Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: MZ+03Ikbdqh+hDj7g9crwGbytXKNb7kCljAIHxBighw=
Subject key identifier: 05:7A:EC:53:44:AE:FE:D6:12:63:F4:32:80:14:78:06:B3:4F:78:FE
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 0198D65FE2B2769537F4D10298D4259D34CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 108A
Signing time: Sat 23 Aug 2025 10:01:04 +0000
Manifest this update: Sat 23 Aug 2025 10:01:04 +0000
Manifest next update: Sun 24 Aug 2025 10:01:04 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: AKG7mWf1FHKTL+eoDcmSPqgoP+AsHbERedNzU8nlMRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e2:b2:76:95:37:f4:d1:02:98:d4:25:9d:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Aug 23 10:01:04 2025 GMT
Not After : Aug 24 10:01:04 2025 GMT
Subject: CN=057aec5344aefed61263f43280147806b34f78fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:18:0c:9a:f7:78:ad:8f:0f:93:83:e0:51:
70:fd:8f:80:bc:43:c2:67:01:9f:e6:db:87:15:c9:
2e:62:26:d5:ca:15:93:86:38:34:bf:57:32:03:67:
9a:4b:1d:01:af:30:e5:3e:03:d5:c8:f9:86:f5:cd:
e8:bc:c0:b0:de:52:35:21:3f:8f:a9:0c:60:c0:ab:
40:af:d3:64:91:f5:90:08:3d:1c:d4:85:b4:3d:96:
e7:00:c0:90:99:d2:60:86:99:5d:0d:2e:ec:9f:ae:
eb:8d:d4:76:28:a7:0f:9e:a1:24:9f:8a:e0:6a:11:
6b:08:f4:c8:b6:b8:a6:18:b5:fd:4b:00:2c:13:e4:
ea:68:a6:9c:7d:9b:6e:19:68:b2:10:a5:16:7c:48:
2f:35:2d:a6:43:63:1a:56:b9:c6:39:f9:96:1f:3b:
ec:67:b3:80:99:af:b1:3b:cc:9e:5d:c4:27:a7:1b:
4f:ea:c5:49:ec:18:9f:bd:63:d1:d4:44:85:7a:b2:
6c:25:f9:9e:4a:c1:07:22:95:be:fe:79:90:b0:06:
9d:29:0d:b2:d1:de:58:2c:86:26:1b:0a:4f:e5:0b:
83:02:8b:17:cc:64:0b:b4:ff:28:03:5b:93:3a:e6:
6b:bf:35:8e:ae:a1:99:ff:65:3a:ba:1d:a6:f0:84:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:EC:53:44:AE:FE:D6:12:63:F4:32:80:14:78:06:B3:4F:78:FE
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7f:f3:d4:7c:e5:54:0c:6f:3b:67:93:b4:e3:41:ed:0c:07:
a1:7c:f0:b4:1b:07:0b:55:1b:67:0c:33:c2:8f:42:90:0b:4d:
31:60:15:08:33:a3:ec:2a:7d:25:04:87:b8:ff:0c:1a:70:0c:
74:53:54:cb:df:ae:e2:65:b3:ba:db:bf:38:22:ac:ce:af:29:
23:c6:1b:e2:28:50:7b:c4:42:8f:a1:ad:e2:1c:67:1a:08:90:
ea:65:90:37:69:27:66:cd:1c:3f:c2:42:ad:d2:66:1f:03:e1:
1a:a4:fd:d6:39:79:00:f2:d5:69:4f:4e:d5:38:df:3c:94:04:
a3:95:97:af:22:51:38:c0:97:05:c2:04:16:00:25:28:e8:ff:
64:51:d4:1e:10:99:6d:89:29:63:b7:a2:41:37:2b:8d:53:47:
22:d8:22:0d:fa:33:ff:42:42:13:3c:5a:a1:6f:2a:91:3c:11:
4a:65:9a:df:94:39:46:aa:ce:43:6b:b5:ec:04:60:be:88:c8:
5a:68:56:ea:59:c9:1c:dc:b7:cf:88:5f:05:11:4a:54:99:af:
6e:67:f0:8b:1c:26:f8:2f:fe:aa:9c:6e:31:80:97:34:08:88:
58:5a:bc:da:8c:e6:96:27:0d:fd:e5:7a:ef:3b:5b:90:b7:e1:
40:6b:e6:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX+KydpU39NECmNQlnTTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjg0Y2JhNzc0YTljMjFhMjk4NjZkNDhlNWRjZjA3NTlj
ZDRhYTkwHhcNMjUwODIzMTAwMTA0WhcNMjUwODI0MTAwMTA0WjAzMTEwLwYDVQQD
EygwNTdhZWM1MzQ0YWVmZWQ2MTI2M2Y0MzI4MDE0NzgwNmIzNGY3OGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvskYDJr3eK2PD5OD4FFw/Y+AvEPC
ZwGf5tuHFckuYibVyhWThjg0v1cyA2eaSx0BrzDlPgPVyPmG9c3ovMCw3lI1IT+P
qQxgwKtAr9NkkfWQCD0c1IW0PZbnAMCQmdJghpldDS7sn67rjdR2KKcPnqEkn4rg
ahFrCPTItrimGLX9SwAsE+TqaKacfZtuGWiyEKUWfEgvNS2mQ2MaVrnGOfmWHzvs
Z7OAma+xO8yeXcQnpxtP6sVJ7BifvWPR1ESFerJsJfmeSsEHIpW+/nmQsAadKQ2y
0d5YLIYmGwpP5QuDAosXzGQLtP8oA1uTOuZrvzWOrqGZ/2U6uh2m8IQ8UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV67FNErv7WEmP0MoAUeAazT3j+MB8GA1UdIwQY
MBaAFGD4TLp3Spwhophm1I5dzwdZzUqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYt
ZWI3YWE2MmYzNTZiLzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYtZWI3YWE2MmYzNTZi
LzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3/z1Hzl
VAxvO2eTtONB7QwHoXzwtBsHC1UbZwwzwo9CkAtNMWAVCDOj7Cp9JQSHuP8MGnAM
dFNUy9+u4mWzutu/OCKszq8pI8Yb4ihQe8RCj6Gt4hxnGgiQ6mWQN2knZs0cP8JC
rdJmHwPhGqT91jl5APLVaU9O1TjfPJQEo5WXryJROMCXBcIEFgAlKOj/ZFHUHhCZ
bYkpY7eiQTcrjVNHItgiDfoz/0JCEzxaoW8qkTwRSmWa35Q5RqrOQ2u17ARgvojI
WmhW6lnJHNy3z4hfBRFKVJmvbmfwixwm+C/+qpxuMYCXNAiIWFq82ozmlicN/eV6
7ztbkLfhQGvmkA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:27 2025 by rpki-client