Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
File: YZmtJxLZe7wR4V39skAnE66ADL0.mft (raw, json)
Hash identifier: WnjdBfPYOTX/+IdUouLLXaWdRaK2cFB01xUxa8po5NY=
Subject key identifier: 9A:6B:02:03:48:E2:14:21:98:FC:45:D9:21:7B:51:EC:90:E6:5C:0F
Authority key identifier: 61:99:AD:27:12:D9:7B:BC:11:E1:5D:FD:B2:40:27:13:AE:80:0C:BD
Certificate issuer: /CN=6199ad2712d97bbc11e15dfdb2402713ae800cbd
Certificate serial: 019A722674F5B8EA3A8BB747D1B5BAC8E8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
Manifest number: A4
Signing time: Tue 11 Nov 2025 09:01:54 +0000
Manifest this update: Tue 11 Nov 2025 09:01:54 +0000
Manifest next update: Wed 12 Nov 2025 09:01:54 +0000
Files and hashes: 1: YZmtJxLZe7wR4V39skAnE66ADL0.crl (hash: EmCKGxVVFl97ZeQBwpbNBcvPPayQqjpn0swJ+HOI3W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:74:f5:b8:ea:3a:8b:b7:47:d1:b5:ba:c8:e8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6199ad2712d97bbc11e15dfdb2402713ae800cbd
Validity
Not Before: Nov 11 09:01:54 2025 GMT
Not After : Nov 12 09:01:54 2025 GMT
Subject: CN=9a6b020348e2142198fc45d9217b51ec90e65c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:a2:73:5e:e8:30:8f:76:e0:f5:23:e1:53:
93:67:be:da:5d:2b:c1:3a:99:97:cd:6f:83:57:6d:
85:da:72:4a:ae:0e:88:62:cf:17:dc:9c:23:43:32:
7f:34:9f:e3:92:80:39:d1:d1:7b:9d:1a:f6:19:34:
bb:14:1a:a9:5a:72:d9:42:ef:76:da:32:21:8f:a4:
9a:f3:60:6f:2d:ae:e4:b9:21:54:52:61:30:d8:de:
d1:62:dd:14:11:84:a1:07:c4:b9:24:32:93:15:e0:
9c:12:3e:8a:05:66:c1:da:f4:6f:05:a4:02:e9:77:
25:8d:84:ea:ac:23:07:aa:ef:58:8b:a5:45:f5:d9:
83:c1:28:ec:b0:d0:d9:1e:89:f7:f3:5b:3d:86:42:
fd:cb:39:78:35:e3:4e:83:3f:93:53:0d:f5:12:c2:
33:7b:b2:5a:5e:e4:05:9f:52:71:24:04:1d:47:b7:
10:3a:1a:7a:80:99:7d:b9:15:82:db:a4:33:31:76:
92:3a:a7:ea:e1:dd:b9:7a:52:34:82:93:73:50:4c:
9e:09:7d:2d:89:40:20:a1:2f:68:bf:b0:e6:30:b9:
2d:92:95:e0:de:43:ac:03:aa:c1:f9:dc:46:7d:d6:
3d:b4:0d:3d:cb:c6:3c:f2:e9:ec:85:2a:dd:35:72:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:02:03:48:E2:14:21:98:FC:45:D9:21:7B:51:EC:90:E6:5C:0F
X509v3 Authority Key Identifier:
keyid:61:99:AD:27:12:D9:7B:BC:11:E1:5D:FD:B2:40:27:13:AE:80:0C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:09:79:9b:dc:1e:5c:8f:dc:d3:1f:19:e4:2b:da:c1:19:71:
67:cc:d9:37:ea:8f:84:63:6d:a3:70:7f:11:a3:c2:e2:87:1f:
e3:fd:e8:28:b0:73:cc:f7:ba:5a:66:5f:37:27:ff:a6:e7:0f:
16:e1:c1:c8:59:da:6f:ee:37:fc:a3:11:df:92:f7:99:eb:fc:
a6:c3:d5:5e:ee:55:a5:75:41:68:2e:19:1d:57:5f:68:86:47:
b2:85:8c:0b:50:94:6c:81:db:18:7b:cb:12:7a:e9:90:b5:df:
bf:83:c3:35:17:14:1e:45:3d:95:a7:b0:c0:03:82:50:51:a0:
a1:8d:71:86:be:04:c6:55:57:57:81:02:68:91:75:42:2f:37:
40:80:c7:89:b5:0b:00:ba:2a:0d:c0:75:a0:90:22:0a:da:d3:
b0:9e:a4:f1:dd:00:1d:91:5a:f4:06:28:ed:27:67:29:d7:2d:
0d:0b:63:ed:a4:c6:bd:d1:e1:10:a6:86:9d:83:b9:0e:19:e2:
12:ca:32:cf:05:70:86:80:05:4f:75:4b:22:58:65:4c:c6:75:
2c:7e:a5:e6:19:22:5b:fc:4e:1a:2d:31:76:e9:ba:a9:26:2f:
51:47:2c:f2:1e:a0:c4:fc:06:96:3a:36:f8:31:08:c9:fa:18:
19:9f:54:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:35 2025 by rpki-client