Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.mft
File: YhDLQKKfpfMT4LMtHfsRoxo0H5M.mft (raw, json)
Hash identifier: t6J9TWkvQUpAp+t4kD+nN8DW98LR6FgOhYR19nec7Dk=
Subject key identifier: 41:26:5A:E3:20:E5:50:C5:41:0D:7C:A5:4F:14:27:1B:A2:84:95:17
Authority key identifier: 62:10:CB:40:A2:9F:A5:F3:13:E0:B3:2D:1D:FB:11:A3:1A:34:1F:93
Certificate issuer: /CN=6210cb40a29fa5f313e0b32d1dfb11a31a341f93
Certificate serial: 019A70DC263D2A6BE180D1B1B0FECD9091F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhDLQKKfpfMT4LMtHfsRoxo0H5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.mft
Manifest number: 29
Signing time: Tue 11 Nov 2025 03:01:07 +0000
Manifest this update: Tue 11 Nov 2025 03:01:07 +0000
Manifest next update: Wed 12 Nov 2025 03:01:07 +0000
Files and hashes: 1: YhDLQKKfpfMT4LMtHfsRoxo0H5M.crl (hash: ctknY4Chq7jwAqRf1kGT3C2TwHsrXo+HtmGkRwwPc/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhDLQKKfpfMT4LMtHfsRoxo0H5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:26:3d:2a:6b:e1:80:d1:b1:b0:fe:cd:90:91:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6210cb40a29fa5f313e0b32d1dfb11a31a341f93
Validity
Not Before: Nov 11 03:01:07 2025 GMT
Not After : Nov 12 03:01:07 2025 GMT
Subject: CN=41265ae320e550c5410d7ca54f14271ba2849517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:e3:4d:de:2d:44:1e:98:66:15:ef:55:1a:
57:b9:e8:8a:05:21:ef:41:9a:80:d8:23:91:8a:1c:
42:2a:36:b8:ba:8f:c1:ca:35:9c:03:a8:80:33:ef:
13:d7:a1:5b:3c:9a:1e:d7:6e:f5:6c:39:7e:f2:d9:
6d:61:59:28:92:06:5e:e9:8e:96:2f:36:50:0f:d8:
75:c7:aa:c6:91:7c:05:bf:e4:14:16:51:77:b8:48:
c8:7a:59:40:fe:e3:32:0e:ad:31:2c:98:c4:3c:0a:
47:d3:ad:d1:44:d6:11:2f:83:24:6e:ce:ad:37:62:
2b:3a:b6:f5:96:22:a6:2d:ff:e7:21:81:8a:ef:20:
b7:0f:1e:0f:82:1b:26:76:a3:c7:6b:7c:77:af:53:
e0:89:4f:a4:0e:c7:20:5d:78:fc:2b:f5:70:8a:b7:
bb:ae:c7:d6:ad:51:19:98:c0:2c:23:66:a2:86:8e:
fa:34:15:b4:76:5c:a2:fd:5e:ba:26:f1:91:2f:d1:
d1:d8:9f:7d:bc:b1:49:d3:b0:4e:3f:2d:8d:ea:df:
f7:4d:4c:05:1b:59:47:48:39:c1:52:3f:fc:cf:d7:
94:2b:44:f9:79:1a:9b:95:d8:ee:3c:ff:c1:6a:e4:
7c:cb:98:9f:ac:79:0b:c9:55:3c:57:51:60:b4:ee:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:26:5A:E3:20:E5:50:C5:41:0D:7C:A5:4F:14:27:1B:A2:84:95:17
X509v3 Authority Key Identifier:
keyid:62:10:CB:40:A2:9F:A5:F3:13:E0:B3:2D:1D:FB:11:A3:1A:34:1F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhDLQKKfpfMT4LMtHfsRoxo0H5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b8:3d:bd:b8:a9:76:62:ec:34:b0:4b:5d:c2:29:3a:d6:2a:
18:97:3e:91:d3:96:ab:27:bf:f9:1d:01:2e:3e:5f:f8:98:d6:
5f:4a:b9:2a:35:05:7c:a5:22:e8:8a:de:67:a3:27:60:d6:a4:
c0:1b:7b:b8:4e:e7:82:6e:53:a2:8a:ef:41:ab:d9:4f:26:41:
26:fd:43:5f:7f:8f:31:e8:66:4f:67:86:a4:5b:e4:ae:87:0a:
2a:17:34:24:c8:1a:38:dc:64:b1:62:36:ce:4e:f4:43:a1:67:
67:71:34:ef:31:c3:32:4e:f2:02:33:7c:64:13:29:f9:20:51:
f8:8f:d4:12:42:e7:06:ec:62:68:e4:9a:3a:d6:7f:33:6c:d3:
38:83:93:49:74:c8:6d:a7:6e:a3:74:b4:a0:8f:3b:a4:bd:84:
59:05:dd:b2:6f:6f:d1:bf:56:8a:99:09:ea:0b:47:99:75:f7:
26:1c:84:31:e8:10:d1:fc:5c:41:6c:e9:06:14:09:bd:ef:a2:
20:a3:ba:5c:b8:e0:0c:c9:85:22:b2:92:d6:e8:d6:85:45:90:
ef:f2:aa:e5:4e:53:05:b7:7c:97:54:20:40:9f:47:55:41:6b:
d7:69:7c:31:72:6b:4c:3d:80:5e:8f:e4:08:90:8c:df:49:fb:
34:74:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:18 2025 by rpki-client