Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: xglR/dg2QeKWucxnYk1pmK90j7uV3WS63FkrvhT3XQE=
Subject key identifier: 98:76:3E:25:4F:B4:4D:5E:1C:CC:42:8E:0D:0A:E9:4D:18:D5:B8:17
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 019A4DAB19134F5CEC16D46DD9384E41E22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0E00
Signing time: Tue 04 Nov 2025 07:00:49 +0000
Manifest this update: Tue 04 Nov 2025 07:00:49 +0000
Manifest next update: Wed 05 Nov 2025 07:00:49 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: nBVXiE+Gyo8SIqJdajq2Zhsr9ICyABZfHt2YMja79/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:19:13:4f:5c:ec:16:d4:6d:d9:38:4e:41:e2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Nov 4 07:00:49 2025 GMT
Not After : Nov 5 07:00:49 2025 GMT
Subject: CN=98763e254fb44d5e1ccc428e0d0ae94d18d5b817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:56:d0:7e:89:ee:83:c9:e0:cd:a7:ce:26:
36:12:49:e1:21:48:fb:d0:c0:3f:60:44:ad:93:90:
93:dc:73:54:75:29:9a:b1:4f:a0:52:f8:9b:52:48:
1b:ab:a9:9c:97:1f:69:35:ac:b8:9e:02:87:e1:9f:
ae:d3:6e:52:84:bb:c7:17:ec:d8:bd:59:5d:34:5c:
da:70:97:d1:b5:49:e9:3b:c7:09:28:b1:f6:04:26:
7c:cd:e5:b4:08:9b:64:98:fb:a3:af:fb:a5:8a:ae:
39:b0:a4:8d:45:c3:26:a9:40:39:0b:d6:10:5a:30:
ed:36:cd:27:a3:0d:c4:28:3a:a8:f6:60:ce:e0:57:
65:33:2b:20:2d:5b:ce:3f:96:78:a4:01:a0:7b:4f:
6e:6e:43:67:c7:0a:34:cc:ad:50:a1:17:10:27:7f:
57:ea:ef:10:f8:c8:0a:80:be:da:8b:7a:20:e5:82:
4f:4d:9a:4b:56:cb:06:6b:56:2e:64:4b:d0:62:00:
a2:8f:40:5a:6f:9b:76:f5:db:2e:01:1c:78:95:ff:
07:90:86:ba:9a:f7:c0:d1:cf:1a:cc:e0:18:a5:e8:
8c:34:db:44:d9:cd:4f:4c:6c:d2:36:9a:6f:b3:22:
78:32:42:12:4a:55:29:29:6b:3d:5c:b6:24:aa:2d:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:76:3E:25:4F:B4:4D:5E:1C:CC:42:8E:0D:0A:E9:4D:18:D5:B8:17
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:08:7e:71:01:e1:6a:6d:b6:86:a7:8d:eb:f9:44:b5:04:2f:
c9:f5:39:05:e7:60:8a:c8:b0:b2:fa:9f:83:88:bd:dd:d7:06:
96:1e:b4:0a:cc:3d:09:20:e1:80:db:49:ac:8a:c1:f1:61:7f:
fc:0b:34:57:ac:ac:36:06:9a:c3:64:1a:4a:72:62:65:93:24:
8a:8d:32:ff:3a:3a:d6:90:99:1d:55:62:bd:59:42:d8:49:0f:
8a:47:f3:37:44:eb:85:f5:01:97:2d:b6:a5:73:d1:57:31:66:
f8:d5:c0:fa:5c:12:78:80:64:6c:bd:13:ec:41:0b:7c:db:83:
75:0a:30:db:c0:40:28:74:ae:c7:70:71:93:72:f2:5d:46:77:
fd:08:69:d2:14:54:75:f9:62:3a:ce:5f:22:96:34:2f:b2:41:
b5:9b:36:c4:0e:c1:e9:bf:28:30:33:5e:12:a2:21:c3:84:88:
79:02:cf:f1:51:e8:40:80:a1:a8:c4:87:96:36:89:1f:9e:d6:
07:cb:4d:e1:f1:c1:e6:d3:9e:0e:08:58:0d:91:e5:f9:4e:96:
b0:9a:5c:91:da:6f:d2:fb:43:b1:8f:9f:00:55:6f:5f:fe:be:
28:8b:a0:1e:56:5d:d3:e4:68:10:41:65:37:0a:63:f5:f4:d4:
13:89:aa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:00 2025 by rpki-client