Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: ylYtuL8qI33Fqdkfp/i9g44UJOIHvoP/ya35gysA1G0=
Subject key identifier: 26:A1:3B:21:13:EB:0E:26:51:77:57:61:80:1A:41:3B:01:1B:84:D9
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019A5187E6333D89E1201D5C5A899FCD03F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 01:00:51 +0000
Manifest this update: Wed 05 Nov 2025 01:00:51 +0000
Manifest next update: Thu 06 Nov 2025 01:00:51 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: yecfyOSCdrnIuuCk6ZjgmaY7e6LjuxC6QJZmhZLjA7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e6:33:3d:89:e1:20:1d:5c:5a:89:9f:cd:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Nov 5 01:00:51 2025 GMT
Not After : Nov 6 01:00:51 2025 GMT
Subject: CN=26a13b2113eb0e2651775761801a413b011b84d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:78:3a:be:fd:e0:03:f6:8c:6a:8b:8a:08:
c0:bb:ea:a0:83:ae:fb:ba:44:88:87:dd:8a:1b:a8:
e0:f7:54:61:e7:4c:19:45:08:2a:df:32:2b:13:9c:
26:d2:7c:a6:38:90:38:df:64:37:18:b6:fc:08:35:
f8:9d:af:75:1f:87:07:03:b6:6b:69:27:d8:d3:a9:
3b:1f:49:e8:24:4f:af:57:ff:71:46:31:88:2c:ea:
3b:90:9e:8b:ee:80:8a:5b:c1:7e:ce:4c:4f:ce:77:
b2:d7:95:47:3f:9e:b4:34:98:e4:9a:46:72:30:cd:
ab:b6:01:20:50:a8:f6:db:37:0e:5b:91:f3:e3:a2:
40:45:46:4b:f2:7f:77:3f:1e:54:25:15:3c:2c:6b:
a7:ee:8a:0c:3f:ae:a6:b5:54:19:f8:19:13:70:0b:
83:48:cc:cd:ca:47:52:43:4a:36:b9:50:dc:4d:5e:
78:e3:48:7a:a4:39:d1:95:2f:3e:7c:43:ec:63:34:
bc:4f:5c:af:e5:d0:a2:07:34:f5:76:5a:38:09:c2:
8d:e5:86:25:38:90:25:78:78:17:bd:27:cc:31:fa:
40:e2:4c:9b:2d:46:c8:91:20:56:4c:b8:b9:34:ce:
aa:6d:43:c6:b6:52:7c:ce:1b:f2:bb:8d:9a:bd:03:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A1:3B:21:13:EB:0E:26:51:77:57:61:80:1A:41:3B:01:1B:84:D9
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6a:09:74:8a:3c:ac:f2:59:9e:db:c7:e8:a1:c5:6b:83:14:
e9:61:61:32:2c:9c:04:aa:60:7e:2d:e7:f2:58:c7:4e:6e:83:
1a:22:e6:4a:26:ae:9a:a0:e1:b6:60:a9:7c:c7:30:04:77:38:
32:8a:4d:cb:10:5b:94:94:87:86:e7:6c:c0:95:25:a2:a9:c1:
38:15:fe:03:b0:b8:67:10:be:b8:09:3d:40:65:8a:e9:d0:2b:
97:6e:46:86:a6:e6:d0:d0:e8:ec:36:d2:bc:18:65:96:8a:05:
25:bd:0d:14:be:84:41:3a:26:f6:16:77:09:69:ef:8d:7a:53:
20:6c:7b:62:55:ff:f7:59:90:96:80:d3:a3:8d:1e:5b:6d:25:
19:0e:9b:45:1b:a0:91:a2:b1:ca:f8:df:dc:39:c8:82:39:73:
a7:ee:e6:25:f2:3b:6a:9f:20:6c:9f:4d:d6:55:56:f7:fc:37:
a3:47:42:da:9c:38:8b:3b:40:fd:d1:23:94:ea:9d:a3:64:f0:
07:03:05:cb:4f:3e:e5:4e:a9:3b:e8:06:36:ff:2d:da:ef:30:
b3:92:cf:6f:3e:b7:e9:08:88:89:8f:f4:28:aa:b3:69:71:98:
ec:37:49:f7:3c:22:4e:bd:a7:f0:8d:fe:65:ed:cb:1b:8e:e9:
0b:1b:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:28:50 2025 by rpki-client