Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier: I9JlJUcsABYZ5R04LxD8JUxjMDYEJEHFfx8dy22SdyE=
Subject key identifier: 88:96:5B:E3:9C:7C:E7:A0:FC:29:E5:1B:84:32:9A:D5:46:B6:9E:7A
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial: 0199FC8F748FA574556790EDAB576BEE92AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number: 064C
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: xq7u34RGc29JUWTpBncwwEWdEeItkwdBIgQk8V7EWbE=)
2: b8AVOGW_uWiltgqsOrfUVPuVbhk.roa (hash: g14bBKv/Ezpz+JlzQJs8s4kzh2JITmna3X17wkbp61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:74:8f:a5:74:55:67:90:ed:ab:57:6b:ee:92:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=88965be39c7ce7a0fc29e51b84329ad546b69e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:0c:01:6f:56:bf:4a:bd:0c:7d:9b:31:1a:
08:e8:9f:8a:ab:9f:1e:41:d5:b1:80:8d:59:ba:af:
ee:d2:b6:b3:ff:3b:fc:42:d9:40:e0:24:4f:62:d6:
84:91:f6:af:2a:b3:ff:61:55:0e:ac:14:a5:e8:d5:
5f:07:01:6c:a4:ba:36:b0:9e:15:ba:b9:c5:86:6a:
9d:79:65:71:f7:0f:c3:6e:e5:ed:de:48:ea:f6:1f:
5e:57:fe:2e:d7:ae:04:38:70:0e:68:a0:39:3c:b5:
d4:07:88:0b:25:4a:4a:9e:0a:57:99:85:1b:d8:00:
12:04:ed:df:df:21:ff:15:60:70:5f:63:d3:8c:1d:
b9:62:a1:57:05:3a:86:78:93:c7:65:b3:2c:d2:77:
b4:16:b4:51:0c:bc:86:84:8f:b2:8c:63:1f:40:6f:
5c:09:14:30:39:7d:00:1a:8d:4c:00:54:37:1b:73:
c1:53:f1:e0:1b:90:1d:8d:1d:6a:83:bd:e3:fa:38:
de:c0:ee:63:28:61:c6:04:1e:5d:66:10:33:b6:ac:
12:de:c4:71:b8:72:f0:a9:44:48:07:76:bd:a1:0c:
86:98:b5:f9:f0:b2:8a:f0:27:31:aa:57:28:d3:06:
10:89:78:e7:a1:1c:7c:e3:25:74:f8:64:9d:ad:db:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:96:5B:E3:9C:7C:E7:A0:FC:29:E5:1B:84:32:9A:D5:46:B6:9E:7A
X509v3 Authority Key Identifier:
keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9c:60:4e:54:79:f4:0c:2f:3e:ad:eb:89:bf:39:57:af:30:
a3:8d:72:a1:52:a5:1f:b5:a1:47:fb:e7:ee:fc:e0:b5:5b:8c:
db:0d:ba:65:74:b2:ff:50:74:aa:c6:52:34:16:b9:c9:fc:2e:
ef:dd:4e:58:68:a7:80:6f:2c:2a:6e:96:de:2f:23:f4:90:30:
97:eb:ea:db:b7:75:28:23:27:1b:f6:57:b3:82:8d:73:92:8b:
5d:ee:0a:b6:d6:4d:19:27:28:a1:48:ed:17:aa:a2:10:9e:46:
ce:9f:b3:53:6a:bc:ea:26:fd:dd:a5:1c:dc:30:69:22:83:6a:
55:d7:4b:b1:6f:3f:ab:40:93:85:15:35:a8:f2:35:62:77:13:
49:a3:cd:f5:b4:3f:82:89:09:f5:08:f3:12:06:49:cd:cb:c4:
f7:8b:98:3d:10:5d:8c:14:46:3d:42:ce:bb:46:ae:67:64:33:
f0:3a:61:e8:d2:2d:22:fe:b0:e4:e4:4b:7e:52:23:31:98:82:
94:f4:d6:15:ae:b0:a3:7a:4e:c1:ae:1d:e7:da:b6:49:c6:ff:
fb:7d:e3:42:27:ac:aa:a7:ef:09:00:64:57:3a:5f:f2:c9:35:
f6:4a:ae:f7:0d:5e:84:95:65:b6:c7:fc:9d:2a:e1:fc:fc:96:
e6:94:e3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:52 2025 by rpki-client