Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File: Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier: wBasciR09NZMTpff5ZfGyXikz3fjw7MPAMos2yPNsZs=
Subject key identifier: 64:15:13:9A:00:E3:F8:F8:D3:BC:BE:D9:EF:B9:D4:33:04:F2:FC:69
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer: /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial: 019A00356FF9058857CEE7C9B7AE1E9F17DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number: 124C
Signing time: Mon 20 Oct 2025 06:01:33 +0000
Manifest this update: Mon 20 Oct 2025 06:01:33 +0000
Manifest next update: Tue 21 Oct 2025 06:01:33 +0000
Files and hashes: 1: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: I7YCSDaS6hK+Cpw56UzIiX3gY/Yx1aPHJuPINQAbPCY=)
2: diGFBknLdwh-HCGfBtKOS8e6uJM.roa (hash: cB3gm8p9TxqmEEhTV6yxgTgaXbm1raO7jRrFe5J7IiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6f:f9:05:88:57:ce:e7:c9:b7:ae:1e:9f:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
Validity
Not Before: Oct 20 06:01:33 2025 GMT
Not After : Oct 21 06:01:33 2025 GMT
Subject: CN=6415139a00e3f8f8d3bcbed9efb9d43304f2fc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:b6:d2:89:e1:70:ef:26:7f:99:ca:a8:9d:
8c:dd:92:9c:83:7a:ff:03:f2:38:55:09:3d:b9:5d:
e9:32:ac:a4:64:b3:f2:27:b1:5a:b0:d7:85:fa:53:
12:9e:c2:f8:dc:36:84:ee:43:61:ab:4b:2b:7d:05:
a0:8b:97:b0:7e:76:45:9a:39:99:00:f7:26:18:8b:
e5:55:84:e1:3d:c9:d7:21:75:1a:b2:eb:21:ff:70:
13:c8:70:1b:01:da:db:14:97:64:06:fe:ff:ac:2e:
64:18:be:68:04:5c:5a:09:77:72:1c:da:2c:ff:5d:
84:c6:0e:de:d4:90:11:23:a0:4d:3f:aa:99:72:9e:
2f:f0:1c:2d:83:f5:10:64:d1:82:3f:0d:af:fa:9f:
04:89:42:02:2d:85:fe:d2:6b:f7:41:0e:b1:7a:ee:
64:bc:1a:50:13:ec:67:b5:8f:4d:1b:7d:c4:5e:f4:
df:27:b9:94:b6:1a:67:ef:10:7f:6f:78:39:f2:1a:
7c:51:a2:eb:ba:6f:23:a8:b8:0f:cf:39:db:30:c8:
7f:f9:b8:c6:22:6c:5c:a0:bc:5c:4d:df:e1:d8:1a:
6f:fb:8a:6e:5a:4d:22:61:57:da:a1:c4:3b:1d:f9:
f3:ed:da:20:25:42:94:bf:16:cd:97:a9:9a:da:3c:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:15:13:9A:00:E3:F8:F8:D3:BC:BE:D9:EF:B9:D4:33:04:F2:FC:69
X509v3 Authority Key Identifier:
keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:cb:11:fe:3a:cf:11:f5:68:a1:ce:5f:a1:d1:2a:68:36:07:
3f:08:5a:ed:24:68:78:27:57:ed:17:94:53:dc:d6:aa:63:0f:
4d:56:18:fc:a6:20:94:6a:58:b3:4f:ce:a5:82:21:3e:cd:7e:
71:68:86:b9:ff:e1:62:5e:13:7a:1c:14:95:bf:57:f1:98:75:
1f:b7:cc:05:4a:82:de:12:2b:5c:61:6c:84:65:e8:f6:1d:7e:
c7:7f:ad:c9:a4:3a:b3:2a:b5:2e:c7:c1:de:d6:da:e9:b7:ec:
02:ae:d6:65:fa:d3:e2:e3:8f:39:46:19:7d:24:92:8d:67:e6:
29:9b:1a:4a:62:ef:be:a0:3c:00:b8:e6:07:59:9d:e9:cf:37:
50:07:0b:ec:14:2f:36:4a:13:cd:e8:1c:fc:f2:22:45:ea:cd:
72:28:70:d7:09:26:e7:00:51:03:d9:68:d4:8a:08:24:da:d0:
ff:33:7f:76:b9:be:3f:ed:4f:b5:3a:6a:a6:80:3b:82:9b:cb:
09:57:39:0e:0a:07:16:84:5f:6c:f6:5b:8a:6d:59:bf:29:c6:
f0:da:08:85:68:b2:07:84:b7:44:ef:50:ce:f5:e1:c3:79:54:
d7:17:dd:c0:fb:26:ee:1e:40:16:bd:3a:90:bd:f3:de:f3:89:
29:86:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:01 2025 by rpki-client