Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: OqfL6oQWgnWCryumKo2+y7M11vl+t8J68djnyxAZL6E=
Subject key identifier: 34:20:DC:21:C1:00:22:A5:DD:B8:85:B5:C1:29:39:3B:67:5B:3A:D3
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 019A71B85A332F39369C271E8E312E55C333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: GdoHoT6PLo95/Bs5qG2jvPWaAvCASwpaG6mjWITX5HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5a:33:2f:39:36:9c:27:1e:8e:31:2e:55:c3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=3420dc21c10022a5ddb885b5c129393b675b3ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:5d:6a:fd:ae:e5:8e:ba:9d:e0:9a:e2:77:
99:db:d6:4d:78:e7:4a:0b:a4:1c:34:15:b7:0e:a5:
3c:28:36:32:bb:9b:44:0c:b0:42:e9:e1:d2:a2:03:
eb:ae:76:6d:96:33:3b:a1:6e:cf:c2:7c:f4:09:e2:
2f:92:7a:35:3d:fb:fc:49:e5:11:e4:86:44:fa:fe:
86:80:96:d4:cf:4d:26:87:38:78:c4:b7:ab:24:c2:
f7:7e:e9:28:26:d9:9a:50:81:9b:b6:40:1e:4a:35:
83:21:e5:20:b1:c3:25:61:cc:ac:92:ea:4e:62:ed:
df:ff:c7:26:b2:16:64:d0:00:a6:1f:1c:07:9a:f2:
55:45:85:a7:34:54:c1:16:a7:ec:aa:35:56:80:87:
a3:24:2e:8e:91:ff:b3:33:5f:29:a1:50:79:9f:e8:
2e:4b:a6:14:4e:b2:ed:3a:77:0b:9c:39:89:cd:4a:
65:b0:ab:a9:1a:3f:1c:75:0e:5f:4a:ab:10:eb:8d:
b8:67:8f:29:24:30:f0:ae:70:c0:1e:32:9b:89:f3:
ef:16:af:88:95:79:29:9f:a6:a4:4e:a1:8f:a6:5c:
d2:c9:e3:ba:17:d2:19:25:fd:6b:f3:93:99:5e:6b:
59:fd:db:11:7e:07:dc:e1:34:f7:fd:bb:fe:40:42:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:DC:21:C1:00:22:A5:DD:B8:85:B5:C1:29:39:3B:67:5B:3A:D3
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a8:bd:9a:86:f1:0b:9b:f5:db:da:91:9c:5f:96:02:ff:a3:
ef:f0:66:b1:1d:3c:31:e9:01:37:7c:69:05:69:7d:75:30:c5:
8b:68:87:13:ec:59:9a:01:95:b3:f6:d5:de:3f:1c:04:cb:a6:
e5:b6:f8:45:91:eb:20:2a:7f:29:af:97:9e:69:92:26:16:c4:
f1:bb:ff:7f:ef:e8:cf:db:f6:59:a6:15:55:c4:6a:88:9c:72:
fe:f6:da:1c:7a:bd:4d:fe:90:d2:13:66:6b:82:dd:f0:2e:f8:
31:d0:31:aa:02:a0:d3:10:0c:77:87:eb:3a:24:4d:c6:97:04:
01:d7:cd:9b:67:5b:b1:8a:b1:f2:89:0e:75:19:a7:9d:ac:01:
5b:26:6c:ba:6e:35:f5:24:fa:38:8b:a5:cb:89:9c:9c:c1:f2:
94:51:10:34:90:96:65:70:95:b2:70:33:62:f8:09:af:99:b1:
94:0f:95:5a:c5:3b:bb:52:28:8c:a5:1f:f7:e8:24:10:cf:c2:
69:4e:8c:ef:5f:bb:69:ac:62:6c:50:a9:1c:11:49:72:5e:86:
28:5f:a3:72:9d:e4:cc:36:ad:b1:af:ff:06:11:86:0b:ea:f9:
fb:18:10:cf:65:d7:81:67:33:9d:a5:aa:58:a6:f3:74:e1:3f:
42:d3:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:21 2025 by rpki-client