Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: tt0UASOs4tURkRR8O2wiUQsDoEbjLFx5U7gk/i7b0EQ=
Subject key identifier: 66:1D:2F:1E:78:73:20:64:C7:79:E3:45:4E:94:67:A2:4F:7B:2A:FD
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 0199FDDA4DB6390A7C5B991241F003464ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 1123
Signing time: Sun 19 Oct 2025 19:02:46 +0000
Manifest this update: Sun 19 Oct 2025 19:02:46 +0000
Manifest next update: Mon 20 Oct 2025 19:02:46 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: CLSh9tNBoR01xifyTyPGwITq1pI27xMOFpwq1PKgjM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4d:b6:39:0a:7c:5b:99:12:41:f0:03:46:4e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Oct 19 19:02:46 2025 GMT
Not After : Oct 20 19:02:46 2025 GMT
Subject: CN=661d2f1e78732064c779e3454e9467a24f7b2afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:ca:90:dd:68:23:bc:a5:c2:df:14:af:e7:
fa:7c:f2:71:c5:1d:ad:14:05:ea:99:65:d9:7b:c7:
1e:4f:5b:61:f8:0f:36:e8:2a:02:e9:46:6f:61:2a:
f9:d1:22:12:19:48:bc:26:59:a5:00:8a:c9:3c:98:
fe:12:53:80:28:df:86:f5:03:60:58:04:e0:36:ff:
bb:6d:e2:b3:22:21:8f:1c:38:a0:00:68:c9:73:92:
e4:0a:b4:78:85:8e:f7:6e:4b:a6:d0:36:bd:14:34:
b0:a9:97:b1:09:14:3f:26:2c:31:d5:bc:75:43:f8:
01:9a:ff:66:cd:58:66:c8:71:96:64:d3:13:bb:ef:
97:ef:a2:68:75:eb:43:52:18:ec:cf:d8:a4:62:3d:
20:e2:38:af:12:b9:0b:6c:73:b4:3a:21:e2:15:b7:
5d:3c:3a:4d:5c:03:ef:ea:a0:ca:79:c7:b8:bd:00:
a5:8a:2e:dc:f0:cd:7b:36:8a:4d:5f:ec:c1:ee:ea:
41:17:c0:7b:9e:67:76:65:51:9e:59:48:e5:20:e3:
d8:9d:28:87:bc:a7:47:d7:8e:0d:de:a5:a8:e8:da:
6d:4f:5a:6f:03:5b:fc:db:87:20:9f:77:86:41:26:
3c:30:41:25:f0:55:55:f1:c1:9c:07:a9:61:d7:1b:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1D:2F:1E:78:73:20:64:C7:79:E3:45:4E:94:67:A2:4F:7B:2A:FD
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:21:ee:da:3e:6b:f2:71:82:fd:44:47:0b:17:39:98:51:9c:
ff:1c:10:20:8d:3e:7c:fd:68:87:50:51:93:31:07:a9:3c:59:
0f:21:84:7c:48:62:0e:e3:7b:f5:71:a6:22:f9:0e:c0:79:e9:
c3:f8:a2:52:df:6f:4e:ac:4b:84:ca:38:62:a8:e1:30:a6:8a:
41:18:17:7c:bf:32:fb:6e:ec:ae:b4:e2:8b:f9:61:ac:e5:76:
0c:2f:f0:bb:58:2b:b2:2d:42:ae:22:54:31:a6:a8:06:5c:52:
0e:41:d6:f9:66:6b:5c:57:f2:0d:9d:6a:e9:37:97:44:95:d5:
d4:29:5f:f1:19:24:ce:67:0b:29:ec:a0:e0:d9:61:3c:46:92:
74:d3:76:ab:23:ad:91:00:b0:a4:49:b9:9b:1d:be:ea:92:8b:
8e:31:bd:1d:cc:5c:c8:86:c7:a7:2b:c2:bb:5e:cc:be:ae:6d:
23:8a:dc:2a:9d:59:8f:7e:99:d2:7f:52:aa:6d:82:d3:eb:fd:
20:65:89:4f:63:8d:5e:aa:ce:2e:f1:d3:13:bd:33:98:aa:64:
44:20:d7:2f:e9:b6:67:66:be:f2:d4:35:31:9e:80:c0:6a:ea:
8c:4a:a3:38:75:19:f2:f3:e3:de:2e:f9:8d:2e:5f:81:aa:88:
d1:7e:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:49 2025 by rpki-client