Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
File: YTChAogFFzqiJUSk67mECskbyNA.mft (raw, json)
Hash identifier: nEZiXGOnAggo/P4OdouqKsIxsNcIVNjpBmgrqflP6Bw=
Subject key identifier: 1F:25:5A:05:F0:5F:31:C2:67:E6:3C:26:C6:F1:75:DF:BF:D1:7F:88
Authority key identifier: 61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
Certificate issuer: /CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Certificate serial: 0199FBEB43617CD0E2DC4DCF291CF9A6F30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
Manifest number: 0E42
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: YTChAogFFzqiJUSk67mECskbyNA.crl (hash: cfsdUt3qd57vwbbce3a71lPpal9fJ3ocam2Z9UHMk0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:43:61:7c:d0:e2:dc:4d:cf:29:1c:f9:a6:f3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=1f255a05f05f31c267e63c26c6f175dfbfd17f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:db:45:6c:83:93:7a:01:63:cc:2c:c6:e4:
cd:26:20:3d:1e:de:52:04:fe:25:a8:92:48:e4:a0:
c9:cb:c5:66:23:ee:60:c3:1e:3c:0c:79:ce:a5:98:
65:4c:1f:ef:d8:17:17:ac:e8:5b:e2:45:98:6a:37:
70:65:2f:49:c7:2b:4e:2a:ca:24:8c:59:ad:9b:5e:
19:cb:70:91:47:17:84:fd:f7:1e:04:3b:22:df:bf:
a4:8a:97:c6:ba:25:80:2c:e3:66:eb:93:18:88:c4:
cc:4e:2c:c8:49:3f:34:06:e7:fd:e9:e9:22:39:f5:
09:f4:67:bd:13:83:2b:73:65:9f:a5:d2:6a:db:9e:
c7:39:cf:86:9c:06:30:58:17:46:45:84:50:37:e5:
f5:9e:e3:aa:08:45:92:c9:82:5f:08:86:1f:0f:ba:
65:5e:59:5d:fe:bf:04:e7:a5:30:3a:d9:22:b2:6e:
8c:76:73:aa:69:26:ef:c8:3f:21:ff:09:63:c7:db:
8b:be:2d:79:79:fe:5e:b9:25:96:63:de:7b:d3:b3:
59:b1:8a:83:42:b6:c7:a3:c4:e7:0e:cf:b6:bc:18:
df:41:77:19:aa:a8:c5:f1:d0:f5:99:1d:d0:6c:28:
2f:3a:d6:5a:a4:53:9f:dc:00:ff:10:81:a2:db:13:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:5A:05:F0:5F:31:C2:67:E6:3C:26:C6:F1:75:DF:BF:D1:7F:88
X509v3 Authority Key Identifier:
keyid:61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ca:cc:56:b3:75:aa:e2:62:74:94:7f:cf:4f:60:60:91:c4:
cd:cd:f3:23:75:9d:13:8c:91:26:8e:76:a4:c8:64:08:13:e7:
ef:9c:50:92:52:9c:b6:72:6d:d9:f1:ba:a9:b4:a0:15:ad:6b:
86:57:cf:9b:d3:f6:6e:42:bb:74:61:11:91:c9:08:85:a6:70:
d6:53:84:24:b1:94:63:c9:c5:53:c6:8a:75:41:a2:b3:7b:01:
01:6d:86:f2:3b:07:0d:8b:d9:03:b9:af:44:fc:ab:07:52:e1:
80:5c:9a:7c:6b:7b:ea:5e:bc:1b:5f:12:34:bd:20:b3:8e:9b:
2b:f2:39:a5:2b:bb:8d:5c:28:ae:15:8d:f3:79:27:57:2f:b3:
53:13:33:d2:63:1f:ae:18:57:82:c4:63:ec:65:6b:15:4d:29:
ad:bd:ce:eb:26:10:06:57:b4:e2:a0:fc:ed:5d:52:47:50:af:
df:96:4b:9d:6d:96:24:bd:a0:2e:40:ea:78:df:19:4c:8c:3d:
64:0e:89:7d:13:f6:e8:71:42:2b:5b:54:af:2d:60:01:9d:c7:
2f:a3:eb:a3:4c:15:cb:72:6a:7b:90:7b:04:95:f5:7f:b9:e4:
ce:47:64:80:c2:3d:2a:d1:f3:b1:0d:6a:d5:46:e1:de:61:a7:
7d:19:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:18 2025 by rpki-client