Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: D7IWUW7UsVXTL4H/iufGd3uBMaKkHDy/7l4lDG4xdsE=
Subject key identifier: 34:57:EA:E2:8A:33:62:C2:BF:F8:37:4F:54:AD:C7:4F:0E:51:FF:CA
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 019A4F2B2EE3E4E675547CC4B9C410DCE34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 1292
Signing time: Tue 04 Nov 2025 14:00:21 +0000
Manifest this update: Tue 04 Nov 2025 14:00:21 +0000
Manifest next update: Wed 05 Nov 2025 14:00:21 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: 4BRVKtFkMknUtLnca/KoK2VDSYa+05G5JeTpBXV+fF0=)
2: uY3zUef0aSQ_1cVEf2POkOTu658.roa (hash: 5Ji2ueMdcBCO2VElJdA2ZSQYLd05uzaWuTi54eXzep8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:2e:e3:e4:e6:75:54:7c:c4:b9:c4:10:dc:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Nov 4 14:00:21 2025 GMT
Not After : Nov 5 14:00:21 2025 GMT
Subject: CN=3457eae28a3362c2bff8374f54adc74f0e51ffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:6b:3c:a0:fa:1d:9f:5a:a3:7f:1d:4a:cd:
3b:c6:47:64:b5:81:56:1b:60:ce:86:fc:7c:dc:ad:
31:b0:10:db:31:c6:c2:17:03:71:24:8a:cc:c2:d7:
10:24:ae:34:68:1b:b2:ea:7f:08:8a:d3:08:8d:50:
df:e3:f8:7e:25:d9:45:91:72:93:19:f5:b4:d1:01:
65:05:fd:61:12:bf:57:e1:56:2b:d9:b5:a6:3e:68:
56:af:ed:ae:bd:37:aa:7d:d1:5d:50:df:b7:e7:82:
98:2a:59:c6:51:87:39:ae:2c:94:54:f3:bc:3f:a5:
29:10:00:e8:d7:ba:71:0a:0d:51:41:9e:3f:9d:d2:
4d:bc:38:5d:90:34:37:c3:14:e9:72:b6:0f:1e:3a:
61:5c:31:b5:99:1b:f1:e9:fb:6a:a6:0a:01:2f:8e:
66:1b:de:c1:8f:68:b5:39:ba:77:a5:de:ec:bd:8a:
c8:12:43:3c:f6:88:17:77:f8:75:b6:95:af:a8:d8:
20:6e:21:f7:f7:da:4d:9a:ab:34:e9:4e:6a:83:16:
66:d4:4f:ba:77:44:58:b9:21:2b:5f:e6:a4:51:a6:
74:1e:b2:54:1e:21:38:19:10:93:53:06:3c:2d:46:
bf:6a:7e:be:81:ab:c4:81:10:54:7d:b5:42:38:a8:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:EA:E2:8A:33:62:C2:BF:F8:37:4F:54:AD:C7:4F:0E:51:FF:CA
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:00:5e:d9:df:1d:90:24:e8:df:50:04:c4:3a:da:2e:03:c2:
0a:7e:2b:ea:1d:c7:14:e4:a7:0d:22:f7:df:0c:45:70:3a:cf:
12:fa:b9:f3:bf:e7:9a:15:92:b0:a7:36:58:49:6e:0b:97:05:
3c:c7:5e:17:b7:a8:e0:37:51:f9:f1:11:38:17:f4:f8:aa:0f:
dd:0f:48:90:fb:4c:73:1e:2d:a6:f9:3a:6d:0f:70:9c:31:23:
a5:22:0c:fc:02:ac:4f:5c:9b:03:60:b0:ba:a3:85:7e:10:e0:
ca:e3:09:36:6d:53:d6:cf:f9:fc:94:9d:d5:da:ff:86:d3:46:
ad:ef:fa:5f:16:4f:3f:0e:58:01:58:8b:af:ac:ae:9a:27:1a:
7a:8b:d6:15:5f:bc:5a:bf:34:7d:9a:8c:fc:52:f3:a2:1d:07:
52:96:7a:b4:ec:4b:7c:7b:8b:b4:fd:ce:5c:0e:19:0f:5a:27:
87:65:c9:d4:ed:81:62:c3:62:e4:88:5c:f1:85:21:cb:84:c7:
b2:c5:dd:b4:17:a4:76:40:ee:e5:62:42:1a:e6:be:ab:dd:24:
ca:89:4b:05:58:b3:f4:2f:25:0a:16:6c:3b:fc:c3:18:42:ea:
87:0b:f5:5a:3a:a3:c6:e8:56:99:96:7a:39:ef:2a:ab:fb:ba:
41:f2:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:50 2025 by rpki-client