Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File: YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier: QDbWFrC87Ey+WuVDCJmKoBx62mL4lmpMGPmQ3YfXtxg=
Subject key identifier: 71:79:2F:B2:DA:2C:4C:E8:2E:9E:CF:F1:21:3C:B6:65:0B:A5:37:70
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer: /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial: 019A7301BDBDFD13C23B3ADF9C217BDF1FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:01:25 +0000
Manifest this update: Tue 11 Nov 2025 13:01:25 +0000
Manifest next update: Wed 12 Nov 2025 13:01:25 +0000
Files and hashes: 1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: S/nYeoE8zWoCxXH5QV2jCqekwhD6r7q2KY6kharkRfw=)
2: i1y7TAu4eZuINLnbMHWhraWkV7Q.roa (hash: 5W2nC+zCGbvk80Gay8OtFwwtbb47Ru26+BBu/lW2iZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:bd:bd:fd:13:c2:3b:3a:df:9c:21:7b:df:1f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Validity
Not Before: Nov 11 13:01:25 2025 GMT
Not After : Nov 12 13:01:25 2025 GMT
Subject: CN=71792fb2da2c4ce82e9ecff1213cb6650ba53770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:53:d3:24:a2:9b:be:0e:1a:57:1b:ad:99:
76:e4:19:21:a9:90:d3:99:98:ce:ac:97:08:cf:53:
50:74:7d:d8:9b:dd:8f:87:f8:9e:46:cf:a4:55:9c:
89:28:2f:be:f6:17:89:55:46:23:64:d9:58:f2:3c:
21:83:45:71:89:12:4d:53:8b:aa:95:29:73:1a:22:
fa:f7:9c:50:ec:b0:45:75:af:33:07:55:62:3d:86:
f3:af:33:d8:ed:85:a8:55:33:a4:9d:b9:d1:c5:4b:
8f:da:c5:4e:67:e1:4c:6e:33:3e:37:d1:c9:a1:f6:
2a:d9:a9:26:2c:b7:a3:83:83:e0:4b:68:9f:62:85:
b6:f1:be:5d:b7:d8:55:5c:8e:89:00:07:6d:6f:e3:
ce:3a:f6:53:1f:2c:93:07:b4:92:79:c0:56:34:9d:
c3:c9:fa:ea:69:d5:c6:bc:31:d4:06:07:70:9a:20:
d2:71:f3:0f:5b:2d:61:b1:21:37:d3:ff:74:bc:8e:
a2:f9:ce:80:63:11:b6:e6:36:a8:8e:b3:0e:93:5d:
c7:75:08:de:64:03:08:76:2a:7c:c9:5a:71:2e:5a:
a4:0a:06:65:b9:d9:2e:9a:1d:8c:11:ce:76:47:86:
1a:7e:08:79:5c:2f:63:1e:cd:7b:7a:b5:16:1e:9e:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:79:2F:B2:DA:2C:4C:E8:2E:9E:CF:F1:21:3C:B6:65:0B:A5:37:70
X509v3 Authority Key Identifier:
keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:5d:26:de:8c:cc:8c:5a:20:66:a4:1f:d3:09:b7:b2:15:07:
b6:6d:07:47:4e:a1:28:66:02:e9:fa:ee:4c:90:85:13:ed:29:
72:16:d4:d2:32:bd:f6:13:05:25:db:e9:d3:1e:21:5a:ea:24:
d2:06:29:be:99:1a:9d:4f:1e:01:fa:9b:b6:9f:61:0a:8e:0d:
c8:1d:69:94:88:34:32:7f:7c:7e:e5:b7:08:7a:10:24:5b:aa:
00:f3:11:69:6e:41:a7:c6:3d:7d:f4:7a:f1:41:89:4a:f4:6a:
15:c1:09:0b:a2:55:ab:b1:54:d2:8a:a9:40:2c:04:8b:de:07:
82:a7:be:e4:e7:58:e4:1d:54:2d:ed:b5:34:d7:0a:8a:ed:f8:
92:5b:4c:dd:db:d3:44:3a:7a:3f:85:f1:43:a8:85:4e:28:34:
7b:b2:02:26:df:f3:8a:9c:b4:d5:50:83:58:3b:66:10:9d:87:
68:16:42:08:20:0f:aa:97:73:9c:89:84:aa:28:08:e0:ec:86:
f5:5c:99:fd:63:a8:c6:df:ab:ce:ef:41:c3:0d:17:f9:46:a6:
a6:9b:5c:52:cd:84:85:b8:ea:18:b1:52:ca:20:73:36:4c:fb:
d8:1f:7e:2c:21:ce:1a:ab:b5:9a:bc:2f:6f:a4:e1:89:7f:61:
fb:24:e7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:40 2025 by rpki-client