Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
File: ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft (raw, json)
Hash identifier: i8rbZD9XrJmAiOdECUu6U2FIU2Sn24oGiACxthdqxpA=
Subject key identifier: DE:46:9B:CB:F9:A1:95:54:A2:B0:6D:D9:C8:14:CD:D2:CC:4A:BA:3B
Authority key identifier: CA:45:7E:11:73:C4:E8:51:B9:2D:3C:8E:E9:96:71:51:94:8A:9A:E9
Certificate issuer: /CN=ca457e1173c4e851b92d3c8ee9967151948a9ae9
Certificate serial: 019A537626A5526199640F692CD649C65E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 10:00:43 +0000
Manifest this update: Wed 05 Nov 2025 10:00:43 +0000
Manifest next update: Thu 06 Nov 2025 10:00:43 +0000
Files and hashes: 1: ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl (hash: TZ/mlySBAy3VaDB/mH0f+bfydrZeLYAVEYEQu03/qNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:26:a5:52:61:99:64:0f:69:2c:d6:49:c6:5e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca457e1173c4e851b92d3c8ee9967151948a9ae9
Validity
Not Before: Nov 5 10:00:43 2025 GMT
Not After : Nov 6 10:00:43 2025 GMT
Subject: CN=de469bcbf9a19554a2b06dd9c814cdd2cc4aba3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:79:4a:ac:87:e6:45:ed:39:c9:d6:18:3f:
74:80:65:ee:f6:69:62:41:6a:dc:c6:1d:da:ca:22:
fd:1a:d8:f1:b2:04:ac:fa:bd:aa:a7:3e:44:40:db:
1a:9a:64:80:91:28:c3:98:a2:5e:a9:69:ac:d2:18:
2f:ba:d4:d1:ef:b2:53:2d:cb:b4:37:e3:9d:a2:30:
b6:93:d7:34:a7:15:d6:e5:6f:23:df:88:41:23:3c:
b1:5d:2e:97:4e:9c:30:7f:da:09:c6:06:a0:0f:9d:
bb:54:62:2a:dc:25:38:be:6a:1b:69:ec:8c:fc:dc:
75:9a:cf:77:c1:e5:7e:93:27:77:b0:04:b9:66:71:
4a:0d:4c:cf:03:5f:b6:96:29:63:9d:96:db:93:ec:
d2:40:dd:58:e5:d6:b6:2b:a0:e6:a4:cc:6c:9d:e4:
1b:1f:55:36:19:0b:4c:e0:41:43:94:91:e7:4d:ee:
11:b5:dc:7d:aa:dd:d6:8a:a2:43:dd:1a:5b:a7:ca:
63:44:84:00:f7:a4:d4:6f:0e:c0:61:0a:c0:7d:57:
ea:dd:13:65:0e:9f:7f:0e:76:32:80:3e:b3:53:a0:
cb:cd:3e:20:de:1e:df:ce:5f:fe:33:a3:45:b1:cf:
e4:cb:92:53:e0:11:6a:bf:4d:ef:b5:68:33:88:1b:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:46:9B:CB:F9:A1:95:54:A2:B0:6D:D9:C8:14:CD:D2:CC:4A:BA:3B
X509v3 Authority Key Identifier:
keyid:CA:45:7E:11:73:C4:E8:51:B9:2D:3C:8E:E9:96:71:51:94:8A:9A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:53:48:65:17:04:a2:4c:84:35:84:0d:64:61:2f:ea:b3:ad:
98:42:2b:5f:6b:4e:f3:dc:e8:9c:84:7d:35:a2:72:14:e4:6d:
98:7f:3a:84:5a:64:77:1c:ab:70:45:72:90:99:24:5a:c4:2a:
8b:d4:07:e8:89:c9:87:53:76:15:96:ba:55:fd:be:2d:f7:29:
e2:0e:39:9e:69:20:a8:60:69:09:2f:f3:d7:c3:8c:54:b5:f6:
52:04:96:48:2c:95:f1:45:6c:15:6a:d6:bc:16:d0:8a:71:bc:
78:64:0b:da:8f:28:55:85:38:1b:e2:be:df:ba:1f:86:ba:41:
93:66:57:fe:35:09:c6:78:a6:a8:e8:bf:a8:23:d4:17:04:bb:
bc:bb:7b:c9:aa:6a:46:dc:b1:bc:0a:0e:3b:51:4b:66:22:8a:
7b:a8:91:44:1c:13:e2:d1:02:5e:d8:58:89:c1:0b:18:78:98:
a9:86:57:c7:d0:e1:68:f4:f3:07:f6:cb:c6:ad:37:09:6a:65:
e9:23:25:43:90:ed:b8:4d:c8:f9:f0:f9:b8:63:e2:6b:17:25:
8f:48:e3:5a:dd:c3:b1:24:24:77:75:b4:2e:01:ac:33:86:91:
97:00:82:f0:94:ab:d7:54:b6:a6:24:bf:13:1a:bd:80:be:c8:
1f:6b:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:47 2025 by rpki-client