Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: jCIe4VrGg2G+JGn7/R0Cg73+V3yCAma6kT4JCA79aP4=
Subject key identifier: 1C:96:5F:29:E6:A8:17:4E:EC:DA:63:3F:0B:8C:7E:A2:8B:DC:D4:90
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 019A71B8665B5ED1EC8C8C0D9C6631204ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 11D1
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: ZULkH66WarDPblAt3c70mY4gmn60FRHJcl68V0kfLNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:66:5b:5e:d1:ec:8c:8c:0d:9c:66:31:20:4e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=1c965f29e6a8174eecda633f0b8c7ea28bdcd490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:81:a8:bc:25:02:ca:a0:9a:51:ad:80:27:ec:
cd:b6:22:b1:e3:68:bb:ff:b8:8d:83:d6:61:09:9a:
60:17:23:8d:2e:e1:61:a8:3b:02:8c:9b:5d:38:f0:
97:70:08:90:a5:ae:35:33:4c:9d:83:fb:5c:50:c6:
ab:f3:e8:b7:64:3a:98:a1:2c:80:88:6f:db:f5:70:
26:67:eb:35:f4:a2:16:21:4c:26:8b:fc:95:31:07:
18:3e:70:81:79:0e:26:63:d8:b3:ef:11:6d:4c:59:
be:af:14:82:e6:c5:c6:8a:5f:6a:6c:d0:83:62:d1:
40:5e:65:3a:40:4f:93:2f:ac:0d:0b:8f:b4:cd:5a:
c8:9c:06:71:76:20:63:9a:93:94:0c:85:80:24:15:
4a:45:2a:02:c1:9d:f3:35:81:89:ac:86:e9:af:58:
1f:98:b5:f8:c1:39:d3:7b:f5:0f:53:67:fc:f0:83:
51:cd:0c:3d:50:57:f9:7a:f2:f7:d5:3c:ea:08:e7:
7e:8b:59:40:37:ea:9f:02:b4:a0:7d:df:b4:95:2d:
cf:eb:5d:d1:25:31:91:2c:ae:fd:03:b7:a2:3e:78:
13:c4:9a:47:1d:1e:e4:45:ee:0e:71:bc:63:a9:06:
d1:c9:f2:4a:ba:7b:65:51:15:26:f9:42:1e:b5:cd:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:96:5F:29:E6:A8:17:4E:EC:DA:63:3F:0B:8C:7E:A2:8B:DC:D4:90
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:45:ea:91:60:51:7d:92:a8:90:e8:b9:bb:7f:6e:78:de:a6:
a2:24:ae:6f:bd:e4:06:78:97:17:d5:49:55:fb:a3:27:2c:dd:
cb:3b:9b:ce:24:80:69:73:d8:76:a9:bc:9b:d6:f8:93:8e:bf:
ec:11:d2:fd:ca:66:28:c1:d6:04:5b:f0:05:e9:99:5a:9e:52:
74:f1:ac:72:7b:08:a8:46:b2:3e:d0:a4:6c:37:f1:9e:c8:d7:
68:ee:8c:cf:60:37:4c:f9:07:b4:97:ba:88:28:c7:d4:2d:8d:
fe:90:85:d4:d5:36:14:fd:f7:01:f5:60:44:eb:e5:c4:ae:3d:
ee:09:fe:e8:fa:c2:b9:23:ee:2a:e5:d1:ed:f4:f7:22:fe:01:
da:30:d2:ea:72:79:04:22:75:39:85:ea:56:e1:d9:ba:d8:9f:
51:fc:2b:0f:30:58:c8:45:c8:40:48:f2:13:6e:4f:7d:ea:e1:
0c:94:66:c4:00:c3:5f:03:d7:be:29:35:4e:ca:70:b3:72:ed:
fd:f9:ce:ca:5b:8e:c5:26:ce:ca:26:62:e1:1f:0c:ba:6c:04:
f9:52:ba:96:a5:e1:34:02:a4:59:f3:89:5e:10:23:6d:02:79:
4c:69:9e:bb:81:04:5b:da:64:02:fd:f2:c9:f8:cb:f4:98:11:
59:d3:0e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:00 2025 by rpki-client