Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: lXz248EozJ2/ehZfxYDZrcxtJuAjR/YUTfXaEINiIIM=
Subject key identifier: 09:A0:69:FD:86:C1:47:ED:48:A3:C4:72:9F:C6:38:5F:F5:02:C9:11
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 019A71B8B529CE31B6C057BDDB639E6C98BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: 8Tz/noSJ+irAYQ4MMSs/NLoDu7jPwTIHiZqlOe2l0tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b5:29:ce:31:b6:c0:57:bd:db:63:9e:6c:98:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=09a069fd86c147ed48a3c4729fc6385ff502c911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:fd:56:80:70:32:c9:0c:40:86:a0:15:7c:
25:c1:85:b0:45:a7:5c:cb:a9:24:07:30:e1:48:9e:
54:9b:27:f3:66:4d:44:c8:1e:0b:e3:d4:60:9e:a0:
4f:46:2a:4b:1f:f6:ad:eb:bc:e9:05:16:c2:a3:8d:
a7:5a:01:b1:f7:fd:cd:1c:b3:e9:6b:22:1e:e0:98:
9d:7f:d4:69:da:dc:16:60:44:ef:52:87:38:4a:46:
d9:8b:c7:76:92:59:29:b7:53:70:68:c2:9d:92:a9:
66:ad:fe:4f:7a:90:e8:38:fe:14:0a:08:28:91:34:
2e:70:f8:30:ea:bd:30:7e:37:7f:2d:01:e4:1a:7c:
3d:82:2d:e2:e7:28:2c:36:2a:68:79:07:71:45:9c:
4b:f7:e0:5c:73:fb:6b:c7:45:a6:79:57:8a:5c:2f:
cf:e1:40:8e:9c:d3:88:5a:73:97:54:98:cf:6e:6a:
d7:9f:1b:bc:23:8d:97:29:19:dd:e7:cc:77:c9:9e:
2d:04:38:dc:75:d7:6b:3a:f7:04:4b:1c:73:3a:c4:
99:3e:da:8d:e7:f9:de:bc:33:a4:ad:91:c9:e5:31:
ab:dc:1f:a0:c9:5c:48:63:bc:c7:1b:c6:c9:cc:bd:
ff:f5:aa:48:16:d0:a1:d7:32:de:ae:7f:ef:f4:7b:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A0:69:FD:86:C1:47:ED:48:A3:C4:72:9F:C6:38:5F:F5:02:C9:11
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4d:8e:4c:ba:7a:c0:24:02:dd:8e:87:e2:31:e3:98:25:f1:
bd:45:72:89:35:80:6d:50:31:2f:20:e6:7e:73:a1:1c:d0:67:
d4:b4:ef:37:7c:4e:d7:3f:81:8f:67:e1:60:43:d7:d6:4b:84:
0c:d2:e6:48:80:b1:91:98:6a:e4:56:a5:d5:f6:4c:73:d2:c1:
60:63:21:f8:8f:5d:40:fd:39:56:73:48:9a:d8:56:99:09:00:
40:42:80:92:da:b6:86:b8:c5:7b:61:e0:69:fe:82:ef:40:2e:
0a:15:d7:9f:f0:9d:7b:dc:ba:dc:ee:83:e6:46:e9:6d:04:65:
56:82:b8:20:60:d5:fd:a9:07:e8:9c:b9:a6:13:e5:7b:2b:dd:
d7:62:63:93:39:48:ff:9c:b3:8a:6d:49:3d:94:7a:60:df:46:
36:c7:3e:7a:9c:b4:0f:8e:1c:c8:78:ac:02:09:e7:1b:a4:ed:
a6:1b:5e:a0:74:39:36:67:a7:cc:1f:b6:89:93:97:b6:1f:52:
26:1a:76:6e:41:a5:b9:86:b4:d8:83:4f:e1:3f:70:0b:a8:ef:
c8:3e:58:ae:b5:38:eb:16:14:7d:85:9f:2c:81:eb:91:e1:13:
66:e3:31:2c:e1:7e:95:1f:58:4a:d7:ab:68:98:51:38:a7:7b:
98:6c:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:12 2025 by rpki-client