Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: eW6xgUfv0nu28yHvAvqiKyyDjuA12njmMjwwDtZKLd8=
Subject key identifier: 0B:49:3B:EE:BD:3A:22:0F:FA:0A:39:68:7E:46:67:EF:40:88:1F:C3
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 019A5006FC334E60ADE2BE5A0B1B0BCC955D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 11D1
Signing time: Tue 04 Nov 2025 18:00:26 +0000
Manifest this update: Tue 04 Nov 2025 18:00:26 +0000
Manifest next update: Wed 05 Nov 2025 18:00:26 +0000
Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: D37jkWXYeWPpV34r5lvCu/PGgKhqCup/y6wcrqu3ECM=)
2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:fc:33:4e:60:ad:e2:be:5a:0b:1b:0b:cc:95:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Nov 4 18:00:26 2025 GMT
Not After : Nov 5 18:00:26 2025 GMT
Subject: CN=0b493beebd3a220ffa0a39687e4667ef40881fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:16:e2:6a:7c:78:ea:60:3f:22:97:59:53:
38:e4:b3:5f:8e:e8:33:6f:79:f0:e4:ae:8d:e4:ff:
02:00:03:05:9d:59:62:8a:e6:1a:25:6e:41:f1:2f:
20:e7:75:ab:19:15:ad:8e:d8:21:bf:12:d2:6e:73:
5e:0d:09:47:2d:35:df:94:49:53:8d:30:43:c3:1a:
0f:e2:84:f3:cc:52:ec:99:3e:0e:71:69:f1:be:8c:
a7:26:c2:99:3e:27:f1:81:6d:b8:1f:0f:1f:21:5a:
74:70:71:21:8c:ab:a5:9c:48:91:91:cb:41:b6:a2:
eb:6d:f5:d1:df:6b:fc:80:78:7c:c6:fc:8d:20:d2:
f6:2d:be:9b:fd:93:2b:d9:54:5d:31:8d:cc:10:67:
4b:2d:61:24:62:3c:f9:74:75:b1:14:e2:6b:61:3f:
e4:6b:6c:49:e7:90:77:97:84:8e:98:14:e0:eb:37:
36:21:19:dc:29:98:a1:85:07:0f:5d:08:d7:6b:5a:
75:55:1f:a9:f1:1a:3b:78:a3:71:89:d6:ba:3f:9c:
2f:3f:3d:44:96:0a:93:7f:2b:77:4c:b8:f5:6b:ce:
5c:ed:e0:bf:10:71:13:52:30:06:23:ef:7f:a2:32:
0c:ab:cf:9d:77:b4:5d:3f:33:31:43:ef:da:ca:56:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:3B:EE:BD:3A:22:0F:FA:0A:39:68:7E:46:67:EF:40:88:1F:C3
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8e:55:6f:89:1b:66:9b:a2:2d:64:7c:ae:f0:c2:cf:8a:2e:
e9:14:fb:24:52:ab:00:9c:7b:e9:6c:3b:ec:bb:4d:0c:f2:d0:
4e:e8:8f:77:a5:14:5e:f8:82:e1:8a:b8:59:1a:cb:e6:d9:a3:
4d:51:e4:63:00:60:bc:94:2f:cc:c1:7d:86:3a:26:30:56:97:
90:da:81:b4:d5:a4:04:db:c1:98:5c:1a:3f:21:22:4c:73:41:
64:86:92:48:68:80:bd:6e:3d:1b:fd:c7:4a:60:3c:6a:61:40:
d0:7f:e8:b0:7d:b9:31:77:9f:0b:25:1a:68:c9:5a:5d:fb:b2:
52:fd:37:5f:30:93:65:2c:ab:02:33:91:eb:1f:a4:47:be:d0:
23:28:9e:e8:a4:bb:6c:b6:9e:ff:06:fa:96:9c:f7:d9:58:f7:
5f:20:9e:8d:22:6b:e8:34:2f:47:7f:f3:ba:df:3e:e9:2e:cd:
5a:00:65:d0:83:d6:22:82:ae:8f:d1:a0:0d:7b:3e:3d:79:c0:
48:1b:da:f5:46:c2:ea:00:a1:e7:4f:d5:f4:98:50:f2:85:da:
9d:57:a6:e6:23:c3:59:fb:fd:74:24:52:4a:b7:cb:d7:89:de:
ca:33:89:65:94:1c:47:04:cf:da:64:b2:71:5b:2e:fa:5b:c8:
f4:8c:05:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:03 2025 by rpki-client