Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: zks2jfrPGGmDwDZOnieDwyqHolxGUYasrAe7CfQ13BQ=
Subject key identifier: D8:54:19:F2:90:DE:B1:E1:41:82:82:67:69:CD:AB:45:A3:F3:08:AA
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 019A54BF4CB49A3C921DC4D082835AB83C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 16:00:14 +0000
Manifest this update: Wed 05 Nov 2025 16:00:14 +0000
Manifest next update: Thu 06 Nov 2025 16:00:14 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: M3Z0i0gv0aEA3uxMoYxB4WQKdkYyTYx51aRS6ozGMeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:4c:b4:9a:3c:92:1d:c4:d0:82:83:5a:b8:3c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Nov 5 16:00:14 2025 GMT
Not After : Nov 6 16:00:14 2025 GMT
Subject: CN=d85419f290deb1e14182826769cdab45a3f308aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:55:dd:a7:0f:50:45:c8:68:4c:6a:4d:6f:
37:25:d6:c4:20:8c:0f:0b:46:87:83:ea:f9:36:5e:
d2:48:dd:dd:bc:88:17:54:f3:38:c9:77:e4:68:40:
47:02:22:7c:3f:d2:b4:f0:7e:f4:ac:9a:8d:4a:7b:
66:dc:05:3b:76:50:63:bc:54:7a:43:5a:74:8a:3e:
d9:2d:5d:ec:a0:50:c7:93:ad:79:80:25:4d:ec:6a:
1e:b8:b3:0a:95:6f:f1:d7:0b:e2:c1:63:6e:40:86:
08:e3:7b:91:fc:e2:2b:2e:47:d3:ee:f3:8c:71:6a:
82:9e:15:d5:aa:63:46:d5:d2:b9:0f:f7:ed:3b:96:
23:c8:e2:50:f5:8a:c7:cc:50:39:fc:01:a3:f8:58:
98:c0:01:fd:36:9b:64:bf:c8:d2:d8:c7:d6:14:bc:
c3:93:b0:01:27:b5:8d:c6:ed:3f:9f:e2:21:72:29:
dc:b8:3f:51:ed:d4:95:48:03:cb:51:3c:21:c4:34:
e2:ba:41:69:7a:47:eb:fd:2b:d4:5a:c2:1f:ab:26:
39:b1:58:b4:b7:32:09:2c:bb:df:ae:c1:32:fa:cd:
97:69:e6:46:b3:2d:43:28:b4:8d:e0:fd:12:84:d5:
57:84:68:b4:be:e8:fa:52:13:97:cf:6c:86:8b:97:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:19:F2:90:DE:B1:E1:41:82:82:67:69:CD:AB:45:A3:F3:08:AA
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f0:7e:88:df:97:11:42:85:23:0d:68:c5:bc:f1:2d:e4:b7:
b9:d3:cd:5a:df:b5:45:a6:41:00:6e:80:38:9a:7b:b1:05:12:
7b:d1:18:75:29:40:1f:51:ed:f8:28:37:aa:2f:94:2d:e7:55:
2e:bf:45:1a:30:07:ae:4a:ce:30:ef:dd:02:90:5f:37:51:eb:
36:fb:b1:0e:4a:2a:6f:94:2c:89:04:25:81:05:59:a8:44:bc:
4a:40:64:6c:44:5b:ba:7b:6c:9c:0d:3a:8c:41:e8:4d:a3:0d:
c0:65:2c:5c:d7:ed:b9:73:05:75:97:09:31:0c:fe:c9:bc:4e:
0c:bc:2c:36:68:23:12:8e:ff:e3:37:65:0b:f4:32:71:4c:62:
eb:38:7c:28:d5:c3:a8:26:74:6f:0d:94:48:96:6c:22:dd:88:
97:c5:89:40:43:6c:00:1a:ec:5b:a0:90:fe:16:80:3f:bd:f6:
d2:cc:01:d7:62:50:e3:06:fc:d9:aa:33:dd:c9:bf:20:29:e5:
70:f8:f9:cb:0a:59:c1:e4:1e:55:bc:05:88:81:ea:22:55:97:
dd:f3:dd:c7:56:a5:ff:40:15:91:0b:9a:59:32:a1:59:24:5c:
f2:d1:d0:0d:a2:52:45:1d:b3:60:61:d7:76:f4:9e:b5:09:cb:
ac:cb:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:03:34 2025 by rpki-client