Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json)
Hash identifier: LTl4SXiv9xbSJHjaAUgmZZDYK5+OglVEUFvXq5RgYmI=
Subject key identifier: 0C:AE:C0:8D:F4:8A:96:9E:6B:5B:EC:F7:3E:5D:5B:6F:DF:1E:D3:71
Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Certificate serial: 0198D4743682AE0F90065D8C3E8653E2533B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
Manifest number: 0E1F
Signing time: Sat 23 Aug 2025 01:04:02 +0000
Manifest this update: Sat 23 Aug 2025 01:04:02 +0000
Manifest next update: Sun 24 Aug 2025 01:04:02 +0000
Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: SSbGYEI9+odicHAC/d99ZBOaKV7dPWCH4Jp14CgofXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:36:82:ae:0f:90:06:5d:8c:3e:86:53:e2:53:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Validity
Not Before: Aug 23 01:04:02 2025 GMT
Not After : Aug 24 01:04:02 2025 GMT
Subject: CN=0caec08df48a969e6b5becf73e5d5b6fdf1ed371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:20:91:67:33:c9:ae:f8:d2:b4:27:3a:9f:
b3:57:ca:de:0b:de:a6:76:ba:01:a3:d2:d0:93:d3:
23:00:73:41:39:0e:3f:11:98:1e:af:eb:7f:b7:bb:
d7:a5:de:4c:0b:d8:5e:51:d7:05:89:3a:4f:7f:43:
3c:b7:b0:4b:f6:26:ee:89:c7:55:f8:52:4d:92:15:
95:97:be:49:cc:9e:26:75:0f:26:00:ab:b3:4a:cd:
7a:49:2f:dd:fb:3c:99:a7:2d:4f:67:d1:f4:a1:cc:
d8:c0:4e:21:02:79:47:23:ba:fd:5b:70:f5:11:f2:
8e:77:cb:c9:99:0b:de:e0:80:53:ef:96:34:af:bd:
a2:85:a1:f4:fc:81:4e:e9:97:22:9e:64:fc:a5:65:
02:61:b3:07:e1:c8:5d:1f:c6:7e:ce:03:e3:53:1b:
2d:72:72:8b:bd:a7:47:e9:1f:53:ae:fb:f6:ba:b2:
17:66:1b:f1:44:ba:b8:8d:70:ac:63:1b:29:76:80:
bc:51:d4:7e:a9:65:e2:a5:ad:c3:eb:fb:6d:d9:b8:
53:79:a6:2e:cd:59:a7:b6:ea:70:61:4a:b6:ac:84:
73:95:1a:00:d2:ed:1e:ba:d2:eb:53:8d:d9:4c:4e:
58:1d:ec:f2:06:4c:ba:af:2f:cc:7d:fd:d7:d8:63:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AE:C0:8D:F4:8A:96:9E:6B:5B:EC:F7:3E:5D:5B:6F:DF:1E:D3:71
X509v3 Authority Key Identifier:
keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:61:1f:10:63:85:8d:a4:a6:af:b3:0c:97:b0:bf:8e:a4:ab:
ae:87:83:bd:44:7a:90:73:85:b3:80:5f:9b:1a:2e:2f:55:91:
f8:59:80:50:7d:23:e8:c9:4b:dc:74:c3:34:05:61:ab:54:84:
d8:e9:0c:86:2c:b4:de:2e:05:32:dd:b7:89:c9:5d:e9:a8:db:
98:02:9e:fb:a0:04:cc:c7:98:cc:96:7f:22:ae:b0:57:69:2b:
85:19:25:0f:39:a7:de:a0:8f:75:27:00:89:b1:4a:2e:02:33:
39:ac:a9:6f:1a:24:9d:14:9c:54:6a:94:77:ee:a6:6f:ea:11:
2f:bd:82:f8:bf:15:13:01:a2:16:09:44:e7:b0:fc:ce:f5:96:
fa:1c:97:3e:2b:67:14:3d:4e:0b:8c:b3:66:43:f2:d9:69:44:
f1:73:1b:fc:6d:d6:01:1c:68:0d:b4:bb:6c:26:61:15:b7:a8:
7e:f2:a9:08:e0:ca:0b:a0:05:b9:60:23:7a:5d:fc:37:b0:72:
9a:77:24:48:99:0f:98:f6:cc:e0:86:92:c8:ce:e7:72:c9:ce:
a8:60:84:1a:01:a7:02:61:df:f4:0a:a2:5c:1c:97:82:e2:cc:
0e:a5:1f:04:1e:d7:b5:d8:f8:d3:b0:c0:6e:e5:40:74:18:1c:
70:f8:dd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:12 2025 by rpki-client