Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier: px7sV/+r6sqDqufmB+sUDEwZ5sGt1BPx7nrERh+jnto=
Subject key identifier: F0:45:6C:C5:81:EF:62:71:C9:19:E0:D3:CE:9B:B4:80:A3:DD:BF:A5
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial: 019A73014CBD0AA5E1601AD445F371AD1AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number: 13B4
Signing time: Tue 11 Nov 2025 13:00:56 +0000
Manifest this update: Tue 11 Nov 2025 13:00:56 +0000
Manifest next update: Wed 12 Nov 2025 13:00:56 +0000
Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: M8OESajY92A/WFBAzOu1g5Nig6N28PqOl8AXEOJeiUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:4c:bd:0a:a5:e1:60:1a:d4:45:f3:71:ad:1a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
Validity
Not Before: Nov 11 13:00:56 2025 GMT
Not After : Nov 12 13:00:56 2025 GMT
Subject: CN=f0456cc581ef6271c919e0d3ce9bb480a3ddbfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:8e:c6:ee:a7:e5:75:36:f9:0d:4e:d2:4c:
02:c7:46:c3:1f:5d:bb:74:9c:49:19:bd:a4:db:0e:
05:47:cb:db:83:36:01:df:e2:67:01:3a:58:ed:10:
32:6b:f1:6a:34:05:81:47:06:c5:2e:41:13:c5:e4:
7b:7f:e0:08:39:a1:25:a2:c7:8b:66:d7:b5:e5:57:
9e:3f:33:32:10:ed:dc:4f:e7:b5:38:a3:75:e3:1e:
12:1e:d6:07:26:1b:ea:18:84:06:59:32:f7:fc:36:
9d:f6:89:5a:b9:48:ad:0f:32:27:e2:d7:7d:7e:1e:
c0:3f:e0:87:d2:71:9a:47:66:14:ef:b7:cb:f6:8f:
c4:86:4d:b2:bb:9a:7c:df:8b:87:33:b0:27:ec:78:
7e:98:db:d4:96:a9:15:ab:74:0f:ea:4e:c2:67:f8:
12:1e:67:0a:f8:50:11:2d:24:d5:c3:9f:c8:9b:a0:
dc:25:42:45:8f:10:72:e0:05:cd:70:8f:e0:4a:e6:
44:f3:f2:40:f5:e7:9a:90:ec:2b:67:01:a0:a3:8c:
7e:6b:d7:20:ac:8f:a9:51:9a:6d:de:20:62:3d:f8:
6f:d9:df:66:82:b3:76:5a:7a:b8:1a:3d:c5:06:44:
3a:b6:bd:56:7b:48:f5:2b:b1:49:92:0d:61:78:fc:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:45:6C:C5:81:EF:62:71:C9:19:E0:D3:CE:9B:B4:80:A3:DD:BF:A5
X509v3 Authority Key Identifier:
keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:af:27:71:e5:ea:68:31:25:5e:f9:68:5e:7f:f8:35:b3:07:
7e:8d:c1:8a:46:e5:c6:74:7c:93:13:0d:d8:d8:ec:d6:00:57:
a0:fe:c0:72:cb:71:47:a6:99:67:32:7c:63:28:4f:3b:d9:a9:
76:65:d5:8f:b0:b7:47:48:09:46:d0:c2:7b:09:5a:59:d8:3e:
89:eb:93:d5:eb:89:bb:29:c4:ae:60:a5:56:79:46:e6:bc:7a:
e7:74:d8:00:7b:42:fc:e8:02:13:a0:16:00:e9:31:61:82:40:
63:40:5b:80:82:3e:91:33:4d:fe:96:51:6d:27:1e:e6:4c:a3:
d7:a6:d7:2d:25:d2:2b:b9:6f:9e:e3:99:cf:8e:b4:fc:25:1b:
2c:04:30:74:9a:0d:fb:a2:8c:d6:77:b4:ba:3b:25:ff:eb:14:
cd:d0:98:4c:71:79:a8:70:e1:89:20:3f:cf:9e:d2:c0:5f:ac:
a4:e7:cc:4a:cf:9a:de:8e:2f:fb:53:c9:fd:69:c8:0f:07:97:
c7:7e:72:83:ee:da:c2:3e:91:24:d6:42:eb:6f:7d:95:3a:2a:
b8:ad:cc:ed:9a:72:56:99:d2:ad:7f:d3:96:d0:a4:4b:41:64:
e4:b3:b0:aa:97:3e:c6:a3:9a:6e:2b:97:a7:3a:26:09:79:20:
d1:a7:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:06 2025 by rpki-client