Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
File: ypfglEx3smswKXwtScO-ausnNxE.mft (raw, json)
Hash identifier: oBTkv/4GOWF0ntnLP0w6SABtGBXNPNh5zxlNGtcl8Nw=
Subject key identifier: 1C:F1:8D:D8:A1:06:4D:E6:B3:2B:11:A1:5E:97:D1:4E:B8:EA:A4:1D
Authority key identifier: CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
Certificate issuer: /CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Certificate serial: 019A4EF4F8BD197EA9210BEE46783DC1E922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
Manifest number: 0422
Signing time: Tue 04 Nov 2025 13:01:08 +0000
Manifest this update: Tue 04 Nov 2025 13:01:08 +0000
Manifest next update: Wed 05 Nov 2025 13:01:08 +0000
Files and hashes: 1: ypfglEx3smswKXwtScO-ausnNxE.crl (hash: xh6xNqkQ94iSnHumAnSEA73wEaBiN4m+/T2TXMQhGno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f8:bd:19:7e:a9:21:0b:ee:46:78:3d:c1:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Validity
Not Before: Nov 4 13:01:08 2025 GMT
Not After : Nov 5 13:01:08 2025 GMT
Subject: CN=1cf18dd8a1064de6b32b11a15e97d14eb8eaa41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:2d:70:79:bc:6c:df:24:cd:4f:d7:e4:a6:
ba:2d:58:49:99:77:91:7e:f1:b1:9f:cb:28:9d:3f:
47:32:b6:62:8e:24:b8:0e:55:e0:58:ed:d9:4f:8f:
dd:ea:01:cb:e3:23:b7:c4:73:fd:96:e2:99:12:31:
52:5c:a8:67:3b:ee:10:1f:75:36:7d:08:34:b3:a0:
0f:21:32:de:e7:f5:93:67:fe:9f:27:bc:12:7b:5f:
36:53:3b:82:de:76:87:46:e4:bb:52:b1:8e:c1:95:
46:3e:ad:b8:3d:42:29:09:88:86:e7:6f:87:b7:7f:
d0:a6:10:20:8c:df:6d:a9:b7:ea:47:27:38:12:bc:
c6:ce:3b:40:22:14:fa:46:cb:72:bd:36:f0:6a:4b:
66:e1:87:bf:16:9b:eb:e9:3d:47:41:aa:c2:1a:d1:
6c:44:6d:2e:5c:c2:7e:53:f7:52:cb:a5:98:ac:f0:
e0:75:97:1e:f0:c3:2a:75:fe:64:04:f5:13:b3:af:
01:0f:e2:50:0b:97:a0:10:dd:9c:21:9b:38:9f:58:
f5:93:0a:c1:28:c8:2f:b1:ba:61:2d:4b:e8:41:9f:
af:c1:18:c8:f6:11:68:ea:fb:81:d0:42:0f:52:5f:
18:81:47:81:e6:aa:f4:7e:6a:a5:65:82:a4:c7:da:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F1:8D:D8:A1:06:4D:E6:B3:2B:11:A1:5E:97:D1:4E:B8:EA:A4:1D
X509v3 Authority Key Identifier:
keyid:CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8d:34:cb:36:62:88:c5:bc:b1:1a:b4:2c:fe:12:bc:92:c9:
26:e5:98:a1:db:b1:cf:e6:7b:65:0b:89:8f:12:18:ca:ab:d2:
62:07:5e:57:89:75:0c:a0:a5:6c:26:81:9f:95:b9:e8:91:ab:
b8:69:c2:c7:80:8b:94:25:55:c8:6b:24:e0:30:d4:42:38:10:
df:56:c6:51:05:96:c1:e9:33:b9:53:09:cd:16:c5:19:94:86:
a2:2b:98:13:9a:2e:7a:ee:37:2f:a5:aa:29:eb:92:4e:3f:50:
ba:04:8a:8b:e4:45:82:e7:61:7e:e0:a1:1e:1a:46:0b:f6:00:
74:ef:1d:04:d5:32:76:83:bb:4f:9b:fe:66:ed:d2:6a:70:a8:
af:8a:c2:80:ca:3c:63:6a:d8:de:c9:8b:27:09:37:9b:41:62:
23:cb:2e:44:08:0e:12:73:b3:4d:9c:ff:bd:48:ec:90:6b:d1:
a4:c6:78:ad:4a:b8:ba:57:7e:40:4e:7b:9e:cc:53:38:fc:c3:
85:60:87:c7:84:88:a6:f7:57:c4:66:96:f4:98:a3:4d:11:04:
ff:a3:36:fb:a6:38:42:2d:5e:d2:3a:e3:74:ee:03:54:bb:4b:
77:37:0d:3f:4b:c6:fa:d5:63:d2:db:2b:6b:34:4b:c7:76:7d:
dc:04:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:36 2025 by rpki-client