Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
File: YPa89uKxCboqFKc7l1rZVEhLS6U.mft (raw, json)
Hash identifier: l1LdDiqQkpVgyv99wL1E7wHBMiX8Y/RsaG1m5jrRnRo=
Subject key identifier: 40:28:C7:D5:31:20:2E:58:3B:71:7E:5B:B6:46:2C:46:E0:05:21:40
Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
Certificate issuer: /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Certificate serial: 0199FC8FB383972D65260FA2A895A19F0DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
Manifest number: 0B64
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: YPa89uKxCboqFKc7l1rZVEhLS6U.crl (hash: wXzHamaqTq6sZoWPi/RtMFHHdOVdH28Q9XAGrGI3dNc=)
2: oNp64lcp-PwrYsQaBw1j30tzyNw.roa (hash: FzeHCqPb/tC2Vmdnn3r7gfGFiDclam5dSTVPZrLAWO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b3:83:97:2d:65:26:0f:a2:a8:95:a1:9f:0d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=4028c7d531202e583b717e5bb6462c46e0052140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:f0:e3:aa:70:9c:4c:21:a6:b6:a4:8f:32:
37:8c:f7:9e:3b:da:a8:b0:ec:78:14:70:f8:ed:a9:
74:b1:ae:bd:1c:4e:10:cc:57:eb:c4:5a:d2:3f:1b:
ba:ed:f2:8e:7f:c2:5e:55:6e:0a:cb:b4:77:58:d6:
77:61:a2:1e:65:23:a7:45:0a:b0:82:a2:9e:69:a5:
98:63:21:15:a7:60:36:a4:76:e4:e5:b9:8a:50:77:
d2:a9:85:65:7e:b3:58:d6:fe:da:61:31:2d:c8:6d:
3e:62:92:b9:85:01:e3:cd:7d:92:96:e6:00:35:24:
2f:fe:e5:12:34:1f:5a:77:c9:a0:9b:fb:65:c5:a0:
09:8d:69:d4:66:84:77:b7:5b:70:02:92:1f:de:88:
4d:77:9b:cb:40:6f:a0:f1:f4:87:5d:36:23:a7:6f:
cc:3d:5c:1b:32:d9:72:78:a6:5c:0d:20:6e:91:7c:
15:39:bf:e5:1a:5c:e7:b6:e6:e0:ea:43:a0:f7:37:
7e:a4:ce:ee:b3:51:0f:ed:ef:c5:eb:81:d6:37:d3:
ad:ec:af:bb:1d:a1:b5:e3:62:68:24:6c:e4:a0:c9:
88:9d:fc:99:e0:3c:7d:c5:9a:fa:fe:2d:e8:9f:61:
44:7c:b5:25:4c:67:19:1a:53:71:20:5b:f0:5e:88:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:C7:D5:31:20:2E:58:3B:71:7E:5B:B6:46:2C:46:E0:05:21:40
X509v3 Authority Key Identifier:
keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:31:e3:07:e9:57:0c:90:a0:05:59:d0:6b:ec:ef:18:ae:c4:
8e:21:f1:ac:13:1d:2c:52:c7:42:ae:f4:80:f1:f8:6a:f7:f9:
86:11:96:aa:80:20:7e:cd:34:e0:25:f8:7b:69:ed:91:88:6a:
bd:02:59:15:ea:27:5c:0d:5c:a1:71:8e:f7:aa:e1:d9:c4:b5:
78:97:cc:35:cc:78:55:50:9f:95:dc:77:67:9d:7b:56:9e:29:
bc:aa:b5:03:44:49:96:46:67:7c:a0:41:05:76:9e:f6:45:c1:
f6:c6:52:20:54:a3:a7:d0:d2:df:0d:70:62:61:ce:26:9c:5a:
1e:95:a4:08:3a:42:bf:e3:a0:31:cd:20:66:1c:30:58:95:5e:
cc:8c:a7:77:f0:42:71:d4:21:d0:27:93:b2:78:07:a7:c4:1b:
93:44:89:b2:01:01:b6:05:a5:60:51:d7:3e:97:fe:26:b9:39:
10:3f:d0:60:e4:15:68:26:29:a9:15:f2:4b:fb:05:17:15:86:
a6:b1:64:a7:66:dc:08:7b:6d:0e:52:b5:98:0c:3f:c3:fb:b9:
45:d2:8c:f7:d8:58:db:7b:9d:c0:84:33:4b:e1:cb:78:c9:de:
1a:12:f2:90:f7:1c:6a:2a:12:58:df:04:cc:e8:9d:c9:15:d9:
46:23:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:46 2025 by rpki-client