Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: ypjB00QuRgrU5B4c3waDuBGx4beeBhrkN4+TFEq3RKg=
Subject key identifier: 73:7F:20:D3:4F:4C:21:32:54:21:05:B8:44:9D:BD:B6:73:A0:CA:33
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 0199FAA0C81443A347481360F3E29AB8035B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 96
Signing time: Sun 19 Oct 2025 04:01:04 +0000
Manifest this update: Sun 19 Oct 2025 04:01:04 +0000
Manifest next update: Mon 20 Oct 2025 04:01:04 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: 8u3P0fT9x/qVIoaEnMD6EcxAEBR3yqO8qUCYixfKEgE=)
2: ZvIBvN3gO9RJM7uC8BrV6jzhAmk.roa (hash: dioBOx3h8ph3ofANtrh34SCoANsWuT4s9fkC5DmIrUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:c8:14:43:a3:47:48:13:60:f3:e2:9a:b8:03:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Oct 19 04:01:04 2025 GMT
Not After : Oct 20 04:01:04 2025 GMT
Subject: CN=737f20d34f4c2132542105b8449dbdb673a0ca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:05:56:7b:f0:e5:99:b6:10:6a:5e:50:2e:
83:9b:4c:ce:0b:0f:7e:13:99:46:2d:f9:d6:97:c5:
82:36:68:fe:bc:41:f3:14:cd:6c:99:42:f7:1c:92:
41:2f:88:49:99:10:f2:95:c6:2d:8f:90:ae:be:98:
35:87:bb:eb:81:cf:24:b5:bd:60:da:69:40:6c:64:
ec:42:2a:a8:dd:e6:ca:3e:1d:db:42:ca:20:3e:6a:
cc:45:37:a9:f5:46:63:78:f1:ad:fe:55:ff:5b:99:
b1:d1:77:87:13:35:b3:9b:ac:96:48:19:74:5c:ca:
8f:f0:1f:d8:31:96:c5:17:5c:5a:4f:bb:f3:62:6c:
fc:4b:71:79:8a:14:1e:f8:a7:79:56:cd:45:93:ce:
c1:a2:73:af:0b:0d:57:35:e5:79:e0:65:6d:5a:cc:
8f:04:5f:34:38:cb:cd:c1:a1:b6:00:90:6e:56:c5:
af:d5:62:c9:c6:44:6e:fa:90:1b:43:5c:d1:93:d1:
c3:9a:93:f9:8b:c8:16:b8:2e:99:41:96:e7:65:5c:
e4:32:77:d3:56:f1:f7:96:25:a4:0e:88:49:9b:02:
f1:95:c0:32:52:57:e6:f4:09:df:50:b8:53:1b:fb:
5b:e8:60:d9:c5:bb:c6:3d:d8:97:54:e5:61:55:6f:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7F:20:D3:4F:4C:21:32:54:21:05:B8:44:9D:BD:B6:73:A0:CA:33
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ff:82:12:fd:ec:37:3c:2e:38:c4:6b:4f:af:7e:da:3f:16:
5e:ce:e1:1e:e9:ce:9a:0d:fc:65:98:14:ad:91:04:48:46:b2:
76:c1:2b:8d:29:c5:e3:d7:48:54:cf:bf:04:61:67:c8:8d:d0:
ea:29:97:c1:04:5b:34:9e:64:14:99:ed:9e:70:ff:bb:19:47:
9d:76:58:8b:82:ae:e8:40:f7:cd:a1:f7:67:8f:a5:2e:e3:0f:
e3:c8:bd:98:20:e2:a8:4b:89:60:61:05:44:9a:01:0a:00:79:
71:e8:82:04:18:7e:14:a8:11:bf:fa:cc:9e:bb:d5:72:f9:95:
33:10:e6:2f:1b:f5:a9:b1:36:da:99:00:01:05:f0:67:de:ab:
0e:60:49:2e:9b:35:26:34:2d:f4:9c:e4:6e:2a:9a:59:57:b6:
19:0d:57:4b:6f:8f:93:83:97:66:5b:04:15:a5:53:d1:7f:c4:
04:50:ef:57:7c:bd:8e:a3:c6:a1:ba:99:eb:cb:09:dc:29:b5:
60:b3:24:1c:01:4c:ef:82:b8:b6:54:83:cf:11:cd:1a:e2:65:
0b:fa:0b:ef:08:34:58:ff:42:36:63:d9:76:76:68:98:0d:78:
30:bc:34:76:73:84:6f:a1:71:93:94:d7:32:07:0e:62:3b:1d:
d4:9d:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:42 2025 by rpki-client