Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
File: y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft (raw, json)
Hash identifier: B1r/9Wl7vekaInE75E9u1cCrUmTnCfEVC2LEiV+Ofy0=
Subject key identifier: CD:9E:45:74:F3:72:8A:74:E8:6D:53:C8:7C:53:5A:22:C9:BE:37:4B
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial: 019A4D07A24D2E8F66316509037B2DBF7880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 04:02:17 +0000
Manifest this update: Tue 04 Nov 2025 04:02:17 +0000
Manifest next update: Wed 05 Nov 2025 04:02:17 +0000
Files and hashes: 1: y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl (hash: siCqyOnrAFSF/lJyiBqN8ARlDtP6PUZ+8yeCzk9cmNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:a2:4d:2e:8f:66:31:65:09:03:7b:2d:bf:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Validity
Not Before: Nov 4 04:02:17 2025 GMT
Not After : Nov 5 04:02:17 2025 GMT
Subject: CN=cd9e4574f3728a74e86d53c87c535a22c9be374b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:06:95:f5:f1:d7:0f:b4:02:13:f5:30:15:
7a:29:9f:68:a6:a3:20:94:e2:c6:48:0f:83:e6:ae:
5e:2d:2c:a9:c8:1c:77:6b:2a:cf:21:da:45:1e:6d:
29:c0:d1:a0:01:12:46:70:d2:d2:d0:eb:20:29:3a:
21:51:72:a9:8d:f4:a2:83:e9:06:aa:72:f1:66:b7:
b3:41:da:06:91:66:43:dd:2e:c7:88:09:04:e8:7e:
14:ca:64:c8:94:72:58:24:33:f0:65:96:ab:92:d4:
11:cb:71:7b:6f:20:55:b2:52:19:42:64:e5:c7:30:
50:94:97:4d:14:3f:0f:2c:cf:54:f5:44:89:c9:38:
92:73:aa:55:1e:01:2a:4f:b7:4e:49:c7:3d:a9:a6:
f4:02:4e:e4:32:58:39:a2:9e:8a:c6:99:a0:2c:7b:
3e:ab:72:ed:b4:a2:b9:76:49:a0:f6:0b:b9:d0:31:
d1:de:07:b3:84:56:c9:30:64:5f:bf:9b:e7:42:17:
e9:0c:f6:fe:05:c9:46:3f:4b:d0:99:f1:d1:be:79:
d1:25:0e:fe:a9:80:fe:0c:00:6f:a1:71:10:92:fd:
1f:05:03:43:e4:8e:4d:cd:2e:ec:94:98:a4:6d:3d:
06:f0:9f:c3:14:b4:eb:8f:91:38:96:2f:ce:24:e5:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9E:45:74:F3:72:8A:74:E8:6D:53:C8:7C:53:5A:22:C9:BE:37:4B
X509v3 Authority Key Identifier:
keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:3a:58:74:0a:a0:26:93:92:5d:0e:fc:18:a1:48:cf:97:
96:49:3b:36:15:76:5d:d6:64:7c:17:21:f7:ae:d7:63:93:d0:
99:31:82:cd:05:c0:9f:89:e5:cb:fc:c2:fb:02:5b:e8:93:a9:
27:ae:9c:74:a1:59:12:e5:87:40:32:91:19:93:15:a0:9f:b8:
c7:15:bb:a5:e6:29:65:6b:5e:66:ff:6f:c8:48:76:cf:a0:21:
55:27:5d:01:23:4f:da:ae:4a:01:f9:fc:74:06:95:4a:1b:9f:
74:6f:fa:52:34:c1:b4:12:91:10:6d:8f:ee:5b:4b:08:d7:8d:
51:08:30:a1:39:d1:f1:35:2b:ca:b4:55:d2:1d:66:c8:cd:20:
9a:22:69:8e:4e:f0:b8:26:1f:f2:76:c2:dc:2c:c3:44:7c:c4:
db:91:9d:e0:f0:38:3c:a8:26:3c:74:03:10:83:2b:87:db:56:
cf:a3:34:7b:fd:3b:89:f2:31:f0:bb:87:15:3b:77:0f:a3:6a:
b5:57:88:3d:dd:0b:32:1c:f9:52:ad:52:2e:d0:96:62:74:cf:
94:44:28:9f:c8:21:00:08:18:8f:61:64:83:14:5e:68:21:55:
34:80:c4:8d:56:8b:81:32:a7:f9:94:cc:51:d3:38:2d:a6:a8:
d9:e1:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:35 2025 by rpki-client