Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: hNAKijN25YjtIJ217NUnRABwsXyeIeFUhxFLe0Pg9EM=
Subject key identifier: 8E:B3:B8:2B:18:60:77:6D:43:BA:DF:3D:02:04:3B:47:18:95:1E:FB
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 019A4DE1A47E30BDF76F06C2E5F6EAD6618D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0CEE
Signing time: Tue 04 Nov 2025 08:00:24 +0000
Manifest this update: Tue 04 Nov 2025 08:00:24 +0000
Manifest next update: Wed 05 Nov 2025 08:00:24 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: FNewwGLvTly/NIOeZI8X8hPUMYsbVlAT2GMrdnnOkB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a4:7e:30:bd:f7:6f:06:c2:e5:f6:ea:d6:61:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: Nov 4 08:00:24 2025 GMT
Not After : Nov 5 08:00:24 2025 GMT
Subject: CN=8eb3b82b1860776d43badf3d02043b4718951efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:50:a7:f7:44:8c:7c:6f:7e:bd:af:5e:cb:
ed:58:bc:ce:6e:23:9b:72:44:fa:c1:9f:7a:a4:3d:
8d:3a:0e:1f:d4:48:0d:92:90:c8:c8:86:14:5e:bd:
cb:6b:04:65:55:4e:34:27:cb:23:64:ca:d3:63:a1:
d5:1a:00:64:9e:6c:b4:9f:b8:8c:d3:9f:63:8d:48:
bd:1a:2d:48:4d:03:df:9d:4b:f4:9c:f8:40:26:33:
8f:19:12:87:93:92:94:2c:da:b9:d9:e9:7b:34:16:
b9:81:aa:8b:e3:f6:78:26:c1:1b:44:6f:6d:9c:3a:
fb:ab:1b:13:f0:a3:74:c3:73:e9:d4:7a:0b:b3:e3:
b2:91:4a:57:d5:fe:05:e0:21:bf:1f:69:9d:e7:f7:
b3:97:65:33:a9:15:7b:a6:0c:da:64:f2:e1:9e:e0:
66:19:01:d5:55:e2:1b:15:e3:0e:e3:d3:44:ab:5d:
24:e4:d5:79:f1:79:9f:e1:6a:73:74:1c:4e:fa:39:
7d:a8:a7:a2:a7:1e:29:fc:bd:aa:67:0b:2e:c9:47:
cc:46:37:2a:01:eb:b2:c6:9f:b5:c1:b3:14:a9:62:
e5:90:c9:2d:da:16:73:de:35:29:e2:cd:a6:67:30:
a8:3e:60:1e:9c:27:54:d0:b4:ee:5b:ed:2e:9d:ef:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B3:B8:2B:18:60:77:6D:43:BA:DF:3D:02:04:3B:47:18:95:1E:FB
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:71:76:16:f9:17:55:1d:e5:31:2a:95:bf:83:e1:b3:24:0a:
64:84:c2:2c:05:c9:5e:2f:6e:71:57:88:28:36:d5:42:50:9c:
6b:55:80:50:dc:e4:40:61:97:f5:d5:8d:cf:ba:11:ab:fa:70:
10:27:e6:23:78:f8:e6:99:71:70:33:81:59:b9:5e:83:a1:70:
26:cd:58:2a:f8:e6:6e:96:b8:5f:96:91:94:b8:fd:3a:30:17:
9f:30:7a:cc:42:b3:f1:88:5c:94:63:ac:87:82:ca:fc:bd:32:
d6:24:20:90:3f:04:31:24:9e:dc:fe:32:db:2b:80:7a:de:e4:
ec:30:20:30:8a:9c:6d:80:4c:09:50:94:5e:eb:20:8a:e3:d2:
56:fa:44:f6:8f:22:6a:45:3f:18:a9:73:f3:e4:c1:ad:4a:4e:
87:6e:2b:d7:73:f4:b1:cd:32:ae:68:d4:1c:1b:84:d5:01:4c:
6e:42:b2:72:22:0b:6c:c7:9b:cf:4b:5a:0b:c4:31:4a:53:9a:
a3:71:07:64:df:9c:58:d1:7d:53:20:25:10:14:8d:5c:98:63:
91:04:45:93:c9:67:af:d3:8f:81:b0:ae:1b:8f:70:11:d2:6d:
22:50:e7:3d:2e:4c:7a:18:b8:14:84:19:86:38:b7:56:4a:39:
30:8e:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:58 2025 by rpki-client