Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier: 9zQut7m6IsQUWanH8UCpO8zaL3KteuHirpPNAv80HkI=
Subject key identifier: D8:62:F1:73:37:5B:71:22:9B:15:98:57:91:97:A9:E9:C0:53:DC:52
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer: /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial: 019A72CA222EFC06B9742CDF1893E94C4252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number: 0BB0
Signing time: Tue 11 Nov 2025 12:00:40 +0000
Manifest this update: Tue 11 Nov 2025 12:00:40 +0000
Manifest next update: Wed 12 Nov 2025 12:00:40 +0000
Files and hashes: 1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: o9L2ifDlcW0o0Xdx9PdTuBDbwojARl3LB46ZNQLDasE=)
2: vzcqP3LvlK_sQg8vPWTBe97Nav0.roa (hash: 3HGCRFI+BCpq9Cd0n6gj7Tnh3DZvLgpQucs3TlDSYJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:22:2e:fc:06:b9:74:2c:df:18:93:e9:4c:42:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Validity
Not Before: Nov 11 12:00:40 2025 GMT
Not After : Nov 12 12:00:40 2025 GMT
Subject: CN=d862f173375b71229b1598579197a9e9c053dc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:55:f5:35:a0:d2:6b:89:94:c6:90:d3:4a:
2a:7e:66:82:da:bd:a4:c1:7d:ce:6b:8f:98:1b:29:
0c:1a:3f:41:8e:12:8f:d5:b3:cf:32:1f:23:3c:51:
c7:50:02:20:ad:9f:00:18:11:f5:30:e0:6d:3e:8e:
a3:9e:95:1f:c4:10:22:c5:20:38:f7:e6:3e:14:a7:
a7:80:58:e3:97:95:0c:32:53:63:57:ff:2b:a0:9c:
e4:f7:fc:39:2e:5a:2e:ff:3c:7f:a7:65:7f:4e:cf:
4c:03:96:d2:d1:9a:af:d9:20:d8:3c:81:39:ee:e3:
5c:e0:7d:f9:28:87:f7:8a:eb:2b:4e:0a:7c:ed:89:
5e:44:03:11:a8:a8:c7:de:ad:11:b9:86:86:6f:33:
72:5f:ca:19:e8:1e:b0:48:59:c1:db:62:80:b7:0a:
17:55:37:81:f9:65:2d:08:5d:e8:d8:0e:66:4d:1c:
a0:79:bf:ad:0a:62:d1:5f:9f:64:e5:88:b3:f8:88:
3f:75:ca:cf:0f:f6:91:00:06:56:f6:58:df:b5:c9:
65:ff:c8:dc:be:08:c6:d0:48:c2:be:e0:cb:78:df:
d1:38:c3:d4:ca:00:00:e8:4e:b8:5d:f4:98:61:39:
87:2c:7a:68:7a:5b:ca:ae:c7:c9:58:59:30:45:29:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:62:F1:73:37:5B:71:22:9B:15:98:57:91:97:A9:E9:C0:53:DC:52
X509v3 Authority Key Identifier:
keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e6:22:8e:e8:86:a9:30:be:69:15:07:5a:bd:5c:63:35:14:
af:a8:20:26:0a:27:62:e2:9a:31:76:b3:e7:fd:8b:3c:df:b1:
00:39:02:a8:6c:46:5c:bf:35:cf:04:6e:93:f6:7f:31:2f:d6:
e4:8e:0c:73:0f:73:60:c2:d1:4f:83:6b:1b:44:94:d1:4f:0e:
4f:ae:1f:f7:90:5a:02:91:18:b6:18:7a:f6:c2:e8:51:c1:91:
70:6b:db:d3:97:c8:27:ff:e1:b9:5a:85:97:0f:0e:d7:04:51:
e6:db:ae:c1:f3:36:98:ac:f9:69:19:59:8a:e0:e7:85:4d:04:
fd:22:04:f7:c0:d3:0d:a9:ad:ef:73:1c:fb:64:8a:62:9f:9c:
61:62:4f:bf:27:57:61:0e:80:c9:0e:5e:dc:4d:e8:95:69:6b:
bd:8c:25:b7:f1:4b:2d:3b:05:a3:c2:d1:09:0a:e9:a3:8e:0e:
99:95:a7:ba:e9:78:16:e3:ac:4e:ca:cf:e9:40:ce:54:de:b4:
5c:33:94:0d:21:5f:21:ed:8a:66:cc:95:20:23:2a:8d:eb:c5:
30:2c:12:a9:14:c6:9e:84:25:06:8d:73:f6:10:d4:d1:6c:e9:
cb:6b:fe:32:83:56:39:13:2e:ba:b7:ca:3d:a2:9a:f4:5a:a8:
04:e2:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:18 2025 by rpki-client