Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier: jHZskRj0ZXTxQX1QWETbQsjO/Y0cUBVz94HNEqSBTwI=
Subject key identifier: 97:92:4B:11:F3:86:03:8C:70:F3:8B:8B:C8:C7:D6:B3:54:3C:3F:BE
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 0199FD6B19BBDFA8AA68D1CDF240C7741B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number: 02FA
Signing time: Sun 19 Oct 2025 17:01:18 +0000
Manifest this update: Sun 19 Oct 2025 17:01:18 +0000
Manifest next update: Mon 20 Oct 2025 17:01:18 +0000
Files and hashes: 1: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: sYwEPTQK+6NhgtTeihRonkc/6foafldT6Z526ho491o=)
2: zIZvUw6LEttnk9GqCkFL8S-ncbM.roa (hash: g5dRThI/Wu6nM24igsF8Y2hQEgVjjdxUN3aRLJWGc3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:19:bb:df:a8:aa:68:d1:cd:f2:40:c7:74:1b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: Oct 19 17:01:18 2025 GMT
Not After : Oct 20 17:01:18 2025 GMT
Subject: CN=97924b11f386038c70f38b8bc8c7d6b3543c3fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:5a:d8:70:c7:f8:d1:50:46:a6:c8:df:78:
ff:f4:3e:86:8f:c5:38:75:0b:cf:3d:c2:0a:de:9e:
44:27:13:5b:77:6a:3b:ba:b8:81:94:a2:0a:ba:c5:
c6:b5:b0:e0:e3:f7:59:a9:fe:c7:15:b1:7f:60:15:
31:a8:00:c0:bf:4e:ce:55:30:5f:19:41:d4:30:08:
87:54:2a:0c:2f:5c:b6:e9:16:24:d2:73:d9:e0:6c:
36:91:e1:31:99:4b:f3:0b:0d:9a:c3:87:be:8f:47:
c1:8a:fd:9f:3c:01:21:22:c3:e3:c5:39:24:5e:c3:
34:e5:2b:ce:19:f4:aa:b5:22:4b:d3:7e:46:82:bb:
b3:90:1e:ba:b3:dd:6f:40:43:22:be:a4:8e:bf:f5:
10:5e:9d:1a:13:1a:71:6f:88:c8:7e:10:81:c2:e9:
c5:45:02:40:02:ad:e1:f3:a9:b4:b7:8a:96:c1:6e:
ca:ae:0b:60:60:8a:41:3c:a5:35:24:ae:21:ea:c3:
b6:d6:90:64:dd:8b:db:f7:7f:98:de:4b:f6:a1:6d:
69:20:c3:42:94:ce:ac:60:f9:9d:67:35:6e:e8:fc:
af:b5:b5:dc:2c:7e:4c:3d:d1:14:62:14:3f:bb:23:
f9:2e:aa:c7:23:23:e7:73:89:00:0b:b2:6e:bd:30:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:4B:11:F3:86:03:8C:70:F3:8B:8B:C8:C7:D6:B3:54:3C:3F:BE
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c7:80:a8:20:fb:59:6d:4e:cf:02:4f:8c:c7:58:74:8e:fc:
60:d1:b2:11:b6:93:77:82:f4:18:5d:a6:ed:e9:5b:03:0b:0e:
d1:44:21:5b:5d:cd:3c:32:95:99:5e:fc:7b:9f:3f:f4:cc:1f:
dd:41:f6:89:4e:f6:38:1d:79:6c:9c:d9:12:e7:58:7b:50:5a:
0a:63:bd:47:db:ee:b5:0c:1d:43:02:fc:69:64:76:0a:3a:ff:
55:d8:b0:9c:d9:4e:8c:f1:5b:99:b8:e7:aa:4c:a9:da:24:ca:
18:d6:ab:e4:9b:6b:55:45:98:f1:52:b5:6e:7f:39:fd:c0:3d:
da:be:2b:e5:8b:d6:a5:44:d7:a8:a3:cd:62:76:32:ff:3d:cf:
74:1d:66:a8:77:1e:87:5e:02:55:63:ef:61:3f:f5:a3:c0:22:
03:96:3b:27:2a:d3:82:fc:88:8c:1d:1b:b7:a0:39:9d:ce:af:
b6:a1:a8:c5:fe:39:0e:5c:7d:22:7d:9b:df:84:6d:82:d9:c7:
a9:12:31:b7:77:fb:7d:27:16:c7:c9:99:19:c5:82:28:1a:8b:
f4:82:98:be:96:df:68:2f:2f:0e:69:5c:31:a1:d2:a3:d6:5f:
68:63:48:71:f9:40:3b:0e:c5:c8:c3:61:15:e3:34:1e:c9:6b:
b0:62:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:59 2025 by rpki-client