft
File: mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft (raw, json)
Hash identifier: EL4TJ0Mm2oD+7Wjann0c+XvhP3UTK2rC/DuxT3ibfuE=
Subject key identifier: 6E:EC:A8:6D:11:26:AB:92:80:26:9D:9A:49:90:E9:3C:2F:59:6C:FE
Authority key identifier: 99:83:E9:4F:2F:97:A5:24:C3:F1:CB:F4:86:30:58:D3:B6:51:06:16
Certificate issuer: /CN=9983e94f2f97a524c3f1cbf4863058d3b6510616
Certificate serial: 019A71EEEFBC7964B8C6B85FF1B0B8D726CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft
Manifest number: 15
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: mYPpTy-XpSTD8cv0hjBY07ZRBhY.crl (hash: /mdp1n7IJmTCegzSgW3xJWQwdTdkmq9L+4B6MGrTT+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ef:bc:79:64:b8:c6:b8:5f:f1:b0:b8:d7:26:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9983e94f2f97a524c3f1cbf4863058d3b6510616
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=6eeca86d1126ab9280269d9a4990e93c2f596cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:0d:f3:53:61:5e:1d:ab:b6:88:05:64:2a:
3c:f7:7a:f7:bc:a0:cc:95:69:f5:7e:b0:4c:15:31:
ce:92:4a:29:81:e3:64:61:ad:38:d2:4a:c8:a8:2b:
9f:0d:a9:4d:3b:2d:a2:05:66:7d:a6:3d:8c:fe:34:
a9:2d:45:7e:f5:b4:f6:39:06:cb:b3:60:9d:f0:db:
a6:4e:c0:0a:ff:3a:9a:bd:17:e5:41:aa:16:4b:da:
6e:50:a3:53:37:e7:34:56:2a:c7:67:d0:c3:e3:f8:
fe:b5:ce:7e:1b:b6:ce:b9:74:11:5d:f4:ac:97:7f:
d4:53:28:cb:ad:a0:11:9e:34:4c:66:10:21:de:40:
70:2b:fb:bb:7d:e4:81:5f:de:24:95:b5:f2:47:b3:
40:b8:8e:e5:de:c6:f4:ca:55:8a:b1:b7:71:da:f4:
82:aa:a0:c7:d3:36:8e:67:44:30:80:df:26:f5:c5:
2b:26:16:75:4a:f1:18:25:36:22:a9:d9:6c:00:10:
25:36:a9:f4:3f:e3:60:c5:a2:2a:5b:13:61:34:03:
ef:74:fd:b5:d1:03:9a:2e:37:7b:0b:c3:a7:0d:93:
fa:6f:1c:3e:05:92:df:3c:72:d0:a4:72:0c:1a:28:
c1:65:9d:cb:c8:1f:d2:c5:53:6d:48:8a:97:d6:26:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:A8:6D:11:26:AB:92:80:26:9D:9A:49:90:E9:3C:2F:59:6C:FE
X509v3 Authority Key Identifier:
keyid:99:83:E9:4F:2F:97:A5:24:C3:F1:CB:F4:86:30:58:D3:B6:51:06:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6d:1f:c3:47:5d:23:4a:e9:6a:c2:6a:80:ba:f1:0c:e9:ec:
ef:97:c2:3a:b3:b7:2c:e8:38:48:90:e5:3a:53:61:cc:b5:39:
c2:72:c0:d2:95:20:b2:83:a6:bf:05:5f:82:59:49:c9:5b:c6:
5b:5e:17:f8:d8:3d:b7:64:41:07:67:76:a7:dd:2a:9b:84:4a:
cd:9c:3f:21:c8:c8:af:63:ed:0a:80:2d:2d:2e:d4:6e:95:a1:
fa:a0:91:7f:5e:54:e8:5d:ed:16:ad:6f:3a:5c:3b:58:93:00:
6b:aa:f0:34:84:b9:db:0c:87:d6:66:ab:26:c3:dc:c6:e4:d4:
95:9e:7e:7d:d9:cd:52:93:ab:e4:cf:63:ee:a6:fe:97:6a:0a:
46:5c:8b:19:cf:ad:d9:cb:13:6f:4b:33:63:f9:7f:72:e8:7b:
09:ad:bf:2b:be:49:35:dc:b1:1a:06:60:ee:bf:39:0c:37:41:
5c:1b:4b:05:8a:d4:34:0b:84:4b:00:96:ff:17:e0:ae:b4:76:
38:e0:6f:34:bc:e5:56:fc:2b:9e:93:51:f0:8a:7f:e3:e2:33:
b2:48:b9:c9:c4:6d:02:f2:94:2b:10:7d:28:b4:be:11:ff:4d:
76:89:04:a4:c2:ed:c4:4b:cf:48:3d:7c:d6:f4:0c:e1:e8:fc:
2e:b1:00:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:42 2025 by rpki-client