Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
File: yoaOeySqNaTdEKyVmfBkqpadAx0.mft (raw, json)
Hash identifier: qZQXgJNDVKVkMEYIYSSy22QX8kN2h/suaalPWMLekCY=
Subject key identifier: AB:60:D6:7E:1E:4E:B3:E0:FC:21:CD:8F:3C:DB:AB:83:DF:A5:08:76
Authority key identifier: CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
Certificate issuer: /CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Certificate serial: 019A4E18CB30D17F566C35DB2C291DDC80E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
Manifest number: 037E
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: yoaOeySqNaTdEKyVmfBkqpadAx0.crl (hash: OdlyFf8WbseZ0DsGL6vDlX1I1zwQC44z04a4DtIpcZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cb:30:d1:7f:56:6c:35:db:2c:29:1d:dc:80:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=ab60d67e1e4eb3e0fc21cd8f3cdbab83dfa50876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:26:2c:53:3d:52:cd:df:4f:e9:af:d3:43:
79:09:09:75:01:57:ea:4f:15:18:de:f5:10:73:63:
53:ca:ec:07:86:a7:9f:bd:97:a7:e8:e3:3f:43:be:
4c:6d:80:cd:6f:f1:11:69:86:54:fe:58:f3:7e:a2:
b3:cb:06:6c:e9:46:35:b5:d5:a1:10:2c:05:73:c7:
77:57:a3:e9:80:6d:96:2f:19:44:2b:44:af:a4:29:
42:c7:c1:9c:8f:33:84:1e:99:d9:80:c9:fe:87:f1:
c9:75:22:69:97:c2:f4:6c:2a:45:c4:60:5f:cb:e6:
29:b6:f9:59:7d:c3:50:94:fc:db:4d:e7:5f:d3:df:
52:69:a8:9f:83:f4:d4:24:2d:df:aa:2c:1b:09:e7:
fb:00:f1:c9:1c:b2:38:f6:f5:01:b0:8b:aa:09:b2:
be:b7:d7:82:ea:c7:eb:3e:52:d3:1e:27:cf:9b:21:
4b:3a:fb:1d:80:bc:2c:de:0b:55:2c:e0:03:f8:30:
3c:c8:6a:ae:f1:91:48:3a:34:9e:d2:23:c6:03:bd:
19:e9:5d:21:66:5d:14:00:8b:a6:2a:ea:30:da:f7:
f8:19:66:ab:26:c0:53:08:39:8a:f3:2c:2c:19:20:
a0:2d:8e:ee:94:cb:fc:45:87:35:51:c7:41:c0:5a:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:60:D6:7E:1E:4E:B3:E0:FC:21:CD:8F:3C:DB:AB:83:DF:A5:08:76
X509v3 Authority Key Identifier:
keyid:CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:da:c0:cd:7e:61:06:10:93:42:2d:88:6d:5c:42:98:d4:cc:
4b:a0:38:8c:cc:1e:e5:4f:17:e5:b8:f4:d5:86:56:9d:1c:b9:
dc:47:51:33:f1:1e:35:49:c1:58:5c:05:93:bf:cf:18:2b:e9:
67:18:21:ca:b3:dd:c7:78:c9:7a:48:d0:f5:0e:e7:53:d3:bc:
1a:8f:60:5b:16:ea:41:9e:6e:fc:3a:2a:7a:f7:01:14:79:3b:
a2:6b:ec:be:f8:ed:1e:a0:71:51:ed:39:d9:5b:d0:90:3d:1e:
7e:66:4f:1c:40:ac:b3:26:27:c9:74:20:53:c7:a0:b3:81:0c:
3d:88:24:8d:00:1b:89:8c:d5:79:08:4e:a2:6d:51:9b:ac:70:
da:b8:c5:0c:10:e0:d0:fc:bf:2c:c6:b1:f5:9a:4a:cd:dc:c0:
46:cf:46:2a:0b:a4:29:4d:34:b6:6e:60:b7:a5:ff:14:b5:4a:
27:51:61:14:6e:9a:68:30:ed:43:1a:a4:16:a4:bc:2f:95:46:
cf:40:10:b9:5f:5d:ef:6f:7b:6e:e8:b7:07:c5:e0:d5:34:d8:
fb:97:d0:de:d5:31:19:5c:07:49:b8:67:c8:99:af:ad:e9:ba:
8f:9e:f2:47:c9:f0:2d:be:91:0e:82:6b:6e:44:ca:0f:dd:5c:
13:d9:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:14 2025 by rpki-client