Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier: qQwD8wGQcU5SLKsHT8Jz9kkW96RXVx8oDrlgeRPKwwA=
Subject key identifier: 0B:03:7F:CF:F9:DE:AB:1E:91:55:22:01:64:46:74:4C:DA:5E:0B:22
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial: 019A4D061F77FCA5BAAD29FF27C257DBCA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number: 120A
Signing time: Tue 04 Nov 2025 04:00:38 +0000
Manifest this update: Tue 04 Nov 2025 04:00:38 +0000
Manifest next update: Wed 05 Nov 2025 04:00:38 +0000
Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: /9jb5KHIbttawc2bhEKq3rPIMJVZB1Qe2XNCUQjcvE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:1f:77:fc:a5:ba:ad:29:ff:27:c2:57:db:ca:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Validity
Not Before: Nov 4 04:00:38 2025 GMT
Not After : Nov 5 04:00:38 2025 GMT
Subject: CN=0b037fcff9deab1e915522016446744cda5e0b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:c2:73:c8:71:e9:8f:2d:93:1d:4a:0b:72:
88:e7:6d:45:71:d9:7c:ec:c3:a4:67:be:b8:12:74:
a2:96:5f:d1:03:67:79:11:ff:a9:9a:0e:f3:13:75:
e8:6a:95:97:33:79:cd:63:1c:cd:20:43:f9:72:af:
57:bb:1d:21:eb:df:b9:70:6f:a5:8b:0d:f7:6f:12:
d7:14:5b:78:30:4c:70:81:c7:48:2e:bb:29:3c:a2:
3c:29:1b:9f:3a:e1:80:3a:90:98:59:86:32:76:2b:
1c:8b:c6:61:be:26:92:ea:d9:cd:e9:d3:de:85:cd:
5d:80:85:7a:64:38:59:77:dc:b2:ff:d0:18:6b:b8:
44:fe:75:8e:a9:cd:9a:c4:e1:b3:2c:76:79:61:26:
6e:a3:8d:9d:1f:6e:61:5e:74:76:3f:6c:8d:78:ff:
75:14:57:c0:c9:97:12:3f:c7:cd:a9:0a:93:c6:c3:
fd:65:6f:ef:0e:98:01:a3:6d:dd:01:65:8f:22:cd:
b1:30:93:1d:84:32:f9:9b:8e:f5:e7:53:30:ff:61:
bb:66:56:6b:9f:a7:80:81:f7:b4:64:02:71:55:09:
4b:68:02:95:cb:f5:da:b7:29:70:5c:f4:32:52:20:
ae:e4:47:11:7d:c6:2a:a7:58:1d:48:89:58:bc:0e:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:7F:CF:F9:DE:AB:1E:91:55:22:01:64:46:74:4C:DA:5E:0B:22
X509v3 Authority Key Identifier:
keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1b:72:7d:a5:26:3e:ff:d9:d1:51:9b:d6:4b:77:fd:aa:23:
9f:08:88:ea:39:ee:c6:3c:98:db:36:75:9c:4e:7f:c9:de:d3:
5e:f9:3d:95:52:5a:9a:ae:54:d1:8f:e8:3a:5b:75:17:63:5c:
4d:01:f6:3c:a8:42:1b:0a:05:b0:9a:88:94:9a:e5:89:9f:0a:
4f:38:25:67:a2:3c:ef:b7:c5:1f:3f:56:22:c2:53:9c:5b:26:
c0:2d:c9:01:89:7d:7d:95:11:71:d8:e7:d2:dc:fb:38:9f:71:
48:85:c1:af:a2:12:d6:c6:4f:fa:04:99:d4:55:b5:e8:e3:49:
a7:30:00:c4:cd:2c:56:cf:db:52:39:88:e6:23:94:e0:f0:74:
33:f9:cb:71:33:f8:58:a3:a5:ed:44:7d:f9:fa:ea:05:7a:e4:
d2:8d:ea:82:6b:90:d2:e1:e2:55:ea:41:e8:f5:b0:63:74:7e:
31:6d:e2:ef:d3:af:d8:4e:d2:6d:85:55:f5:70:51:be:8d:2b:
fd:89:b7:4d:e6:6b:ee:50:fd:91:3c:ba:92:b3:bb:6c:8f:e8:
0c:18:96:ec:a6:8d:94:2e:49:89:04:0f:13:62:bc:cf:9f:2c:
b4:80:66:ad:cb:a8:68:75:6d:3b:b9:1f:f6:83:e6:3b:0f:c3:
72:50:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:09 2025 by rpki-client