Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier: nJhw4vFrg2AO+R72PYA9EdbooFPligJF2WRCxsZPX3k=
Subject key identifier: 3D:24:F9:4D:DF:D3:53:2D:08:F5:45:08:03:AE:8F:93:E0:94:3D:D0
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 0199FBEBB36D6A0A37BD1E5D581557A47D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number: 0487
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: Y+Qoo9xXDVqD60Wvn5qRm9yHfXV75cG5X1NkuKYfUp8=)
2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b3:6d:6a:0a:37:bd:1e:5d:58:15:57:a4:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=3d24f94ddfd3532d08f5450803ae8f93e0943dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:3d:30:89:46:68:7c:20:20:06:41:6a:4d:
44:b2:4e:79:88:68:00:64:a6:60:d1:36:61:a5:81:
ef:be:49:80:1c:80:84:00:3c:f3:6f:0b:75:ac:d7:
6c:47:06:32:9e:87:7d:28:89:42:01:95:1a:eb:14:
de:2f:b5:e7:c5:8b:f2:06:bb:a2:6e:c7:79:a3:be:
7d:33:2a:b9:a1:c4:f5:c5:81:6f:15:03:0f:bf:32:
e4:8b:5c:00:33:d2:9e:f3:67:a6:87:62:99:a4:67:
2b:81:a6:f1:ee:a4:f1:87:c8:19:38:50:5c:0b:15:
93:2e:4f:ab:34:b2:fb:80:c2:60:ee:6b:d5:05:e1:
6f:77:3b:67:13:4f:e2:82:55:38:c1:18:68:66:07:
ca:ff:ad:cb:53:de:8e:7e:67:57:60:8f:92:f6:0a:
3a:ab:43:fc:3c:69:08:aa:ef:89:79:f3:4a:88:a4:
f8:4a:5b:43:d7:98:25:2d:68:db:4c:a0:f7:93:83:
83:f6:d3:02:b9:30:15:00:ec:9c:3b:ae:01:c4:fe:
c9:4a:58:0c:2a:00:e9:2a:07:d3:89:18:40:91:0a:
58:16:11:4a:de:41:53:53:ab:e6:db:99:15:46:38:
19:c5:f8:a0:6e:28:a3:72:5c:88:86:50:dd:e2:05:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:F9:4D:DF:D3:53:2D:08:F5:45:08:03:AE:8F:93:E0:94:3D:D0
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:58:ba:65:41:87:42:ef:e2:72:71:b3:40:fc:f2:aa:f9:a6:
4c:19:cb:56:3f:c3:fd:c9:5a:5f:2c:60:9d:ab:20:6c:7e:56:
f4:f5:4a:70:93:3c:2d:46:34:be:6f:c5:b2:2b:f3:90:52:c3:
49:ed:cf:c1:bc:c2:74:94:bf:2e:97:45:e1:6f:86:e9:4c:3e:
5d:84:4f:29:c3:45:5f:75:52:38:7e:43:30:07:92:cd:be:5b:
64:c7:d6:dc:51:2d:7f:23:e4:15:ab:ef:41:13:a2:76:c5:e1:
59:0e:70:57:6a:ec:a8:36:9b:c1:cc:18:39:7e:03:a5:bb:1a:
64:e4:c8:ad:91:90:49:a6:d0:ef:69:bc:ea:ca:ee:cb:4e:38:
4b:c4:ef:b8:d9:a3:54:c2:3c:d5:29:29:21:dc:7b:28:5e:41:
70:5d:fd:77:4a:c7:28:22:c2:69:09:a9:11:66:22:ee:2b:82:
eb:a3:b1:ab:d0:f5:93:1a:14:b3:a2:12:7f:b5:43:bb:4f:3e:
bd:ba:c9:d7:ea:29:0f:73:d5:3b:52:f0:d4:86:9f:95:db:75:
a2:b5:14:2a:c8:48:98:27:82:c3:1d:ec:fd:7d:e0:e8:b3:7f:
a5:7e:a6:b6:8e:1c:c4:a4:5b:64:e0:67:77:ba:27:da:b3:bf:
0b:ca:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:02 2025 by rpki-client