Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: ecujupvbpcOMIg08WC/i0aKPPtd0S4XMGoOS5JO3sQs=
Subject key identifier: B0:78:FF:58:DF:18:A2:6D:86:E8:8E:1C:34:10:5F:A4:8F:AE:0D:1C
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 019A4D073DF2708B8C128426CC5A6EEE9DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 04:01:51 +0000
Manifest this update: Tue 04 Nov 2025 04:01:51 +0000
Manifest next update: Wed 05 Nov 2025 04:01:51 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: I4+eVdDn7J5P56cocmjd/31xA4p75cKed2bSKBdyoRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:3d:f2:70:8b:8c:12:84:26:cc:5a:6e:ee:9d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: Nov 4 04:01:51 2025 GMT
Not After : Nov 5 04:01:51 2025 GMT
Subject: CN=b078ff58df18a26d86e88e1c34105fa48fae0d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:15:1a:e4:c0:d7:c9:d8:90:12:57:f2:f5:
21:a8:a0:b3:ab:cd:1a:0b:ba:66:8e:5d:17:24:c5:
9f:bc:e9:05:6b:27:3d:16:2b:98:e7:a5:7b:94:9f:
73:13:ab:79:a1:b2:01:09:f5:76:b5:26:ac:0d:c8:
18:ed:41:99:8d:be:f4:d5:94:19:f5:98:fa:14:d8:
c8:b8:b5:06:68:3d:f1:d6:ca:db:c8:09:eb:6f:71:
ba:22:cb:f5:8b:58:21:c7:23:66:b2:31:b9:bb:48:
f6:27:42:e4:e6:d5:3f:0d:03:8c:85:04:b6:65:79:
82:f9:86:c4:61:44:3f:b5:9f:a0:15:e5:80:1d:43:
71:33:fc:0b:19:08:39:11:e3:da:06:49:13:ea:6c:
4f:55:18:81:b4:6e:e3:f5:1b:15:b5:ac:ee:21:1d:
f6:25:9f:3f:68:c9:52:3b:fe:be:73:66:3a:4a:68:
b6:6d:7f:2a:b7:dd:52:bd:32:44:de:00:e1:c9:54:
89:18:d9:81:15:da:e7:f9:3d:c8:ce:fa:84:53:e7:
df:0f:25:06:e0:78:7f:cb:f9:99:32:cf:8f:2a:99:
92:18:ca:fb:fd:ec:74:22:7e:25:fd:9b:82:40:fe:
ae:e3:73:ab:d6:9a:9b:39:34:95:1a:72:e9:08:04:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:78:FF:58:DF:18:A2:6D:86:E8:8E:1C:34:10:5F:A4:8F:AE:0D:1C
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8f:96:66:e1:21:37:ff:3a:31:68:6a:71:45:68:08:af:8c:
db:a6:ee:29:7e:cc:e4:ce:67:f8:24:30:07:fd:31:44:9d:79:
24:15:f4:51:d7:52:f8:65:7b:bb:b0:a8:36:27:f1:c6:30:ad:
96:3b:95:50:87:c6:90:98:83:59:09:16:e4:35:d6:d2:e8:1d:
b5:19:de:7b:29:2a:87:c4:10:37:2b:ed:66:d0:ee:93:fd:3f:
9a:15:95:76:1a:91:e6:52:8a:b1:cb:fe:ce:e7:88:63:52:71:
7d:fe:53:74:5e:31:3d:84:b8:54:5f:36:3d:44:44:47:a0:44:
76:ac:ee:fe:da:d1:44:4d:f5:65:f1:55:7f:54:42:8a:d1:63:
b6:2a:ba:66:3d:83:5b:af:6e:7f:a9:1b:f7:61:2a:ab:9d:71:
4e:b1:91:97:62:a1:2c:d7:19:27:7b:d3:2c:05:f5:51:b3:9a:
96:e7:1a:7a:c3:6b:c0:de:a7:bb:08:b6:e5:80:80:24:76:3f:
8c:49:3f:83:16:60:b5:a9:d4:1e:41:b4:1c:c2:9c:4f:3d:ad:
18:76:f9:82:2a:c2:5b:71:b8:0d:ea:3a:a6:81:dc:1d:9f:da:
68:53:a3:d9:6f:1a:9b:fb:58:97:a6:fd:3a:7b:8e:ff:8c:f6:
1c:00:04:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:35 2025 by rpki-client