Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File: YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier: GNBR/lNiGjOPT9mLCv6AcKdfE94T81rLrOXBNNlTp+U=
Subject key identifier: 84:3D:1B:DF:5C:6A:47:5D:5E:57:FB:81:B6:9D:77:08:10:C8:64:A1
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 0199FC21BC2936D6377CD04FD66372F0F3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number: 0F93
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: IYtD18v6JqAnYzRhCwJ21QFwqc16qTPlgnKT3q92KDc=)
2: mup8GQy15_aAg1Pw6XmTJJBYc6U.roa (hash: hohcyT5y2j17Wyro0Vy0aX1JnJvKhwBIlTz/mg4feZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bc:29:36:d6:37:7c:d0:4f:d6:63:72:f0:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=843d1bdf5c6a475d5e57fb81b69d770810c864a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:65:db:f5:3c:95:3d:99:66:d8:03:08:39:
b4:49:e4:2e:03:1d:a9:69:45:09:89:6b:00:07:59:
52:be:e1:24:d5:eb:54:47:fc:7b:4d:87:31:77:fd:
f9:d2:05:8e:2d:c1:7a:69:b8:05:df:5c:95:cc:d5:
cc:02:50:b2:32:23:5e:95:86:1d:99:fc:b5:3c:c4:
c6:1f:62:1f:ac:1a:b5:16:5b:a1:0b:7c:49:d4:40:
97:04:88:30:48:df:71:47:9e:ad:b7:5e:76:4b:a6:
f7:ba:29:be:c5:c4:5e:19:9b:db:39:fe:fb:35:55:
3f:c9:29:1d:62:d1:c1:59:5c:d2:30:63:20:6d:07:
b6:b1:25:22:d2:d6:63:e2:15:48:3d:e8:e2:6c:5e:
12:d2:eb:e8:bf:d2:ec:df:62:ed:3b:1e:43:1f:ab:
43:57:4f:54:c2:99:35:9a:ce:3b:82:c7:46:03:2b:
63:7d:93:ea:9b:c9:37:39:8f:ae:dc:1e:52:4f:d9:
c7:3b:07:a8:e0:68:1e:30:4e:f1:ca:bd:8c:a9:a3:
79:f3:e5:a9:70:7f:da:9c:0e:af:bf:8a:90:17:66:
5a:f3:3b:b3:fb:3f:26:41:c8:8c:4f:fb:af:d0:f4:
0d:82:65:a5:48:19:8e:ca:d7:5c:a5:e5:79:18:a7:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3D:1B:DF:5C:6A:47:5D:5E:57:FB:81:B6:9D:77:08:10:C8:64:A1
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8a:ed:e3:62:44:27:fc:6e:f3:38:90:ef:b9:77:1e:3d:23:
bd:32:01:3f:cb:2c:c0:c7:8b:cb:91:ad:60:7c:58:e6:d2:a8:
b2:97:cf:6e:5d:a5:ee:ec:fc:b0:68:58:78:30:bd:6d:90:59:
d4:2e:17:c5:19:5e:a6:9d:73:e5:3b:13:56:cf:c5:de:08:5c:
eb:57:bd:60:c9:b8:05:0a:43:ec:a1:ae:31:96:94:24:73:26:
2c:d9:24:33:21:a8:4d:8d:95:4c:7e:e9:df:85:42:be:e5:e7:
11:e4:32:72:33:96:4e:5c:25:2c:8a:84:55:d7:9a:2e:14:b4:
1d:f6:57:af:da:09:63:c1:7d:cc:2a:57:5a:b4:03:27:78:cd:
ce:71:1d:92:52:42:a4:2b:2e:28:1d:4f:bf:de:15:15:2d:79:
8a:32:d5:ae:6c:fb:1c:58:a5:d2:d0:83:29:96:12:32:bb:8a:
1a:4a:99:c9:28:c5:f5:85:e2:93:6b:ee:33:a6:d4:34:8a:53:
4a:39:0f:fc:05:ca:1f:2e:e0:13:e2:69:97:dc:bf:50:0c:19:
61:9d:4f:34:a9:9d:55:0a:74:bd:5a:a1:69:e1:ab:d1:94:9d:
c2:c0:86:42:1a:af:4e:df:f4:17:1b:d2:fb:c7:1b:e8:3c:7d:
12:29:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:20 2025 by rpki-client