Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json)
Hash identifier: Cp7AEtMrKDaXrRqLS5wa891DxEP6ghle9hmlUwkm9Uw=
Subject key identifier: DE:8A:03:DF:6D:97:D9:08:9C:63:62:7E:8C:63:44:77:D8:4A:AE:12
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial: 019A4F62D2C509323CE79D2037B010D08F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
Manifest number: 07A7
Signing time: Tue 04 Nov 2025 15:01:07 +0000
Manifest this update: Tue 04 Nov 2025 15:01:07 +0000
Manifest next update: Wed 05 Nov 2025 15:01:07 +0000
Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: KEUpR66lvIdnO9xp/S6LVQ9kj2CnXbTrhqDY33Ga5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d2:c5:09:32:3c:e7:9d:20:37:b0:10:d0:8f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Validity
Not Before: Nov 4 15:01:07 2025 GMT
Not After : Nov 5 15:01:07 2025 GMT
Subject: CN=de8a03df6d97d9089c63627e8c634477d84aae12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:5e:85:0d:ac:8d:74:3e:03:15:be:f7:79:
2f:a2:e5:eb:a5:e7:25:ba:45:a6:1c:26:37:bb:0a:
fb:6c:83:06:e9:30:7c:3e:b2:27:12:8d:9c:ab:c1:
1a:a6:f7:3f:cb:c5:78:aa:5b:13:64:73:ce:c6:f0:
a9:08:19:64:d0:8f:2d:d1:57:bb:86:e9:ab:0d:07:
3a:7a:d1:22:f3:4c:69:01:19:aa:ff:61:d5:c3:0c:
e4:32:a3:00:db:c3:34:11:b7:fa:9f:da:06:a4:c2:
68:1c:2d:e4:f5:9a:03:64:0e:44:25:89:bb:fa:73:
ef:89:88:f4:ae:5e:a2:e3:04:fb:78:1b:cb:d1:69:
8b:da:66:b2:2c:c3:17:a4:48:09:a2:61:fc:98:1c:
44:aa:8c:5f:6c:6f:5d:55:92:32:a2:b6:87:c3:19:
f0:e8:02:d0:df:a9:0a:59:dd:5e:1d:c3:3d:b5:04:
47:fc:6f:29:69:a1:cc:65:b6:0c:30:95:94:00:4c:
d0:b5:f9:e0:a6:42:3c:5e:5a:71:6d:82:46:5d:4a:
e3:b1:9b:c0:21:b7:a0:d8:05:f6:0c:0a:1e:a1:fc:
af:f8:c7:4a:bf:1d:5f:77:14:3f:04:88:f5:89:fa:
3a:6d:50:39:df:8b:ce:2d:5d:ed:af:eb:16:e0:8e:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8A:03:DF:6D:97:D9:08:9C:63:62:7E:8C:63:44:77:D8:4A:AE:12
X509v3 Authority Key Identifier:
keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6b:21:31:55:21:8e:07:e5:31:1b:a6:8c:48:a4:a8:24:22:
47:e7:21:45:78:d9:e5:ed:f2:7e:cb:c3:a0:d0:40:73:f2:4f:
b3:d2:d2:ff:61:ec:8f:f9:17:20:61:34:bd:fb:81:f1:34:62:
e4:00:9b:80:99:89:f4:f4:c8:83:c8:a0:17:c4:e5:dd:02:94:
2d:e4:44:a6:e7:1e:48:f5:87:01:ef:1c:6b:36:08:42:08:d5:
ca:6d:6f:ef:ac:a7:69:31:e7:ad:c3:01:60:c3:3c:64:7a:54:
21:3c:03:26:2b:95:9c:67:4f:8f:bc:be:f7:2a:18:ed:ee:b0:
0a:28:19:cc:0d:a3:96:5f:b4:ab:05:98:85:13:8f:98:34:5b:
83:e2:fd:ee:52:b0:65:aa:c5:5c:f6:48:52:6b:f9:cb:1d:0e:
72:15:55:e7:98:06:37:c8:57:47:a3:35:4e:9e:fc:69:ec:ac:
39:19:81:e3:c3:fb:ff:68:de:a3:4d:41:2d:4c:7b:2e:52:be:
95:f0:c2:2e:d4:f7:ac:f9:ee:c2:fb:0c:6c:10:33:cd:41:05:
69:a7:19:70:f7:14:c4:75:51:d8:22:c8:60:86:36:82:47:f6:
65:c1:c8:a3:56:9f:58:cf:87:ea:bb:12:83:e7:4d:56:3d:45:
d0:e9:81:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:26 2025 by rpki-client