Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json)
Hash identifier: v8e5JP/c7LtlZl8pEiNu5jKNqvbHd4a/FMvCbCzkRkg=
Subject key identifier: C8:75:80:5D:95:5F:48:36:EF:BD:2D:FE:75:5C:49:6C:F2:BC:A4:39
Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Certificate serial: 0199FBEBFB91B50EF9F0CB2CF434F7FC4077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
Manifest number: 0EB8
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: LHUdM8jGOoe6sKwDHlpQC+GpIIB8OI+q4yngTQZ+FUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fb:91:b5:0e:f9:f0:cb:2c:f4:34:f7:fc:40:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=c875805d955f4836efbd2dfe755c496cf2bca439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:0f:60:c4:d3:52:71:14:14:b3:58:4e:8d:
c2:9f:4d:28:53:3f:9e:bc:8a:76:e5:37:0c:e4:e1:
fa:de:24:fa:0d:9b:b2:a6:7f:17:44:a4:ca:a9:7c:
b3:07:f0:53:9c:19:9e:c2:67:6e:69:f0:c0:65:4e:
70:85:66:43:6c:a8:5b:1a:72:c6:e0:15:0d:a1:95:
c6:e6:d4:72:6f:53:c4:83:4e:a1:76:c6:46:1d:90:
cc:9d:79:84:42:09:a1:8b:0c:0b:02:33:66:7f:de:
4d:49:87:ee:2b:9a:18:e1:02:c8:dc:8c:91:cb:51:
03:88:f8:ec:b1:e8:fd:d2:78:2a:ce:43:f9:cf:ea:
a3:eb:c3:d8:c5:5a:5a:d3:f3:4e:8d:bf:7f:36:fe:
19:46:04:06:3e:e7:6a:fd:26:a0:d1:f5:82:77:a7:
53:3f:e3:a1:68:44:ba:11:97:4c:37:71:99:2b:8e:
3a:ef:28:a8:20:69:30:41:ef:73:e3:69:52:84:c2:
0d:12:b7:f0:28:8a:0c:b2:9a:ca:bb:c9:48:fb:77:
28:f8:41:83:49:35:60:d3:61:0f:3a:f7:7e:ce:28:
26:17:bc:a2:e0:44:d1:7f:32:ff:4f:89:86:e4:56:
28:ba:2b:0b:ca:8d:b3:95:3b:e1:c6:fc:05:51:b2:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:75:80:5D:95:5F:48:36:EF:BD:2D:FE:75:5C:49:6C:F2:BC:A4:39
X509v3 Authority Key Identifier:
keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2c:b1:fe:33:07:28:02:d7:31:23:71:37:d2:45:1f:e8:e3:
76:5b:4a:57:ce:56:15:28:a1:24:a5:0d:30:4b:fb:e4:c5:0b:
8e:9a:08:51:d0:3e:cf:59:20:31:ae:a2:82:af:92:1b:b4:88:
7d:20:e8:a7:65:81:c5:2e:b3:58:37:01:ba:c0:4b:16:15:88:
56:4a:6b:74:b9:fb:50:2e:36:b2:c1:78:86:c7:47:f7:35:e7:
82:38:49:b8:37:d2:c4:f1:6b:55:92:a4:9b:ee:0c:55:12:c3:
aa:c4:3f:8c:e4:4d:a1:88:8e:74:9a:f1:17:e4:63:14:3e:13:
f4:d7:92:d5:e0:bb:a9:b1:d1:b8:f0:8a:9d:8f:96:e1:b1:1a:
e2:35:5a:51:ba:f9:f1:20:13:d8:a8:fd:e8:8c:06:d8:be:69:
19:13:01:07:cf:96:48:2a:d2:2b:98:c8:13:61:75:69:c0:e6:
c2:e5:24:fc:e7:1f:ba:ab:ad:57:5f:7e:94:22:13:ef:81:7d:
01:eb:be:56:89:f9:98:0c:72:99:41:bd:a6:23:34:3a:94:35:
82:1b:60:1b:aa:67:9a:bf:c2:bd:21:fc:83:b5:c1:9f:3e:f4:
a6:9a:4a:b5:71:8a:26:d9:17:fc:d2:3d:99:e0:fd:3b:02:44:
95:45:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:54 2025 by rpki-client