Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: e/Hhh1Jejno1snGxfgdUf+mJX+wpfpa44KCVq/fAYZA=
Subject key identifier: B3:40:21:17:C5:0F:93:E5:40:33:F7:71:6A:10:BE:B5:B5:50:59:3E
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 019A72934035A28B0CE65AE99133201EBB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 1441
Signing time: Tue 11 Nov 2025 11:00:43 +0000
Manifest this update: Tue 11 Nov 2025 11:00:43 +0000
Manifest next update: Wed 12 Nov 2025 11:00:43 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: +Bp48KzSQHpbzMlWy4lq+ay9hIfVDtE2TKC1C1ph+zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:40:35:a2:8b:0c:e6:5a:e9:91:33:20:1e:bb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Nov 11 11:00:43 2025 GMT
Not After : Nov 12 11:00:43 2025 GMT
Subject: CN=b3402117c50f93e54033f7716a10beb5b550593e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:6f:a7:23:c4:0e:d8:4b:0b:95:b9:f2:b7:
5c:28:83:ac:43:ec:11:ed:3f:f6:e2:9f:47:ab:48:
82:39:4e:d2:e6:6c:83:b1:a2:42:50:60:30:85:3a:
72:69:bd:e2:73:b3:d1:12:ed:b4:c0:68:1c:c1:36:
8a:29:a7:a4:6c:10:c5:2f:e5:21:dc:ec:e2:0d:90:
f2:59:6b:f3:25:29:9b:96:28:37:fc:d7:8a:79:5c:
ed:61:a1:10:c5:45:0b:b9:2e:53:ca:06:7a:b3:c7:
a9:cd:74:ee:03:f6:70:fd:cd:17:a9:d6:f9:23:14:
c1:5e:c9:b7:14:bd:b3:bb:c0:8d:e1:cd:e9:8c:5a:
1a:39:7c:0f:ae:d1:43:8c:8e:31:53:96:7e:3b:80:
19:a2:33:21:54:a9:42:62:d6:c0:28:d0:55:22:ec:
18:65:f2:f5:68:5a:1e:fa:34:44:05:63:d4:b8:87:
20:d6:23:fb:af:8b:77:97:65:6b:5e:46:de:54:b4:
dd:73:71:39:f0:25:eb:2e:81:30:3f:e4:2b:52:49:
09:3b:a0:35:e0:5c:0e:49:76:c4:83:bd:7b:5d:16:
2f:89:0d:e7:0c:1a:9c:8d:4c:c6:5a:46:29:5c:68:
dc:c9:8d:23:d6:8b:f2:09:8d:c5:0e:52:21:92:4e:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:40:21:17:C5:0F:93:E5:40:33:F7:71:6A:10:BE:B5:B5:50:59:3E
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dc:ab:14:a1:0e:00:1c:8f:b0:4a:ac:3e:f2:3a:70:09:d7:
4c:9e:6d:c7:ae:a1:61:d7:b6:37:ea:e0:60:1d:78:a7:f7:5d:
aa:7a:36:ea:97:cd:9e:27:05:52:b3:3d:75:e3:11:a0:08:6a:
86:13:06:d3:ea:5f:04:ae:4a:9a:4d:0c:5e:2f:28:64:44:b6:
5a:7a:9c:02:2b:82:46:ef:3b:ca:e3:3f:43:ba:ec:02:7a:3c:
be:ea:68:c0:37:1c:ae:43:e4:1f:97:aa:95:20:52:96:2d:d4:
80:fd:33:17:f3:5f:a6:74:42:da:07:03:c7:09:d9:fd:bf:10:
de:d1:0f:97:5a:d6:89:45:67:c3:60:a3:6a:59:78:20:06:55:
47:90:48:2c:94:f5:33:3b:9f:f1:dc:42:09:56:54:5a:2e:51:
33:7f:d9:42:69:a2:cd:6a:c1:d7:c3:83:af:33:79:f2:94:b9:
74:7e:1c:9a:8a:b1:ea:92:ae:19:46:b6:6c:7a:05:be:32:88:
ad:5d:be:c2:ff:f9:a6:c6:56:ef:7d:36:8e:73:93:f3:f6:a5:
01:62:8f:dd:3e:88:9e:2e:44:7f:16:07:c7:88:89:c9:b3:34:
a6:2c:6c:9b:3d:4b:8e:03:97:df:f3:85:37:2b:ea:27:89:24:
8e:8a:c1:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk0A1oosM5lrpkTMgHrseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGZmYTA0NWIzNWIxNmRjOTk0MTllM2UwZTZlMTZlNmVk
YjQ3ZTkwHhcNMjUxMTExMTEwMDQzWhcNMjUxMTEyMTEwMDQzWjAzMTEwLwYDVQQD
EyhiMzQwMjExN2M1MGY5M2U1NDAzM2Y3NzE2YTEwYmViNWI1NTA1OTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJVvpyPEDthLC5W58rdcKIOsQ+wR
7T/24p9Hq0iCOU7S5myDsaJCUGAwhTpyab3ic7PREu20wGgcwTaKKaekbBDFL+Uh
3OziDZDyWWvzJSmblig3/NeKeVztYaEQxUULuS5TygZ6s8epzXTuA/Zw/c0Xqdb5
IxTBXsm3FL2zu8CN4c3pjFoaOXwPrtFDjI4xU5Z+O4AZojMhVKlCYtbAKNBVIuwY
ZfL1aFoe+jREBWPUuIcg1iP7r4t3l2VrXkbeVLTdc3E58CXrLoEwP+QrUkkJO6A1
4FwOSXbEg717XRYviQ3nDBqcjUzGWkYpXGjcyY0j1ovyCY3FDlIhkk4NHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNAIRfFD5PlQDP3cWoQvrW1UFk+MB8GA1UdIwQY
MBaAFNmP+gRbNbFtyZQZ4+Dm4W5u20fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAt
ZWUyNWQyYzViNDEwLzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAtZWUyNWQyYzViNDEw
LzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNyrFKEO
AByPsEqsPvI6cAnXTJ5tx66hYde2N+rgYB14p/ddqno26pfNnicFUrM9deMRoAhq
hhMG0+pfBK5Kmk0MXi8oZES2WnqcAiuCRu87yuM/Q7rsAno8vupowDccrkPkH5eq
lSBSli3UgP0zF/NfpnRC2gcDxwnZ/b8Q3tEPl1rWiUVnw2Cjall4IAZVR5BILJT1
Mzuf8dxCCVZUWi5RM3/ZQmmizWrB18ODrzN58pS5dH4cmoqx6pKuGUa2bHoFvjKI
rV2+wv/5psZW7302jnOT8/alAWKP3T6Ini5EfxYHx4iJybM0pixsmz1LjgOX3/OF
NyvqJ4kkjorBTw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:05 2025 by rpki-client