Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: uWgiATCNBr/H3LoC9KFLK8ELV7dYjyedRkFZul7ODYo=
Subject key identifier: 6D:38:A8:76:1C:15:B9:D5:8B:72:FE:42:B4:FE:58:CC:75:D2:F6:23
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 0198D65F4C654518157E1EB7A987AE83E8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 10FC
Signing time: Sat 23 Aug 2025 10:00:26 +0000
Manifest this update: Sat 23 Aug 2025 10:00:26 +0000
Manifest next update: Sun 24 Aug 2025 10:00:26 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: 0bnTnDGFoDx4IoqsGUzp6fw4kvKwpwzdO5YvnFxUYoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4c:65:45:18:15:7e:1e:b7:a9:87:ae:83:e8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Aug 23 10:00:26 2025 GMT
Not After : Aug 24 10:00:26 2025 GMT
Subject: CN=6d38a8761c15b9d58b72fe42b4fe58cc75d2f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:d9:77:3c:b0:58:8e:7f:bd:ac:13:7b:61:
39:dc:ff:fa:81:00:8c:70:1d:40:fe:a8:bd:a0:ab:
1f:e3:18:f2:54:a9:f2:1e:b5:20:73:8b:f7:3e:12:
68:fe:36:25:2d:43:b1:7a:70:93:c2:09:94:61:de:
69:79:95:e8:90:81:0f:50:bd:1c:0e:39:07:ff:17:
a1:8e:05:fc:14:6f:f7:e0:c4:5d:4e:c9:a7:bf:3b:
67:b4:66:bd:85:76:55:3c:0c:1d:55:25:be:8b:40:
0c:84:e2:2d:51:63:87:4a:95:cc:0c:a5:fb:97:d7:
08:8b:fa:10:6c:cd:c7:03:42:b1:a8:57:cf:5d:15:
7f:a7:aa:d9:fe:63:08:7b:f4:68:14:fc:bc:43:97:
fe:02:91:b2:76:a0:27:eb:6e:fe:de:8a:30:ea:15:
10:43:ab:07:8e:d6:87:ed:f3:b4:e6:76:56:d0:4b:
0b:87:90:6b:9b:ae:b6:2f:77:49:9c:90:42:44:77:
bc:0b:b6:4d:d7:36:38:40:da:e1:16:02:d2:07:ba:
a4:e2:5a:94:c5:a9:5d:73:e6:37:49:a1:31:75:a3:
6a:61:62:2e:1b:41:a1:b3:c5:cd:c3:fd:dc:8b:c2:
07:13:be:00:b0:a1:ed:8e:34:cf:ec:5e:84:b8:0e:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:38:A8:76:1C:15:B9:D5:8B:72:FE:42:B4:FE:58:CC:75:D2:F6:23
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0f:f3:d4:7e:ab:dd:ce:be:90:9f:79:e4:bb:d9:f1:bd:c4:
5e:e4:2a:20:33:3c:b2:fb:b4:05:d3:3a:6a:62:d8:8f:c0:80:
90:eb:93:aa:9a:87:d6:ae:7d:b6:86:5c:eb:11:c0:04:6c:76:
38:57:ef:c8:6d:90:a3:66:62:d8:ee:98:bb:0c:55:cb:9e:7a:
06:b1:0f:89:e9:f7:30:80:d8:7c:43:46:d7:80:cb:d5:c4:b9:
c4:c8:44:dc:0f:f7:b8:fb:9d:dd:6d:d0:54:c0:db:46:3e:03:
a5:45:8e:75:db:17:69:29:f5:fb:a6:8d:27:01:43:cd:59:7c:
83:5c:72:f9:81:d4:11:f6:0b:71:ae:79:d5:cd:c5:2f:00:ea:
b9:4e:ec:ef:51:b2:3a:b2:12:fa:27:3c:e9:ce:40:25:f2:c5:
e2:ce:02:62:99:56:31:f9:98:cb:8f:d0:8b:89:23:4f:ff:c1:
79:85:4a:67:6d:99:74:e8:82:a9:78:9e:b7:68:9a:d6:c3:12:
46:b0:c4:49:36:68:2d:5b:83:4b:51:fe:b0:35:00:66:e3:95:
ec:62:ca:51:5e:b5:8c:cf:d9:3d:a0:1d:42:80:32:7c:cb:58:
4b:0a:ff:7b:66:7e:47:74:52:c3:da:d0:29:40:20:3f:b7:8d:
25:e6:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:59 2025 by rpki-client