Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier: xvHeByRQDqS1tY2KExfFOCakcwLwOJ0rxDYX5T8f9Ng=
Subject key identifier: A0:10:6F:69:CA:C9:C4:CA:63:CD:FB:D4:F9:B6:98:E0:D5:37:5D:BF
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial: 0199FAD851D863179000EC53EDFA8680F434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number: 0B43
Signing time: Sun 19 Oct 2025 05:01:44 +0000
Manifest this update: Sun 19 Oct 2025 05:01:44 +0000
Manifest next update: Mon 20 Oct 2025 05:01:44 +0000
Files and hashes: 1: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: Ew79tyqDDtqEJUGI17z1KcnfjZZ+/GBItyUL/HQqGhw=)
2: jYlgI_qcApYE3RAZAnK4EbiyzdM.roa (hash: xXRxHK1q9xpKOQP7dBVRrylt76oRLGOFXjW/2uY1+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:51:d8:63:17:90:00:ec:53:ed:fa:86:80:f4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
Validity
Not Before: Oct 19 05:01:44 2025 GMT
Not After : Oct 20 05:01:44 2025 GMT
Subject: CN=a0106f69cac9c4ca63cdfbd4f9b698e0d5375dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:3e:9a:65:2a:dc:a7:c6:e5:16:e9:93:4b:
01:15:eb:fe:5b:1d:ad:dc:4e:9b:93:67:eb:bd:f6:
00:b2:31:27:e1:16:de:dd:36:7e:50:b9:fc:74:4d:
ed:05:4f:3e:1a:c5:d8:97:8a:31:2b:69:95:ca:99:
06:0f:a5:16:45:ea:08:aa:a1:6e:e9:af:6e:12:26:
04:91:8b:a4:5a:74:9d:b0:29:d8:6f:13:39:9d:d0:
51:c9:9a:2a:3a:31:98:c3:cf:68:ea:c2:c0:0b:ea:
85:21:50:53:fc:24:9f:1a:6d:af:7b:b9:f6:da:02:
52:ac:06:03:de:74:78:1d:c0:ae:64:9a:31:b3:6f:
83:b5:b3:a4:a3:46:b3:a6:6c:87:10:62:b0:66:92:
ac:23:40:7a:ad:73:32:bc:3a:74:a3:d9:28:57:eb:
96:b5:a5:ea:04:6c:2c:09:77:c7:ed:66:9d:f3:a9:
56:52:e3:c8:75:82:44:c5:29:de:3d:35:12:01:4d:
88:84:d8:b2:61:d0:cb:a6:15:18:30:87:03:74:52:
a8:4e:a7:65:e8:86:9c:03:b5:9b:89:38:6b:06:21:
4c:3b:dd:8f:2a:17:e1:80:98:96:02:a5:f8:3e:c4:
06:7b:0a:9c:d3:43:af:22:bf:0e:b5:f3:e7:fd:c2:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:6F:69:CA:C9:C4:CA:63:CD:FB:D4:F9:B6:98:E0:D5:37:5D:BF
X509v3 Authority Key Identifier:
keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:47:c9:e4:7c:e4:08:14:1b:cf:44:21:a8:b9:a2:fe:33:25:
3e:85:97:e9:30:8f:be:63:d5:de:02:db:15:60:03:24:62:c4:
3c:92:f4:60:b5:92:6b:bd:b2:84:e7:4c:fa:67:5d:e6:4b:09:
75:8b:d7:a9:89:58:b2:8f:ef:f2:c5:5c:3a:0f:ac:db:ce:af:
52:60:c7:3f:2c:a5:e5:97:47:a9:be:61:8b:d2:43:ba:90:e5:
f3:ef:cc:0f:73:78:31:5b:5d:5a:f7:04:38:69:86:9a:ee:c3:
d7:be:b1:dc:36:cb:20:6e:5f:b4:66:af:29:bb:85:80:87:c3:
2e:29:e4:12:98:0b:9a:22:e1:98:99:5e:29:7c:80:ef:1f:ed:
87:02:62:da:b4:4d:89:84:c7:bb:f1:b7:0c:c7:26:3a:29:6d:
de:52:36:86:b2:dd:c1:b0:87:b4:6e:15:b6:b6:ee:46:21:83:
2f:3d:ff:71:9d:38:0b:6f:77:fd:6c:7c:74:0c:79:1c:c0:02:
28:bd:7a:a8:8c:30:b8:86:bf:4f:d6:9f:ea:3c:2f:d2:81:c8:
2e:7f:75:47:b0:b6:e9:58:11:33:c8:03:06:b2:08:95:31:fb:
af:8f:29:f4:d9:ca:18:36:55:1a:c0:f2:bd:12:7e:ed:b3:0b:
75:b4:10:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:42 2025 by rpki-client