Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier: ZNkJq4EJLft+Irf6IZRXtSIkEjaDyy8XWo66q7Hq9U8=
Subject key identifier: 58:C1:8D:25:F9:DA:8C:DD:FE:8A:7A:A4:03:00:BB:35:75:E9:10:4B
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial: 019A71B78227D73079C52345AA376840A815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number: 16AD
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: NPR/tgIQvlvKDdCt8WPISV8k9J4iKNn5km8/ymItwdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:82:27:d7:30:79:c5:23:45:aa:37:68:40:a8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=58c18d25f9da8cddfe8a7aa40300bb3575e9104b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:04:af:f8:21:1c:f2:20:fd:d3:c0:e9:0a:
6a:12:f7:2c:a3:da:28:2d:2d:83:95:5c:96:43:33:
e6:5d:4a:f0:43:36:26:a0:ec:ca:0f:a1:a2:6d:e3:
c9:a8:e9:03:a0:51:09:ff:a8:fb:ad:dd:22:33:25:
aa:3b:67:66:10:9e:f7:b0:6c:f6:95:5d:1c:b7:e9:
f2:97:2c:f4:89:37:f3:8a:a9:cd:d6:77:02:17:34:
07:44:29:36:99:c2:36:c2:33:63:6b:2d:d2:f8:3e:
14:e0:2a:36:89:9d:eb:78:52:19:28:60:82:41:b9:
a7:48:35:8c:97:bd:6f:ff:7b:c7:93:3f:09:cb:3b:
b2:6a:35:48:74:15:8d:b2:0a:12:44:21:9e:09:06:
d3:3c:fa:a4:00:2b:67:1a:a7:ff:9a:dd:d5:f6:9c:
e0:cb:5f:f8:c4:0f:2f:ef:2f:b1:bd:d9:fb:e1:a9:
cd:e6:e7:9c:ae:d0:8f:68:78:32:c6:bd:c0:b8:77:
0f:c1:ce:ad:91:e9:62:76:67:ff:9e:b1:b8:1d:05:
61:e5:6a:f8:32:63:b7:40:d9:c6:79:9e:55:49:1c:
0a:6d:6e:01:ab:d7:cd:22:68:35:97:ee:af:08:27:
6b:15:93:62:05:9e:1e:01:25:13:72:89:c7:98:cd:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C1:8D:25:F9:DA:8C:DD:FE:8A:7A:A4:03:00:BB:35:75:E9:10:4B
X509v3 Authority Key Identifier:
keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:82:da:01:b0:9f:20:1a:e0:e1:08:bf:43:b1:f3:90:50:09:
28:ec:8f:2c:35:e2:13:de:81:9b:9c:46:1d:f9:1e:41:c1:cd:
64:dc:43:fa:c6:e2:b8:94:02:b0:c3:92:e9:e6:e9:dd:d9:d1:
bc:be:84:12:38:e9:28:f5:d1:ce:5c:86:da:1d:d6:eb:81:9d:
1e:be:17:66:64:2e:6d:36:9e:97:2c:04:b1:fe:30:d7:bb:9c:
e2:ed:1f:49:9b:ee:ee:d3:21:f0:fe:94:c7:fb:d6:ec:f1:72:
75:b8:e8:49:cc:da:e6:0b:2c:5a:de:c5:fe:f3:01:a0:28:cb:
54:ee:a0:1a:77:37:32:d2:b2:f0:3e:cd:8c:8e:0c:b5:b4:26:
2d:76:ef:8b:01:f9:79:e5:4e:02:5c:25:ae:d9:ed:ef:a4:ba:
4d:e1:18:b6:6d:72:ef:b9:99:29:c4:76:42:e5:73:c3:51:b9:
2f:f9:cb:a3:6d:24:13:eb:b7:b5:63:32:65:12:40:11:71:38:
72:6a:95:56:eb:f5:34:94:29:83:2e:f4:b2:62:2f:76:01:e8:
56:db:18:8b:2f:73:bc:96:22:49:07:89:e5:27:73:85:e5:65:
cd:a9:a4:42:1e:9e:62:41:68:54:57:85:60:b8:38:26:28:18:
63:4d:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:51 2025 by rpki-client