Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
File: ypfglEx3smswKXwtScO-ausnNxE.mft (raw, json)
Hash identifier: KMHjQqvnzixjBG4xuKu0erNBuBllyBYjD/LL/aANW/U=
Subject key identifier: 13:45:48:B2:BC:81:4D:27:6A:E6:A1:6B:3F:54:7B:4E:2F:81:94:D6
Authority key identifier: CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
Certificate issuer: /CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Certificate serial: 019A01B4CAC6BC0A593D2734B4369A0DEDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
Manifest number: 03FA
Signing time: Mon 20 Oct 2025 13:00:16 +0000
Manifest this update: Mon 20 Oct 2025 13:00:16 +0000
Manifest next update: Tue 21 Oct 2025 13:00:16 +0000
Files and hashes: 1: ypfglEx3smswKXwtScO-ausnNxE.crl (hash: 4LmhEzhmwURfps08ofLF0pXcnCF2EG+mdcU3kz5imnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:ca:c6:bc:0a:59:3d:27:34:b4:36:9a:0d:ed:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Validity
Not Before: Oct 20 13:00:16 2025 GMT
Not After : Oct 21 13:00:16 2025 GMT
Subject: CN=134548b2bc814d276ae6a16b3f547b4e2f8194d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:17:85:5f:8c:93:62:9f:7d:d5:05:cc:af:
c3:31:6b:5d:b8:d0:0f:96:e7:64:00:9e:d1:84:ab:
46:25:db:a2:95:ce:ae:e1:67:2f:8e:e2:cc:bc:ee:
3a:3f:55:79:34:c1:c4:56:f5:17:e6:a8:1d:85:f7:
d4:18:95:2d:ed:91:fa:4c:6c:aa:64:fe:ad:92:bc:
d5:2e:a5:dc:cb:b8:7b:7c:f7:7c:f3:07:99:5a:0e:
c4:a0:74:56:c9:53:30:f4:d1:8d:82:4d:97:fd:57:
30:14:46:7b:a1:0c:88:f0:05:57:6b:62:5c:19:8c:
94:ae:54:36:27:1f:4b:5e:31:ab:b5:9e:88:57:d2:
82:a9:69:de:0f:5c:d0:10:3a:0b:6c:5c:e8:1c:17:
79:90:e9:f0:cf:88:b4:54:ad:30:57:89:d6:c2:07:
4c:82:c9:bc:c2:e4:51:2b:4a:a9:2b:b6:0b:d4:9e:
0e:26:6a:cc:32:4b:62:56:7e:03:27:a5:84:9b:80:
4b:69:15:52:36:a4:9a:b5:49:08:27:fd:ee:f7:f1:
d5:6e:6c:2d:5f:2e:5c:00:57:d8:7e:76:8a:60:7a:
35:5f:03:b7:b4:16:55:08:b4:21:3c:2a:bd:38:54:
a2:a3:b0:2c:9a:01:fb:9e:e9:8e:60:2e:d3:3a:0a:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:45:48:B2:BC:81:4D:27:6A:E6:A1:6B:3F:54:7B:4E:2F:81:94:D6
X509v3 Authority Key Identifier:
keyid:CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:80:16:28:c4:eb:dd:47:07:6a:8e:99:e4:2c:dc:54:2a:e7:
a8:9b:da:5e:cf:e4:65:69:e2:d8:3e:43:ff:03:51:e1:7c:81:
a3:7c:5b:75:93:ff:61:8e:35:a9:3b:48:e5:f3:4b:8f:bf:a3:
dc:31:fb:ce:99:9b:d6:27:39:9d:a7:c5:a3:2e:5c:5e:70:7c:
84:c0:a6:b6:4f:ac:28:bc:80:6a:7d:db:86:71:06:9e:d5:23:
99:84:3f:e1:8e:e5:07:b9:67:4c:ec:29:a9:8f:ad:88:85:4b:
30:df:5f:8b:32:58:1c:dd:c3:04:b8:a6:17:a1:59:65:cd:61:
44:64:b9:2d:44:23:81:b9:08:5f:e9:29:f7:18:70:68:a5:f3:
63:36:24:fb:78:fb:f8:24:53:f1:23:1c:ef:e4:ff:48:7c:3d:
d6:d0:2a:e8:c7:fe:6f:d9:96:c6:f2:22:9e:d6:a5:f9:bb:e1:
9a:fb:51:46:82:cf:a5:ec:86:a8:fb:41:07:d9:b1:3b:61:c5:
b8:5b:bc:68:cb:86:74:8e:68:4f:15:5c:fa:ce:0c:e7:67:71:
70:40:c7:9a:e9:58:81:08:a7:d9:9d:d2:c2:82:3f:3f:c2:7f:
7a:41:4e:9a:a8:89:8d:2a:f0:17:dc:5e:60:1b:73:8a:1a:c2:
7b:0c:45:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:55:08 2025 by rpki-client