
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: D8CDTV5VmNUBC0xzQWqDBkfRsIPlOOJ14+xdi0cQ8LU=
Subject key identifier: EA:26:94:D3:7C:F9:77:57:DF:1D:A5:0F:E9:D6:A3:09:7C:2A:6F:8C
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 0199FBEB2E4978731D7CD0583BC36966F666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0A11
Signing time: Sun 19 Oct 2025 10:01:57 +0000
Manifest this update: Sun 19 Oct 2025 10:01:57 +0000
Manifest next update: Mon 20 Oct 2025 10:01:57 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: e4R3wbzjiio9FouFXJ8e/B6XxwXhzmQLsIrCyB3dgA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2e:49:78:73:1d:7c:d0:58:3b:c3:69:66:f6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Oct 19 10:01:57 2025 GMT
Not After : Oct 20 10:01:57 2025 GMT
Subject: CN=ea2694d37cf97757df1da50fe9d6a3097c2a6f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:ea:db:43:b4:ae:e9:d5:1f:9b:07:df:da:
f3:68:71:23:55:bf:a1:a3:f8:32:54:d4:ce:21:9d:
d2:d5:9b:85:1b:8d:94:c8:4d:4c:b8:98:53:62:3f:
2d:e2:92:1c:14:3e:db:4a:05:65:30:ef:85:2b:a6:
60:d1:66:06:1d:30:86:81:6b:20:60:1c:f4:72:1e:
96:7d:81:a6:ed:e0:4d:37:13:05:33:2d:27:a9:23:
ab:49:d1:20:51:40:2f:db:e5:06:a5:65:fa:bc:84:
3f:60:c1:b8:a9:de:49:5a:28:2e:fd:dd:d6:1c:e0:
46:df:45:6f:a8:1d:a5:d5:39:8b:1b:5d:44:f9:5d:
f9:a3:f1:9d:55:81:66:a2:93:91:0f:bd:af:63:3d:
4d:3e:b6:e9:80:b2:ff:4b:e0:63:38:7e:ab:a3:99:
9c:85:81:d6:c2:fb:34:0d:49:ab:57:1a:1f:91:48:
33:8c:22:e2:a5:82:e0:5a:12:e5:81:42:d3:9f:12:
cf:b9:62:5d:55:ea:a3:90:1f:e0:96:e5:d1:fa:16:
09:62:c2:f2:70:36:21:68:53:a0:e4:da:1a:dd:bf:
ae:d7:9d:7a:c7:6a:31:1d:11:9b:70:46:5b:93:bc:
2b:b9:06:6e:0d:7b:15:8b:c0:26:98:4c:f2:dc:8e:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:26:94:D3:7C:F9:77:57:DF:1D:A5:0F:E9:D6:A3:09:7C:2A:6F:8C
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:89:c8:f0:06:e1:56:f4:c9:62:a0:68:7a:83:d2:fc:81:56:
ba:5d:0d:75:91:56:c1:06:23:44:84:1f:2a:03:2a:96:f9:f2:
5e:c7:39:b8:83:72:51:20:1c:4c:7c:72:63:16:52:3b:f4:8b:
9b:15:03:3f:46:d1:2f:44:73:74:80:a3:32:80:f5:99:81:35:
36:5c:67:e5:62:39:8a:c9:d4:e2:68:76:25:b4:a5:93:81:c6:
93:2c:24:e0:9c:d5:de:62:0c:58:2d:e5:25:e8:e3:3a:2c:b4:
8f:12:42:e2:28:fd:8b:14:7f:66:7c:3f:3e:6e:03:f6:69:6c:
e0:1e:08:55:40:61:0a:63:a2:03:d5:5e:16:aa:e8:f0:42:a8:
ed:95:b1:e4:a2:65:e7:f9:8e:30:dc:a1:33:55:fb:b5:f1:4c:
bd:8a:0a:fb:0d:81:3a:83:54:92:7f:01:be:ec:90:3d:75:a1:
7c:7c:0e:40:f1:9b:c5:44:b4:cc:fa:73:84:e3:dd:45:5c:56:
b9:69:3a:10:4a:39:e6:db:24:e1:ce:e4:46:65:68:ca:10:7e:
4e:16:a1:bf:12:b4:96:dc:a8:27:bd:14:ed:bc:e6:07:93:0a:
f4:2e:de:14:9b:43:ff:9a:f0:44:38:8c:6a:b3:cc:d2:ee:34:
45:4b:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:18 2025 by rpki-client