Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File: YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier: do0syodU1zL3woDmNYJEF8mAbKa8+rW+Ihs9mF+her8=
Subject key identifier: BF:28:04:BA:E8:96:FC:1E:C7:0C:4D:FB:12:F5:08:E2:0B:B1:59:F9
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer: /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial: 019A4F996EDD340A6C8B58FE5E0A3C838F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 16:00:46 +0000
Manifest this update: Tue 04 Nov 2025 16:00:46 +0000
Manifest next update: Wed 05 Nov 2025 16:00:46 +0000
Files and hashes: 1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: FOpp3QLL4e4qNQARgXS6Ae+WY+rvxLvzViYnuKcnbLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:6e:dd:34:0a:6c:8b:58:fe:5e:0a:3c:83:8f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Validity
Not Before: Nov 4 16:00:46 2025 GMT
Not After : Nov 5 16:00:46 2025 GMT
Subject: CN=bf2804bae896fc1ec70c4dfb12f508e20bb159f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:fa:69:7a:c7:b1:20:84:91:47:01:d0:88:
b4:23:20:94:76:d9:ef:98:4e:d1:b1:2b:14:c1:84:
22:29:0d:d8:8c:76:1d:7a:68:33:14:6c:f8:88:a8:
52:69:89:c5:89:84:d2:72:59:3c:18:2c:be:f1:83:
3b:b7:ed:a6:cb:56:ed:80:2e:95:9f:03:fd:b5:9e:
74:6d:67:b1:1f:64:5a:4b:98:19:ac:60:80:ee:ec:
9c:1f:2e:0d:d7:00:07:ff:5e:91:a8:9e:ad:94:61:
b7:aa:81:6f:47:eb:4e:b1:68:7a:56:9c:ae:ce:79:
8d:b8:0c:d7:d5:03:88:62:36:7b:1e:de:d6:4e:5f:
26:4a:d1:6c:1a:10:2f:04:62:d6:01:1e:4a:01:17:
7b:04:f1:52:56:2d:13:90:5a:73:38:ee:e3:1f:89:
56:e5:b1:93:33:7f:a4:27:8b:9b:fe:a6:04:be:ac:
c9:18:a1:19:3e:c6:9d:de:34:b9:f3:b8:7f:05:ed:
09:4e:1f:25:0a:d7:92:de:15:03:64:68:83:d1:7f:
70:30:41:9a:64:ed:b7:0b:ce:39:03:a0:8d:e0:d5:
8c:07:52:1e:c8:49:f4:ca:b5:3f:ef:fb:2a:ff:27:
59:1d:f6:4c:b2:ca:2d:62:e7:ea:d0:7a:c0:c0:02:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:28:04:BA:E8:96:FC:1E:C7:0C:4D:FB:12:F5:08:E2:0B:B1:59:F9
X509v3 Authority Key Identifier:
keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:60:7c:14:61:4f:53:09:c9:ff:b9:2a:86:31:06:30:50:
44:2f:00:c6:37:da:ac:39:27:32:4e:7f:ac:05:63:14:e6:39:
85:8d:7c:56:84:ff:a3:f9:79:4f:ad:21:0c:0e:c4:f4:fd:bf:
64:26:98:cf:fb:95:b0:ff:c5:7c:63:a3:76:76:8b:3d:00:0a:
ef:5b:d4:d4:0d:6a:d4:aa:c7:c5:44:24:57:04:fe:2f:cd:7e:
9e:d4:45:aa:a0:7e:e1:cd:a2:3c:3d:42:77:4c:0c:7e:a3:da:
00:b5:72:c7:16:0a:f5:01:05:9c:15:43:00:e0:b4:ee:fe:2a:
de:51:7a:71:0c:2a:d3:94:16:10:3b:54:88:ac:58:11:ae:47:
bd:b5:be:8a:d9:a3:f9:90:1b:be:13:6d:8e:2f:e9:1b:62:ce:
cd:19:ad:01:90:0b:4a:3c:bd:a4:bd:aa:af:68:45:70:fa:cd:
51:cf:4a:22:df:6d:1e:11:fa:cf:1a:fb:3b:3f:50:a6:9e:c5:
ea:21:7b:89:65:7e:af:5a:23:c7:4e:db:22:4f:c1:4f:53:a1:
9c:ab:b2:04:af:ae:31:74:01:fa:25:f3:e0:71:c3:fb:c4:03:
4c:62:ff:89:30:1a:16:e0:21:cf:eb:23:ac:e4:2f:3e:e6:c1:
3e:ee:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:29 2025 by rpki-client