Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: G+M1bl1eyCh3D5nILyys77ycC17M5qQnms+fQR13o0o=
Subject key identifier: 01:98:29:39:E5:31:83:2C:2E:BB:CA:D7:E3:15:73:BF:18:CE:17:EF
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 019A71EEAC3FBC80D8D6263B9B960EBEAF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 12A4
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: Z4qc4Fc0fhvlIZhFwJUp+85Lzp0kp0zcUtX+Nb2yRRc=)
2: uY3zUef0aSQ_1cVEf2POkOTu658.roa (hash: 5Ji2ueMdcBCO2VElJdA2ZSQYLd05uzaWuTi54eXzep8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ac:3f:bc:80:d8:d6:26:3b:9b:96:0e:be:af:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=01982939e531832c2ebbcad7e31573bf18ce17ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:78:73:02:12:80:98:2b:ff:8f:5c:26:00:
6a:b1:5a:a0:45:36:41:ed:68:11:0d:dc:25:ab:0e:
f1:d1:d4:ee:52:ad:8a:75:b9:6c:94:bb:cb:6c:8e:
38:a4:90:ac:a3:c1:70:67:37:f4:49:4a:f6:6d:74:
2a:cf:93:48:56:f2:4d:5b:56:2f:13:c9:ce:a8:51:
87:37:4f:d2:74:79:d7:eb:eb:9b:35:5b:37:42:29:
b0:cb:f6:4b:fa:21:b6:fc:ba:3d:76:7f:f6:2e:d4:
c0:0d:6f:82:10:a0:73:a4:24:60:25:e9:7b:d0:16:
27:6e:dc:a0:c9:8a:ba:e0:f5:00:fe:76:d4:b6:8e:
23:28:c2:26:0c:ec:74:ac:dc:4b:5e:e3:42:61:09:
34:bc:ce:92:37:9e:1e:01:ff:35:2d:b3:9d:b6:46:
c7:a6:31:2a:51:c5:29:00:6f:de:96:d1:89:1a:ed:
2d:b9:11:85:79:a9:f1:83:22:42:0b:3f:e4:ee:9c:
ac:56:4d:ff:98:84:f4:5a:3b:21:ba:5c:57:ed:df:
f7:1d:36:db:42:92:83:94:c3:34:57:60:6c:5b:88:
43:41:0b:30:58:ca:68:94:56:e3:76:56:06:3f:a8:
e3:d7:19:65:6d:09:25:d0:0e:5d:21:ba:78:69:50:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:98:29:39:E5:31:83:2C:2E:BB:CA:D7:E3:15:73:BF:18:CE:17:EF
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6e:27:18:a1:43:1c:7e:70:aa:82:b3:ba:85:54:d2:80:79:
26:1b:5a:65:b2:5f:fa:de:6b:54:a8:4e:bd:38:80:94:7b:64:
0f:f7:52:01:50:6e:a5:f5:62:39:23:2c:29:5f:2a:cf:f9:7c:
26:4d:d2:26:fa:f9:d7:5d:40:bb:2b:bb:27:18:6d:03:e6:f2:
9d:0c:21:15:84:a3:1e:cd:e8:38:53:67:ea:d7:c1:ae:fc:cc:
b9:29:5d:51:ad:1d:c2:ab:c9:7e:a6:df:cc:3a:81:08:f0:6c:
1a:2c:f6:49:bd:40:5e:38:c4:7c:e3:fc:75:68:a4:f1:e1:4d:
ca:85:c7:2a:d2:12:22:c9:18:bf:f8:24:47:40:a6:9a:32:25:
db:e6:15:e4:d0:e7:97:81:4e:b9:16:d3:71:bf:0d:36:7f:94:
6b:ad:ae:c5:74:3b:b5:82:5a:95:82:57:43:0d:11:49:08:67:
80:15:39:aa:48:13:5a:7a:49:f4:f3:8e:1d:2a:ff:7f:81:16:
72:b3:51:98:ad:8e:4c:92:37:f0:ee:f5:7c:92:ee:e5:ec:c5:
59:94:9e:39:94:6a:1d:f1:62:65:ae:65:bf:5b:96:3e:b8:6d:
9c:4a:cd:81:6f:e3:67:5e:b9:17:47:8a:ad:ea:dc:f4:93:4b:
f8:2e:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:47 2025 by rpki-client