Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: rBErp0rqxmPxQ+ZMbmL2XR91nitP1nKk4c02W09Ss1Q=
Subject key identifier: CB:D4:21:D7:47:4C:D5:62:21:80:61:A3:A1:D3:63:6D:B4:59:6C:FA
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 0199FC2163AE3DDE33DBBA546F5B7F65672F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 12E8
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: s7OarOVvlRYxoJNj6bfVt6HKlZRSYBcSdXe3+mvlBHs=)
2: iK-6vM3UN-0JPyozDLdhLjJ5znw.roa (hash: LEDGjWpooiw+DnQIpdRJAz1t/vP9dQU00MHsp9zo7Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:63:ae:3d:de:33:db:ba:54:6f:5b:7f:65:67:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=cbd421d7474cd562218061a3a1d3636db4596cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:9f:04:97:e3:46:89:52:bb:39:e3:fb:6a:
e5:c6:50:9e:99:7c:21:69:42:a7:ed:bb:39:a9:8e:
6e:8e:a0:d1:79:87:af:27:84:66:ba:d6:c7:e0:f0:
e1:9e:5d:09:a4:d3:8e:3b:bc:9d:10:99:59:52:9e:
8b:b6:4a:6f:a8:6b:80:80:3d:68:5d:03:55:ca:64:
2e:7f:69:c6:bd:ce:87:88:d6:25:6f:00:71:23:06:
c1:81:58:49:69:1c:41:01:17:31:0d:04:fc:29:98:
47:5c:da:5e:da:19:be:4f:bd:ad:50:d9:b4:ca:60:
26:b2:54:96:0b:29:61:d5:ad:e2:1b:8a:77:8d:05:
e1:38:a1:34:81:1e:b6:a6:44:96:b3:39:d0:d0:14:
14:a6:26:d4:92:f0:cb:a4:0c:b3:f8:cc:68:2f:27:
d2:f3:0c:a6:4f:8e:2b:69:94:dd:1d:3f:91:06:16:
c0:3b:a3:51:88:88:d1:01:29:45:f5:a3:4f:22:7e:
df:ec:27:37:e5:19:bb:84:43:91:89:fd:b1:1b:1d:
2c:01:9e:60:dc:81:c9:e4:7e:49:c9:28:6f:05:0c:
00:86:1c:e4:df:1d:66:1d:60:43:87:61:3c:9b:76:
4e:b1:3a:71:ea:22:e6:4a:17:cb:83:b3:66:a6:19:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D4:21:D7:47:4C:D5:62:21:80:61:A3:A1:D3:63:6D:B4:59:6C:FA
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:38:95:58:d0:bf:e0:f0:1f:05:02:37:64:53:46:11:f3:8e:
dc:ab:c1:41:57:63:09:b6:0e:ff:96:99:a0:87:c8:03:4f:be:
4e:c3:d4:15:fc:59:89:28:cf:06:0c:a0:86:b9:a9:b6:95:31:
ea:a2:34:eb:e5:03:7b:9e:33:b8:5a:e5:ec:51:20:96:6f:37:
c1:a8:d5:ff:26:d2:84:ad:53:ff:ec:77:cb:ff:2c:f2:5f:5b:
da:78:81:91:fb:77:08:e7:3e:77:12:93:03:cd:12:03:a8:c9:
34:5b:7c:3d:cf:e8:40:8d:70:50:26:52:e4:92:b9:bb:7f:98:
f4:d5:0e:88:00:57:ee:ef:d0:0a:85:70:57:7e:93:22:a5:92:
e9:c8:f3:dc:75:36:24:e0:23:68:bc:9d:f5:ae:c3:56:a4:60:
06:65:90:d9:b8:70:66:44:1b:94:61:62:d1:ea:6f:29:0a:f7:
fe:ff:e8:93:ef:4a:51:70:42:f2:b2:61:1b:cb:7c:2e:9b:e3:
38:69:6d:08:97:37:50:28:de:61:36:68:af:83:11:1d:04:2d:
b5:2f:59:4a:05:c7:a4:18:ff:74:39:2e:97:3b:2e:a2:6d:39:
4c:62:b5:e1:06:6f:b3:24:ba:90:ec:7b:88:ff:27:03:fd:0a:
b8:06:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:15 2025 by rpki-client