Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: GXzPMcboz5amEiMCftyCIFRejI7tJIZS2L6bASdN13w=
Subject key identifier: B2:95:F1:F0:0A:2C:9E:98:E8:C2:62:CE:7E:41:BF:0C:AE:8E:DC:52
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 019A4D075116680DB2482A2E418B6D313051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 07B3
Signing time: Tue 04 Nov 2025 04:01:56 +0000
Manifest this update: Tue 04 Nov 2025 04:01:56 +0000
Manifest next update: Wed 05 Nov 2025 04:01:56 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: uQzrO1W0s2RGN7yT4vb+NRAupvJR02nEY/kvHL5dKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:51:16:68:0d:b2:48:2a:2e:41:8b:6d:31:30:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Nov 4 04:01:56 2025 GMT
Not After : Nov 5 04:01:56 2025 GMT
Subject: CN=b295f1f00a2c9e98e8c262ce7e41bf0cae8edc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:7b:f5:10:ce:56:2e:cf:72:3a:d1:e9:93:
6d:82:63:4e:91:df:81:15:65:1e:20:cc:6b:f8:c9:
69:a5:e4:47:fb:23:e5:88:c3:d5:f8:76:f4:21:a8:
49:cb:6e:28:13:5b:d7:a1:71:3b:7b:ec:1e:50:71:
3c:c0:11:2d:b5:04:85:72:d9:70:53:eb:5d:fa:b8:
f4:d1:c5:08:70:f8:37:87:8d:74:20:a8:66:cc:2d:
53:64:ed:70:fe:61:ee:a3:7a:50:a2:07:91:21:1c:
23:9f:86:6b:25:32:b1:44:7d:83:f9:ed:ad:62:75:
7c:b4:f6:d3:22:ce:1d:50:bf:6c:71:7f:ac:c1:64:
5f:58:ae:ac:2b:98:3a:58:df:f3:ec:ec:99:d7:26:
11:da:d7:26:17:51:12:72:17:ae:7a:ff:f2:d8:c6:
a3:06:6b:0c:bd:08:1f:bb:50:b9:15:ef:b7:2d:39:
fa:cd:0c:2c:7e:3f:ec:bd:1e:2d:dc:c3:cc:5c:c4:
be:4c:51:e4:67:de:dd:63:19:1e:32:8d:ad:05:9d:
9c:ae:2e:97:39:77:af:21:e1:e1:22:32:c4:35:45:
ad:38:a7:8d:a0:08:62:1b:be:e7:4d:88:ec:4f:e9:
43:14:c2:36:9b:3d:3b:c4:83:37:4f:31:73:45:77:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:95:F1:F0:0A:2C:9E:98:E8:C2:62:CE:7E:41:BF:0C:AE:8E:DC:52
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ee:e9:9a:cc:4c:84:32:ca:c6:07:de:c8:20:c5:84:0b:a2:
b6:93:91:0b:d6:67:04:64:32:0e:fd:56:b1:37:c7:54:fa:02:
a3:50:d5:6c:9c:c9:e3:36:21:dc:61:5b:d5:34:31:61:b0:70:
25:ed:4a:54:cd:83:2b:d5:28:77:88:ef:b3:b4:86:79:40:05:
dc:74:2b:b9:da:78:db:a6:ea:c1:c9:de:7c:79:f2:60:be:b4:
eb:0c:c4:ca:35:da:fb:2f:b0:27:27:16:62:d6:ac:37:97:c6:
a7:e4:b5:30:05:3c:19:5b:eb:23:88:6d:03:11:f0:40:f7:58:
d8:6f:e8:cf:3c:3d:4a:d0:d0:35:f1:9d:a9:61:88:dd:94:06:
4e:b6:92:91:b6:fb:ab:b0:d2:ef:c7:c6:2b:ea:27:7f:85:5f:
97:bd:07:99:b9:87:04:b2:14:e1:e6:70:83:9b:35:c3:50:2a:
18:d6:d1:91:77:e8:d4:0b:4b:7a:d9:e0:f5:6b:f1:24:0f:83:
31:da:c1:36:e6:ca:ec:35:48:ce:59:e0:e9:67:2e:7a:a1:07:
56:ab:3f:46:dc:33:35:4e:c5:df:65:70:c9:70:8f:aa:f6:cd:
4f:3c:c2:68:d4:0b:2e:89:cf:05:2f:35:98:14:39:db:fa:05:
63:59:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:49 2025 by rpki-client