Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier: Lor+5dACujkoz3pRO452VR/AGMZyJ2b4lg3a7dYbCoM=
Subject key identifier: 33:F0:5A:B2:5A:25:43:85:71:7F:78:C7:F5:9D:24:54:FD:5A:04:1D
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 019A7293775E8D832D04A29871B879718C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number: 1421
Signing time: Tue 11 Nov 2025 11:00:58 +0000
Manifest this update: Tue 11 Nov 2025 11:00:58 +0000
Manifest next update: Wed 12 Nov 2025 11:00:58 +0000
Files and hashes: 1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: q3aFuiA8WjIEfuK4lCiLNJM4WnnslvuEkahIK/nYE34=)
2: ZrBT-LTKncMhVmd9eNZtlw1O86k.roa (hash: tAbiS/EvHuSlDvoKxib2aD63z2PVHysvpp62xqOjuZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:77:5e:8d:83:2d:04:a2:98:71:b8:79:71:8c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Nov 11 11:00:58 2025 GMT
Not After : Nov 12 11:00:58 2025 GMT
Subject: CN=33f05ab25a254385717f78c7f59d2454fd5a041d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:07:53:88:96:1d:67:14:7f:e4:fa:2f:39:
af:65:4a:04:15:20:4a:3f:e4:f0:ef:2f:df:9c:10:
01:e0:bf:a5:6c:0c:60:66:33:98:ab:8f:fe:a6:41:
0c:99:74:02:97:bc:ee:62:a6:ac:96:b3:7a:5f:59:
57:34:78:00:ab:4b:e7:14:b2:77:31:e5:82:6c:4a:
f2:88:d0:45:3d:56:0b:c4:da:f2:3d:fd:5f:ce:ae:
d3:11:e6:c3:1b:79:f7:5f:f5:7c:a2:c3:fd:f7:03:
39:62:a6:1b:0e:28:b0:81:e0:98:86:f0:e2:38:11:
69:f1:92:3d:7b:d5:90:c9:6c:46:3d:20:db:d2:55:
65:59:d9:96:2b:b7:c5:8f:70:c1:b8:c9:5f:54:7e:
38:21:95:4f:85:63:67:ed:16:6a:b6:76:96:4c:0e:
d4:68:7c:42:8d:c3:6e:55:31:63:df:18:7a:34:5a:
cd:35:33:8a:1b:26:ec:03:2e:df:9e:a8:6a:3f:67:
46:ca:4c:fc:28:a7:11:b0:0b:f4:1a:91:0f:1f:45:
34:3f:6a:82:24:0a:54:c2:54:96:9c:fd:a1:bd:f6:
38:e0:62:ee:4f:f6:15:56:ee:54:9c:a7:b6:b3:9a:
21:cd:d1:fb:71:e4:6f:ff:dd:ea:9b:e7:43:a5:dd:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F0:5A:B2:5A:25:43:85:71:7F:78:C7:F5:9D:24:54:FD:5A:04:1D
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:24:82:b2:6e:7d:0d:25:78:25:00:03:18:25:fa:97:48:9a:
f9:29:36:78:f7:45:74:70:38:52:ee:fb:03:af:35:de:78:d6:
75:72:a8:c7:c6:e8:d5:63:cd:37:0e:01:89:a6:5e:9c:57:58:
d0:6d:54:b0:02:28:4e:97:97:43:da:64:03:f9:df:10:20:67:
9f:9b:e4:83:82:2f:8a:37:57:cf:09:dd:2e:3c:9a:0b:43:52:
ee:8e:02:a1:9f:28:4b:84:70:92:ef:ae:e3:61:e4:75:89:17:
7a:1c:5c:6d:20:fe:4c:a6:72:11:1f:ab:b1:81:7e:f7:2e:a1:
00:9f:00:fc:e1:88:1f:20:9e:f6:64:1a:91:84:2a:01:30:52:
db:1e:39:fe:7f:9f:5d:9c:67:f1:da:84:25:56:ac:d5:00:2b:
8b:7d:0e:7b:ee:e5:41:78:e4:76:de:49:61:b0:dd:67:2d:4c:
29:e6:ca:17:93:31:25:d0:3d:ec:44:a5:19:63:e9:ab:93:3e:
5e:60:df:7a:55:8f:6a:30:38:aa:ab:8e:ba:8f:bf:78:ab:a2:
4d:46:c4:de:7b:13:4e:a6:61:2e:90:c8:7e:42:0b:74:0b:82:
62:0b:15:ef:9c:fb:40:75:f6:e1:97:f8:ad:c3:6b:28:96:15:
9e:e4:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:15 2025 by rpki-client