Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: ctTTxG/6pz6YA1dtHOD4ZI5E1jgbdQg9GyUHz+6Xqqs=
Subject key identifier: 7A:7F:92:F3:F1:DD:66:7F:14:58:72:D1:7B:D7:9C:73:54:19:7D:E9
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019938707B4A3DED373FE9AC4DEACE74894D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 14C4
Signing time: Thu 11 Sep 2025 11:01:59 +0000
Manifest this update: Thu 11 Sep 2025 11:01:59 +0000
Manifest next update: Fri 12 Sep 2025 11:01:59 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: vOSdRTZmONQil56XsQRinqjynsMPsSHKXQwUrh4TFLs=)
2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:7b:4a:3d:ed:37:3f:e9:ac:4d:ea:ce:74:89:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Sep 11 11:01:59 2025 GMT
Not After : Sep 12 11:01:59 2025 GMT
Subject: CN=7a7f92f3f1dd667f145872d17bd79c7354197de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:12:4d:15:3a:d3:69:fc:8a:f8:e6:a2:ab:
aa:30:74:77:d2:a2:03:c7:eb:3e:42:53:8f:25:8c:
2d:db:90:12:f3:68:87:92:6d:7c:3e:ba:9c:6a:bd:
d6:72:01:7d:2f:66:c3:73:b8:47:c2:31:b1:23:95:
78:43:6c:21:42:4d:ad:19:a9:92:3e:e3:36:e6:d1:
9e:0b:71:29:af:63:04:36:67:e7:28:57:65:96:e3:
0f:08:ce:ee:31:57:ab:6e:53:50:5d:d3:6c:75:71:
e3:aa:5c:e5:37:9a:48:d7:25:95:e1:90:bc:fa:2e:
b8:2b:68:f2:7a:34:8c:2a:c1:b1:40:50:32:cd:50:
72:5f:2f:14:58:bb:9a:43:5d:bf:a8:09:1f:a7:22:
66:69:65:0b:57:29:0c:6c:96:bf:93:3d:80:c2:da:
7b:aa:71:2c:6e:74:df:c5:ca:e7:8a:2d:cb:e1:fd:
67:22:0c:7d:24:dd:da:2d:96:74:57:0b:9a:1b:b6:
20:1e:aa:34:ba:99:49:c0:24:ec:37:ca:02:14:bf:
d6:ef:58:70:7e:a0:79:cc:ad:94:4f:05:a7:74:20:
e0:e9:d1:d7:da:64:38:61:f0:c5:46:73:e4:ac:6f:
3b:06:f0:2b:a0:36:0b:e3:d9:b6:a3:d8:40:49:21:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:92:F3:F1:DD:66:7F:14:58:72:D1:7B:D7:9C:73:54:19:7D:E9
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:87:8c:7f:a4:30:1d:85:00:ae:8d:9f:41:a7:e0:d1:a3:14:
2c:e0:17:ad:e5:77:71:e2:3b:57:0d:06:1b:a5:35:8b:69:5f:
c1:c5:1c:9f:4a:c8:e2:e5:f7:52:67:c1:aa:09:59:dc:72:6a:
a8:54:bb:d5:80:81:80:35:5e:1f:e8:59:e6:1e:b6:23:2d:52:
1b:37:42:5c:f2:b2:cf:8c:9b:9c:d9:ce:ed:28:62:53:27:ec:
dc:fa:2b:56:4e:02:0c:56:8b:0b:69:ed:84:c9:a1:fe:5f:09:
f7:76:46:e7:e9:1c:95:36:c2:6d:98:71:97:bf:cd:b1:22:35:
8b:6e:aa:65:ec:3e:3b:42:aa:1f:ed:7f:ad:84:3d:05:46:e3:
52:9e:0e:7b:0a:0f:71:25:b0:2f:00:5e:ad:07:e0:9a:24:8f:
cf:c7:a7:a3:a6:28:8e:e5:06:04:73:02:06:bf:ab:73:9b:21:
c4:0e:48:28:bd:76:6c:88:e3:79:30:68:ec:1b:6f:3d:d3:7b:
8c:36:be:4d:7b:b6:5e:e0:43:3e:5d:23:fe:5b:c7:9f:e5:e5:
82:4c:4b:8c:1d:37:c8:b8:2a:e2:c6:73:f8:1b:46:a6:e5:97:
c6:e1:7c:38:ce:a4:2e:f4:1a:bc:92:9d:68:b2:53:98:c6:dc:
6e:8d:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:45:41 2025 by rpki-client