Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: RF8bcLEh+b6kPJH2GCfuIIY9y6YA++DBgW6ltTHEdVc=
Subject key identifier: C3:C6:29:A9:2D:4C:59:D5:24:DA:2B:45:93:1A:42:47:A0:6F:48:7D
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 0199FDDA1F9E48B1D4C3A9BF10D6F699F8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 1195
Signing time: Sun 19 Oct 2025 19:02:34 +0000
Manifest this update: Sun 19 Oct 2025 19:02:34 +0000
Manifest next update: Mon 20 Oct 2025 19:02:34 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: GjjNXe2zO1FwvdcCE8P3hrBYlTb1vcCC/U0Utjpwsa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1f:9e:48:b1:d4:c3:a9:bf:10:d6:f6:99:f8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Oct 19 19:02:34 2025 GMT
Not After : Oct 20 19:02:34 2025 GMT
Subject: CN=c3c629a92d4c59d524da2b45931a4247a06f487d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:73:d2:87:57:b2:f7:19:3e:15:d1:e3:70:
02:7f:99:ac:30:d1:15:28:96:e7:63:33:0e:58:f0:
5d:a5:dd:60:39:d7:da:0a:e6:ed:f6:e1:45:d4:ca:
be:b6:a2:be:50:08:ae:73:4d:5c:7e:dd:e7:66:8d:
7e:b3:9f:57:f2:d0:ac:3f:91:5d:93:e5:b1:a4:a8:
d9:fd:06:22:24:c3:2f:ef:7b:eb:ad:bc:33:fb:0a:
cd:5f:25:f8:4c:76:5b:d4:79:0e:df:11:61:60:ba:
47:d6:0c:4c:c1:d6:db:d6:a9:54:fc:30:23:80:5b:
61:c0:3b:13:55:f5:b1:06:7d:8d:26:6a:6d:a3:db:
e4:cb:91:e4:44:23:15:e1:33:03:f9:7d:cb:87:8e:
12:0d:5d:d0:d2:b8:10:27:98:20:23:41:8a:e9:db:
9d:f9:73:ca:2f:5e:54:e0:6e:86:46:d3:c2:a6:c4:
3a:ff:ae:50:5d:5a:cd:9d:84:c8:88:c0:6a:2b:8e:
ba:55:0b:1f:e9:eb:0c:1a:ba:f1:e7:b0:04:b4:e9:
13:38:39:52:bf:d9:35:41:5a:1d:ac:72:c1:f9:27:
9c:e8:85:a5:9c:84:6a:29:88:82:57:1c:94:0e:2a:
76:4e:4a:d5:c8:e9:f1:28:3a:f0:da:d9:56:cf:a5:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:29:A9:2D:4C:59:D5:24:DA:2B:45:93:1A:42:47:A0:6F:48:7D
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ca:34:ba:07:ca:6e:24:6c:0e:e7:ca:76:0b:19:b1:46:ef:
89:10:82:81:f4:50:8f:0b:10:cd:4f:dd:c7:7a:4d:c2:b0:ea:
aa:ad:75:f6:55:9d:66:a6:87:0a:6c:2b:e2:3b:9e:ae:27:a7:
b4:20:d4:f5:f0:2f:bc:c2:4c:91:f7:18:50:07:b1:42:3f:54:
75:d0:75:75:4c:f2:61:9f:cf:1d:9e:35:98:30:ab:04:3e:d3:
63:1d:2c:d4:26:80:cc:b0:7a:7a:2a:79:17:cc:6d:dd:86:fc:
ce:e2:96:a9:dc:27:62:81:b9:c3:7b:05:ef:b8:3a:d8:c2:35:
78:31:f2:a7:68:e9:ee:e3:d4:50:51:58:b1:74:c5:94:2f:45:
f3:f6:6c:30:fd:af:04:b5:f5:21:14:e1:0c:c0:23:15:ad:f6:
d7:58:27:8b:57:09:51:51:e2:94:3a:5e:31:76:3a:0e:1d:b4:
1e:fd:41:03:e7:a6:1f:61:49:e7:02:b6:72:7f:a9:19:f8:b0:
ac:5e:d2:af:d7:05:2e:df:9b:cd:14:e6:0c:c3:92:c6:3e:68:
23:e9:7a:6d:2f:98:93:0a:bb:04:0f:ec:90:5d:04:67:b1:ae:
95:8b:0d:54:a1:f2:53:3c:ee:be:e7:c1:33:03:25:56:ab:3b:
64:e6:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:37:56 2025 by rpki-client