Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File: YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier: cNKhkGU73KsQHpF5pav1OgyaoifK7ce/BwpUsU1RU7U=
Subject key identifier: DA:28:E6:F7:B6:6E:4A:B5:40:4D:A8:5B:CC:5A:54:B6:AA:2E:81:DE
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer: /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial: 0199FC8FB52944E92840142F282B644C4499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: zP0TSucyUG2aDfktnb/EtZ1NZ28xvwXMZcC1Iy4DgfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b5:29:44:e9:28:40:14:2f:28:2b:64:4c:44:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=da28e6f7b66e4ab5404da85bcc5a54b6aa2e81de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d8:7f:30:40:76:e3:30:2b:5f:28:e8:c3:1e:
3c:c2:20:20:73:61:6d:e7:45:dd:0d:08:a9:1b:0c:
8d:7e:58:ff:d9:83:62:20:c4:9c:3d:b7:60:c4:4a:
35:68:5b:b9:5d:6c:b6:3d:e4:d7:f2:f0:3c:79:52:
ba:71:c5:6c:2e:da:13:d7:cc:1c:7e:65:01:c9:98:
fc:0a:34:34:b8:4f:72:e7:81:c3:83:e4:e1:42:83:
62:06:8d:9a:2f:c2:3f:5c:2b:5d:ab:a8:5f:35:5f:
be:6f:22:bc:ea:74:cc:cb:d3:90:31:e4:81:2e:4d:
84:c1:ed:cc:d3:0a:64:b3:8a:e9:c1:fb:d0:3c:f1:
02:ce:0a:51:1e:51:d7:f6:a2:4e:ad:bd:58:90:dc:
b7:8b:79:df:83:9d:8a:d0:30:dc:f6:6d:d1:50:17:
0c:32:39:29:ef:53:6d:7d:1d:a5:14:66:2f:43:1b:
08:cd:25:f8:d5:92:ea:78:ad:f6:62:13:67:cc:a7:
e7:a4:1f:62:f3:20:3b:b2:d4:27:7d:1f:be:16:a0:
8f:c1:d4:69:54:37:d2:4f:82:93:87:19:6c:ed:89:
ac:7a:0e:ef:72:ca:45:8d:fb:69:fa:77:2a:ca:63:
0e:3f:b0:72:aa:60:9c:95:ce:42:8a:a9:d1:f1:92:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:28:E6:F7:B6:6E:4A:B5:40:4D:A8:5B:CC:5A:54:B6:AA:2E:81:DE
X509v3 Authority Key Identifier:
keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:31:e1:a8:f4:d3:11:de:d0:21:03:fe:0a:e6:31:f4:ea:21:
bb:ed:8d:9d:d0:a2:b4:e8:16:2f:60:2a:17:71:25:ea:d6:33:
94:41:d5:27:30:bf:bc:5a:0b:0f:f4:e1:41:e9:cf:74:87:8f:
eb:7c:67:3a:4d:89:78:c8:52:b2:16:51:9a:86:48:c8:88:6d:
83:da:73:f7:a3:95:07:e9:93:1c:ec:99:ea:15:ef:3f:1a:03:
5f:9b:de:28:b4:88:5c:4f:19:f4:f1:83:66:75:8f:80:6b:7f:
27:4f:58:ee:df:bb:8d:94:36:79:5c:03:7d:39:4b:00:37:3a:
0f:e4:58:7d:6e:db:12:43:21:28:05:d2:d5:5b:91:b8:f5:52:
66:84:27:2a:45:71:7f:b5:92:5f:9a:9b:dd:d9:2b:25:a5:2c:
bc:39:1a:ae:11:0c:57:e3:34:5c:9c:96:5f:75:31:14:38:92:
ca:6d:39:f9:3b:c9:4c:f7:fa:6a:23:8b:db:0d:f4:80:89:60:
d9:05:33:e9:d7:0c:2d:c2:15:3d:82:aa:0e:19:97:77:55:43:
8b:f8:18:c7:88:09:e5:23:5a:98:6c:f6:64:2b:00:fe:00:b0:
b0:5e:d8:3b:52:90:43:bd:c6:19:25:ce:d7:ba:5c:c8:24:10:
92:bf:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:17 2025 by rpki-client