Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: ywFpenEAlJlXXKpZDvJkpdIerfZjQ9PNi8C1uqGMudU=
Subject key identifier: F1:6D:13:56:07:6F:F7:79:2F:EC:8E:A3:E7:57:17:D3:C3:53:30:9D
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 0198D66045D54224D5AEA6C54198B0E5AEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 124F
Signing time: Sat 23 Aug 2025 10:01:30 +0000
Manifest this update: Sat 23 Aug 2025 10:01:30 +0000
Manifest next update: Sun 24 Aug 2025 10:01:30 +0000
Files and hashes: 1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: ziSu2gvUNUVVVrq3itHpjhChIVE6jcfwQB8tfMTsCgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:45:d5:42:24:d5:ae:a6:c5:41:98:b0:e5:ae:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Aug 23 10:01:30 2025 GMT
Not After : Aug 24 10:01:30 2025 GMT
Subject: CN=f16d1356076ff7792fec8ea3e75717d3c353309d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:63:8d:d2:8e:1b:8f:e1:ac:4f:4f:9f:25:
c7:08:66:9d:47:94:c0:61:03:33:9a:d3:d6:2d:f4:
36:d5:d4:f7:ce:ac:86:eb:d3:37:65:71:f0:22:f8:
da:01:e6:dc:fa:1c:83:87:48:f1:3b:58:be:9b:5c:
51:9d:f2:b0:97:91:df:bf:d2:e0:79:d5:56:8f:27:
dc:42:0d:8c:54:75:c6:80:16:c7:b3:32:52:26:c7:
15:9d:be:88:60:5f:73:35:19:a2:d6:2e:b7:cc:9f:
f1:0d:77:7c:f5:1e:0a:fe:b9:e0:ad:1b:dd:25:d6:
04:53:2a:c8:6d:64:9b:24:54:13:1d:e9:78:7d:02:
19:52:38:0c:ef:5e:f3:1a:f9:a0:d1:0b:d5:f0:db:
88:17:41:38:20:0f:0c:a4:aa:ef:c9:f0:61:fd:6b:
e7:a4:d7:23:7d:f0:02:74:db:d3:5e:b1:18:f3:a6:
1d:04:11:82:02:9b:61:59:50:30:95:4f:df:e2:aa:
39:a1:a6:05:6a:72:94:c3:58:04:40:8b:6c:55:66:
19:ad:d9:42:40:50:f6:f7:a7:34:47:1c:eb:17:08:
23:64:b6:9e:97:d8:f6:42:88:d5:16:39:28:4a:41:
2e:61:43:f1:5b:5f:2c:60:62:31:28:fe:eb:38:e8:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6D:13:56:07:6F:F7:79:2F:EC:8E:A3:E7:57:17:D3:C3:53:30:9D
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8e:08:c9:c8:2a:58:af:55:1e:f5:19:cb:f0:70:5e:05:06:
9f:93:84:cc:9a:e9:cc:a8:85:ae:a6:f4:c3:38:12:59:08:74:
ca:ee:69:75:ef:f2:c2:a0:ff:73:07:31:ee:84:7d:4b:ad:f6:
f0:a2:7d:d5:ce:f1:9a:80:57:36:2f:d5:eb:72:ac:f6:50:98:
8c:5b:99:7c:dd:f1:de:0f:c5:dc:dd:df:99:6f:e7:03:fe:90:
75:a9:c0:0d:a9:71:9e:52:75:c0:ed:87:82:62:7b:a1:34:b3:
39:c3:18:81:96:07:0e:d0:4d:67:6f:f9:94:62:a8:b6:4a:40:
70:d9:64:77:1d:66:a2:36:00:3c:fd:bd:c7:ae:8e:bd:e1:8a:
87:a7:fc:79:41:be:78:19:4f:37:71:94:ba:e3:f0:7a:09:7e:
52:52:a3:55:d3:07:8b:0b:24:1c:61:d8:99:89:bb:bb:98:2c:
3d:03:43:d8:34:17:e8:ae:19:4a:45:7f:1f:90:76:28:ee:ec:
24:1c:97:ef:81:0c:a3:aa:55:0f:40:ac:4d:65:2a:79:b1:54:
71:d1:cc:87:a4:66:48:12:1f:9a:35:74:ce:7a:e1:43:f8:1b:
5e:e0:a3:c1:06:19:60:c6:13:87:04:87:c8:d3:3c:dd:4b:eb:
c6:e3:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:42 2025 by rpki-client