Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
File: YsuMEjOwFrHwSBCJc9asPnYvY-0.mft (raw, json)
Hash identifier: P5q9hpHlbHUku9/jsuHKbn7YTGBOu0oxLqa/JuSGw8k=
Subject key identifier: D8:7D:B0:C7:13:82:DC:D0:7A:8E:AE:D9:33:A4:61:DA:5A:57:AF:E0
Authority key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
Certificate issuer: /CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Certificate serial: 019A4D73897D858B72A64A61B99661ADC750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
Manifest number: 12B4
Signing time: Tue 04 Nov 2025 06:00:08 +0000
Manifest this update: Tue 04 Nov 2025 06:00:08 +0000
Manifest next update: Wed 05 Nov 2025 06:00:08 +0000
Files and hashes: 1: YsuMEjOwFrHwSBCJc9asPnYvY-0.crl (hash: /00WpxazFHPfw0Jw/FnJhvduhLq+KHFSyfxHNVRc8oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:89:7d:85:8b:72:a6:4a:61:b9:96:61:ad:c7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Validity
Not Before: Nov 4 06:00:08 2025 GMT
Not After : Nov 5 06:00:08 2025 GMT
Subject: CN=d87db0c71382dcd07a8eaed933a461da5a57afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:3a:7f:90:13:ad:7d:c8:24:de:e5:4c:f1:
a1:82:7d:65:44:7b:4e:8a:5f:35:5f:12:44:47:d2:
e2:63:b0:48:fa:03:4b:53:bf:5b:2c:8e:0f:0e:39:
84:24:73:e5:f9:b5:bd:80:99:3f:53:f8:d5:82:62:
f4:9a:d6:81:d6:3c:4f:1e:f1:5a:89:5c:64:29:1f:
90:0e:b8:07:c9:19:43:f5:39:ca:f8:53:b7:09:63:
c7:8e:b2:5f:6d:68:f4:51:2a:a2:43:22:09:cb:08:
8e:85:cd:a7:1a:e5:66:ec:87:79:4b:70:11:b1:25:
16:09:d3:16:d6:cf:e4:26:2a:ea:d2:6c:94:69:65:
31:be:de:6e:87:2b:c9:a7:49:c8:39:9e:26:f7:00:
9a:00:19:e6:ca:91:e1:91:40:8a:df:c3:89:16:e6:
08:b4:92:be:f6:a2:21:c2:4e:3e:19:8a:cb:27:4b:
85:a2:ef:86:e6:6d:7b:86:7f:5e:02:b7:dc:64:92:
d1:32:a8:d2:56:ef:67:44:24:b1:52:39:a9:84:c2:
b5:84:18:5d:e4:88:4b:fa:5d:9d:ef:61:85:2d:4d:
e8:d7:f1:db:bc:ff:37:c1:56:b4:63:83:0b:e0:02:
9f:c4:18:89:0a:91:e4:2c:da:9c:a7:a3:f6:2d:cb:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:B0:C7:13:82:DC:D0:7A:8E:AE:D9:33:A4:61:DA:5A:57:AF:E0
X509v3 Authority Key Identifier:
keyid:62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:07:46:db:60:27:29:57:ef:99:39:da:26:cd:74:aa:8d:3c:
70:be:f9:72:cf:9f:7d:5d:d1:b9:b5:8e:ca:b5:f6:78:6d:6c:
27:f1:b9:ba:8d:0a:52:04:62:79:17:db:0b:d2:8f:d2:e6:51:
aa:46:c4:c0:82:dc:ec:8c:30:14:06:93:6e:38:9c:fd:26:4d:
57:01:98:41:f4:ec:7b:0d:1c:97:86:7c:a0:3c:41:a7:11:38:
ff:0e:4b:33:28:6f:60:11:f8:70:7d:42:7d:aa:dc:23:22:b9:
65:ae:0c:b4:5b:aa:a1:d3:b3:c5:c6:4a:fb:ab:37:1d:e7:3e:
1c:6a:e9:72:b6:61:94:93:48:3f:a6:17:e8:a0:82:40:64:f5:
80:f0:bc:0b:5f:7b:23:e8:a6:bf:d9:cd:6c:63:b8:44:3e:ac:
b6:6b:3f:0a:33:d9:94:31:02:3d:38:a7:85:2f:1a:f3:18:6c:
f8:6e:11:13:9c:21:92:97:68:42:87:22:22:d3:21:c4:4f:91:
7b:84:e1:7c:6d:88:f5:dc:da:f6:04:a6:71:0f:78:d7:df:f2:
32:5f:be:5f:29:2d:10:5c:3b:76:c8:62:6a:44:75:b0:e7:93:
57:87:f8:67:03:4d:73:d3:b9:20:d2:0d:98:c2:93:71:ff:25:
dc:c6:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:10 2025 by rpki-client