Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: YjuqTvFGcH5C5yvroQ9MC+m+sz+gCqt9nQytVPDYPmk=
Subject key identifier: 54:79:67:D0:52:42:4B:D9:D5:A1:27:AC:78:10:DF:D9:2D:3F:13:84
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 0199FEB4CF9ADCA8879C126FDE64BC2B1E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 073F
Signing time: Sun 19 Oct 2025 23:01:26 +0000
Manifest this update: Sun 19 Oct 2025 23:01:26 +0000
Manifest next update: Mon 20 Oct 2025 23:01:26 +0000
Files and hashes: 1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=)
2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: EXE/Z+JXblL/sUS0mE1rBUYxnzj93JmNjbjoAregZdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:cf:9a:dc:a8:87:9c:12:6f:de:64:bc:2b:1e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Oct 19 23:01:26 2025 GMT
Not After : Oct 20 23:01:26 2025 GMT
Subject: CN=547967d052424bd9d5a127ac7810dfd92d3f1384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:61:00:8a:05:b7:d1:f0:83:83:88:26:96:
06:91:3f:a6:40:52:3d:6d:4c:56:28:22:e1:6b:60:
ba:9a:02:92:80:d5:d7:99:b7:b1:d6:0c:ca:17:f7:
cf:e8:60:21:ea:3e:8f:96:b4:60:de:c5:c9:92:62:
3a:58:43:e6:62:c9:26:20:76:96:42:91:c4:90:d0:
91:47:7f:14:24:c9:fb:7a:bb:9c:2e:1b:28:0e:60:
bb:96:2f:c0:b1:b1:23:01:99:72:44:8e:66:e8:55:
6a:5d:96:35:ad:38:7a:b7:d0:71:95:d2:ce:71:33:
92:82:1e:fe:c5:af:46:53:ae:38:21:38:dd:0a:9e:
54:82:c2:60:4e:8c:f4:fe:a5:be:a3:8a:d2:57:f1:
bf:bd:3f:46:d5:a1:54:af:75:5b:58:e7:38:ae:d4:
9f:ca:aa:59:65:76:b2:17:bc:26:c1:da:6b:2d:3d:
23:dc:12:15:bb:14:9a:24:4c:db:f7:76:2b:d5:13:
76:9d:bb:09:33:3e:50:01:fa:3d:c4:75:ab:62:01:
09:96:04:b1:70:7b:da:39:54:26:19:d7:92:28:c5:
db:91:81:44:08:8a:88:b4:13:10:51:42:4d:92:b6:
42:e9:54:25:1d:b0:7c:c2:c5:5f:4c:9d:5c:c2:bd:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:67:D0:52:42:4B:D9:D5:A1:27:AC:78:10:DF:D9:2D:3F:13:84
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:90:3d:2d:35:be:13:f8:62:cc:09:8a:fa:3e:b0:bf:f5:a5:
4d:b6:fb:f7:73:ea:58:59:a7:bc:17:70:4a:2a:c3:95:4b:f0:
51:5b:f5:44:e3:40:95:60:c5:a1:1e:e4:e8:0e:d2:6d:d8:a0:
95:a5:0d:f0:3a:05:c1:fa:a7:92:87:31:b2:80:7d:94:d4:e3:
48:53:cd:11:2b:07:30:1b:4d:ea:ef:3c:49:d7:21:f4:b0:e1:
e8:87:08:05:a1:08:0a:45:b0:98:ce:7e:4c:2b:74:14:30:23:
ec:5a:00:1f:73:01:14:ae:e2:12:64:bd:50:77:61:1c:00:43:
fd:e7:0e:6b:d8:ca:f0:b1:27:cc:2d:68:6f:40:f1:16:17:ed:
1f:a4:03:ce:c9:97:70:d7:90:13:c6:2b:8a:b7:83:e5:ff:4a:
a7:79:08:da:d1:b7:dd:af:8b:aa:05:ea:c2:3e:db:be:4a:f7:
2a:42:27:50:4c:23:11:d7:05:5e:eb:02:03:12:c9:91:ec:b0:
45:e4:4c:7e:b3:76:90:34:75:0a:71:bf:f3:e0:0e:63:6d:1d:
4f:6a:40:c1:de:ba:b6:8c:dd:1c:ea:8f:73:2a:c6:3f:b4:f0:
c3:de:01:6f:f7:f7:aa:21:c2:b4:9f:30:e2:45:6b:ce:52:ab:
84:ac:3c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:39 2025 by rpki-client