Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
File: YLuQsWeR3lqwN3oafrgwds_rINo.mft (raw, json)
Hash identifier: 4NnTIv3G6HVnxsljAJ9cauM+Qp/GM1ijFdJyA3T/MOg=
Subject key identifier: 90:3C:73:87:4B:16:48:B7:6D:46:A6:A3:20:2C:12:EA:D3:31:14:29
Authority key identifier: 60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA
Certificate issuer: /CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da
Certificate serial: 0199FBEB8C3BA463B866E19788306F7FADBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
Manifest number: 8D
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: YLuQsWeR3lqwN3oafrgwds_rINo.crl (hash: 3txrbrTZdKnHtjUFrBKnMB1ScYpnULmfeUKMITivTDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8c:3b:a4:63:b8:66:e1:97:88:30:6f:7f:ad:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=903c73874b1648b76d46a6a3202c12ead3311429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:37:86:61:17:cc:44:9d:0f:1c:1c:ea:57:
cb:34:26:ba:fe:58:ce:d7:0b:f0:44:2d:89:2e:af:
2e:3f:93:28:15:54:df:de:82:4e:bc:d8:37:b7:dc:
45:42:e0:73:c7:db:50:3f:05:86:69:38:44:a5:87:
19:b3:e6:70:d1:cf:7f:df:e3:ae:2a:ed:8b:4f:28:
b2:ac:d4:09:70:04:38:35:7a:2b:41:f9:57:8a:dc:
54:15:4f:9a:60:de:6c:8e:2f:9b:1d:cb:1f:69:58:
24:43:74:6d:9a:b7:f4:43:33:65:33:2d:b4:b8:b5:
6c:47:d4:de:ca:82:39:31:dd:a2:49:c8:fe:85:61:
76:7e:a0:08:2a:1d:ff:27:cd:34:28:0e:c5:0d:bb:
75:e0:53:cd:a9:fc:dc:fd:e5:95:27:86:4a:28:7a:
8b:07:71:3d:1d:36:d6:82:85:8e:a1:97:7e:bf:b2:
0f:87:8a:07:5f:f1:eb:43:63:b3:bc:70:44:81:6d:
26:81:f7:a1:72:d4:c4:04:e6:50:75:37:e6:6f:08:
88:67:68:7c:57:8a:d3:ea:d3:ec:2c:5c:42:27:15:
ef:d9:74:cc:b7:6f:a9:97:05:b4:c0:31:8e:04:18:
50:2a:b5:90:db:a2:f4:40:81:de:a1:d9:ea:bd:fb:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3C:73:87:4B:16:48:B7:6D:46:A6:A3:20:2C:12:EA:D3:31:14:29
X509v3 Authority Key Identifier:
keyid:60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:22:b3:59:1c:a3:fd:d1:9b:f3:6e:40:6c:24:23:39:ea:96:
8c:53:2b:39:6b:8e:ea:53:a2:b8:9f:19:e2:e7:4a:a9:30:4f:
78:ed:df:39:3e:61:74:1c:2b:bb:93:61:2c:68:4a:64:77:21:
05:6a:31:84:7a:62:0b:71:a2:59:c3:71:d1:15:4a:db:7e:47:
84:ef:ce:db:95:11:12:3e:e9:7c:9d:ac:0e:44:b0:d6:3e:e4:
7c:9b:f0:4c:13:68:40:2d:8e:0b:90:8b:be:0f:cd:c8:b5:37:
83:1f:a9:50:18:e8:ae:e1:29:24:a4:78:16:30:e8:1e:76:4d:
50:ed:a4:1a:31:44:ea:0d:3e:cd:84:f5:d4:02:ad:45:00:49:
7b:3e:a3:4c:15:ea:17:2e:52:e3:a4:4a:c2:f2:20:88:1a:5b:
f2:41:33:c7:dd:c4:c8:27:c1:ed:3f:03:bf:cd:85:84:a9:55:
b4:4d:42:f7:68:60:a3:16:3a:db:14:8e:04:16:64:a1:9b:56:
52:88:00:6b:a0:5c:d5:94:ff:6b:ad:b2:2f:a2:fe:39:93:8f:
29:a6:fe:9c:aa:ee:46:e9:ee:23:df:ec:95:4e:31:73:b3:cc:
7c:19:11:86:a4:20:e5:bf:d8:0c:43:20:36:b2:ae:f7:48:9e:
e3:cc:42:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:13 2025 by rpki-client