Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: rk8irQ/j3QbDhQp2kQqaUYZo0xzyFaVRrr1bQExilUs=
Subject key identifier: 0B:B1:C7:94:25:09:B1:85:F0:00:A2:40:B4:88:5D:9B:F7:2A:FB:67
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 019A4EF411C72AE592DD2E82CF6D7D91B0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 1365
Signing time: Tue 04 Nov 2025 13:00:09 +0000
Manifest this update: Tue 04 Nov 2025 13:00:09 +0000
Manifest next update: Wed 05 Nov 2025 13:00:09 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: AukAncVn9EF8K1Un70nptmqe9Z+14fYsj6LDcnr2tXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:11:c7:2a:e5:92:dd:2e:82:cf:6d:7d:91:b0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Nov 4 13:00:09 2025 GMT
Not After : Nov 5 13:00:09 2025 GMT
Subject: CN=0bb1c7942509b185f000a240b4885d9bf72afb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:52:cf:89:2a:81:bf:59:1a:92:46:5c:a6:
15:01:41:38:a7:b3:b3:c0:d8:e5:6f:ca:48:d2:a5:
9b:08:0d:d0:0d:c5:dc:40:b6:f1:aa:09:f6:fb:58:
94:3b:84:c6:52:0d:76:07:8d:94:2b:97:69:52:fb:
9b:4a:c9:38:d8:4f:04:12:86:d3:e7:dc:06:e3:47:
96:18:53:c3:2e:b8:ae:69:fc:c8:44:f0:0c:f1:f2:
2e:6c:b6:2c:3b:d4:ab:a6:09:e8:f0:52:4c:6d:eb:
9f:1b:fe:9b:24:de:a6:1f:47:f7:12:f9:28:44:50:
ea:05:f5:f2:11:19:2f:0f:eb:44:5a:b4:bb:ca:a0:
ac:43:d5:1f:6d:f4:1f:5e:56:2a:85:44:3c:f3:9a:
8e:f4:76:6e:70:fb:20:ed:64:77:94:22:2f:9d:75:
97:b6:23:00:a5:0c:62:62:d5:e4:56:9f:a3:1b:6c:
d2:07:51:b7:59:59:8d:6b:84:e4:ad:1f:dd:0f:fa:
36:ef:47:96:5d:19:29:88:6c:7a:cf:0e:82:52:24:
43:24:db:55:3a:e8:d3:3e:fd:67:ad:e1:bd:81:95:
a6:73:d3:94:d0:3d:8b:e0:8b:e7:f4:a9:87:a8:38:
82:d6:93:21:c2:5b:4d:e1:ee:03:c0:71:d1:45:3a:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B1:C7:94:25:09:B1:85:F0:00:A2:40:B4:88:5D:9B:F7:2A:FB:67
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:85:f9:68:77:eb:37:b2:54:9e:ff:18:b4:8b:86:96:d9:d7:
66:2a:c5:8f:96:4b:d1:d5:46:bf:09:28:70:29:6f:cc:37:f6:
dc:dc:2e:17:7d:1e:93:0f:f6:87:c9:37:71:1e:4d:19:86:8a:
b7:8f:22:a1:b8:0e:23:11:dd:27:73:0f:06:3e:bb:40:cb:98:
b8:d1:e9:a1:82:ad:45:e2:c8:ae:13:33:62:fd:1b:67:e7:ec:
2b:53:f4:1c:31:ae:80:7b:fb:4f:8e:70:e5:83:ba:bd:48:63:
13:e2:04:14:cc:84:de:69:19:f6:e7:1a:c4:fd:8e:23:bf:2e:
87:f9:1d:2e:a8:51:37:2a:00:dc:64:20:9e:3f:1c:19:4c:17:
e0:73:68:0f:fe:b5:f3:d3:86:55:40:18:ad:6e:76:eb:39:28:
ed:1d:1a:99:41:ad:4b:1b:a8:7e:10:5c:80:2a:1b:fe:40:cf:
95:21:c6:8d:37:29:90:40:da:74:c0:89:58:2a:6a:44:ed:0f:
1e:b1:a6:1d:53:43:bc:d9:72:44:53:ba:dd:d6:12:c7:40:b0:
76:fe:51:3b:57:0e:76:06:52:69:81:62:67:b7:8a:30:5d:a9:
8f:7f:8f:34:ee:75:ee:9b:38:74:af:6b:12:f9:6d:ae:7a:2f:
a5:76:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:20 2025 by rpki-client