Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
File: YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft (raw, json)
Hash identifier: OCt+OT5hvprcMJtv6ie0zB6k1MuDWs7CxokdyufKz48=
Subject key identifier: A4:DB:55:47:91:64:78:67:14:A0:36:6B:79:59:75:E7:30:7D:2B:95
Authority key identifier: 60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
Certificate issuer: /CN=60b28e2723955a3f63e47b3230317eae9292ff32
Certificate serial: 0199FA69F9C440A21E6364536425DDE52FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
Manifest number: 13B2
Signing time: Sun 19 Oct 2025 03:01:13 +0000
Manifest this update: Sun 19 Oct 2025 03:01:13 +0000
Manifest next update: Mon 20 Oct 2025 03:01:13 +0000
Files and hashes: 1: YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl (hash: EoQDpuA9Vc4OMgmOfkL69l91+v/AjANKPcloKl8Hhiw=)
2: juaLzkk146uKRNECXoCuy_05vr4.roa (hash: CBsklMpH50L/CyQYAcOQ0dS2lSB0D35sIe8vyHi9T14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:f9:c4:40:a2:1e:63:64:53:64:25:dd:e5:2f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b28e2723955a3f63e47b3230317eae9292ff32
Validity
Not Before: Oct 19 03:01:13 2025 GMT
Not After : Oct 20 03:01:13 2025 GMT
Subject: CN=a4db55479164786714a0366b795975e7307d2b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:c6:04:1a:70:35:f3:d1:4a:35:b3:ca:50:
1c:1d:61:16:9b:c0:e5:53:02:b7:f0:9a:af:fa:c2:
50:92:c5:aa:12:e0:3d:2c:7c:84:e5:06:22:0c:04:
91:c0:de:d1:71:14:c0:30:be:96:2e:ce:19:2b:aa:
cc:62:92:aa:94:1c:fd:f7:0a:e9:07:c5:de:58:f9:
ae:2a:1a:6c:98:50:f3:66:b1:17:44:d2:ef:b2:79:
4e:8c:89:07:25:4f:54:05:48:1e:56:c8:bd:7b:79:
2a:11:27:54:7d:bb:4a:b4:bc:d1:0a:d0:07:58:9f:
98:6e:07:fd:cd:3c:04:5f:36:bd:63:fb:96:69:dd:
69:46:40:5b:3d:a9:3f:de:0b:a9:4c:65:94:a5:14:
e0:aa:07:bf:0b:0f:fc:49:c2:cb:ff:c1:bc:b4:3b:
b4:74:f8:08:df:78:f9:36:62:80:c3:c0:6c:ee:74:
d8:66:5c:6f:7c:92:bd:bd:da:68:12:3c:91:b1:df:
c6:ff:55:b1:10:e5:d0:d9:9f:bd:55:ae:65:a9:74:
26:fe:eb:00:3d:d1:59:e0:76:0e:27:0b:ba:98:ba:
3f:ca:f0:65:0a:2a:97:1e:c1:37:1b:5e:16:b6:09:
3c:b9:4c:09:20:a9:f0:5f:98:89:5d:ee:11:d0:e5:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DB:55:47:91:64:78:67:14:A0:36:6B:79:59:75:E7:30:7D:2B:95
X509v3 Authority Key Identifier:
keyid:60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:d8:ad:ae:e2:55:53:9d:08:49:7e:63:87:66:73:ce:12:
34:0a:4e:69:53:2c:3c:cb:5c:fd:6f:ea:3d:5b:12:68:41:6b:
ab:e5:90:64:88:fd:d5:c2:8d:7b:17:fd:da:10:51:ab:96:ca:
68:b0:5c:ae:6e:60:61:0b:58:de:0c:a5:d2:9b:0b:bd:fe:57:
43:89:32:d5:cd:f9:6f:39:a7:29:eb:72:f0:30:4b:12:40:4c:
65:81:89:78:e7:71:74:cf:d0:03:d8:1f:30:82:21:49:bb:c5:
7d:26:d0:03:f3:58:e5:dc:17:cd:ca:5c:97:96:30:47:a5:04:
e6:47:7c:0d:7b:67:4e:89:f7:1d:18:f9:5b:a7:1f:12:47:2d:
37:c4:ed:3c:b7:16:06:ab:71:1e:e4:ca:4c:57:51:39:e1:aa:
61:02:56:2f:a8:a7:c8:9c:69:1d:15:e1:fe:3b:e0:b0:1a:d0:
d3:a3:31:a1:c6:04:91:80:6c:b1:20:1f:a2:e4:ac:4a:fa:a6:
8d:1a:ff:6b:e6:03:0e:09:07:25:27:eb:6d:f3:30:98:92:2a:
81:73:cc:da:de:a0:e5:43:d9:67:df:68:79:d7:f1:e9:3a:6b:
cc:59:c3:29:fe:57:53:01:59:e1:f6:2e:0d:ea:3e:3c:9d:7d:
be:ba:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:05 2025 by rpki-client