Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: zm7i7nSicTpuTG27nYFEdJLZISpkD2atzkaRdU7U238=
Subject key identifier: 10:A5:54:DD:32:E4:57:CA:76:A2:C3:30:3E:E1:A7:95:48:8F:F7:62
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019A25F8310DBF2B12E4C24A83853C87D79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 153F
Signing time: Mon 27 Oct 2025 14:00:13 +0000
Manifest this update: Mon 27 Oct 2025 14:00:13 +0000
Manifest next update: Tue 28 Oct 2025 14:00:13 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: y/rKjByARpA4cyGSKVzNRrXVSgZeflE9hZ65nyAFauY=)
2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:31:0d:bf:2b:12:e4:c2:4a:83:85:3c:87:d7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Oct 27 14:00:13 2025 GMT
Not After : Oct 28 14:00:13 2025 GMT
Subject: CN=10a554dd32e457ca76a2c3303ee1a795488ff762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:ff:30:91:b3:35:ae:fc:43:b0:54:c9:82:
ad:a2:f1:da:4b:72:3f:3f:61:f4:92:0f:6e:32:db:
67:2e:60:bb:cb:5c:c0:5c:ac:25:e1:93:69:aa:13:
8e:70:f1:ac:a3:ff:f6:69:f3:9c:21:19:bf:74:fb:
98:47:47:cc:8f:a4:34:ff:0e:87:88:35:48:89:fd:
6b:46:7a:6d:88:58:4d:bb:57:d3:25:94:b5:16:08:
18:99:db:fb:3a:8b:33:46:87:09:0e:be:52:72:54:
df:ce:c6:72:3a:8d:1f:5a:c6:3c:93:3c:76:47:47:
4b:b1:9a:be:de:25:b1:86:a4:cd:01:c7:ec:e7:63:
98:e9:e6:2b:c0:23:e1:3e:e2:40:ac:b5:1d:21:f6:
68:01:fe:c8:30:3c:45:eb:a1:30:7b:3d:4d:7c:90:
11:e5:48:fa:f3:29:be:ab:60:f3:8d:98:87:0f:d0:
42:e4:85:71:94:d9:c1:c1:fe:e2:fd:b3:47:c5:1d:
d2:ca:eb:2a:15:12:56:a7:f6:24:90:8f:da:08:41:
9f:8b:e1:74:03:d0:8e:c4:12:cc:eb:c5:07:69:fd:
c1:6a:16:98:7e:aa:29:ee:b7:84:25:8d:9f:1a:52:
3f:e0:25:ea:54:dd:ed:76:85:6f:29:0c:f4:84:b1:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A5:54:DD:32:E4:57:CA:76:A2:C3:30:3E:E1:A7:95:48:8F:F7:62
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:36:78:a1:e4:c3:f4:21:82:e3:b6:68:55:db:6b:9d:72:46:
34:a0:0a:83:ae:f4:60:f1:f5:0e:7d:2f:7f:57:a8:d1:04:cd:
39:bd:44:8d:35:27:bc:b1:40:ce:cb:90:7f:62:b0:ab:0c:88:
9e:45:82:d4:b5:03:0e:81:b5:f8:af:c1:81:82:eb:3f:14:9d:
ec:57:91:eb:4d:cc:11:d8:f8:e7:f7:e1:3d:4b:b0:18:e0:11:
d5:c8:8b:ee:56:49:d9:e9:4f:e6:f3:bb:cb:00:57:f4:d6:42:
fc:5b:10:e5:04:e2:d3:d2:d0:21:a6:e2:2f:67:68:10:db:fa:
e8:d1:b1:de:6a:9c:a5:e0:2a:b7:f3:91:8d:f6:3c:4a:e8:d4:
81:1d:39:aa:f0:c8:55:b2:9d:18:2c:dd:20:ca:9f:a9:20:e7:
04:3a:6a:04:26:af:67:04:11:ac:99:bc:52:a3:ef:19:98:3c:
38:d4:14:97:6d:75:8f:b7:af:48:42:82:b0:71:d6:f3:6d:49:
f9:6a:c4:5b:46:cd:10:27:e1:74:2f:d7:6f:0e:43:cb:87:ff:
ef:c6:e7:79:2d:cd:16:37:5e:ac:fb:20:f0:2e:a8:81:cf:c1:
69:1f:77:81:ad:23:03:19:84:91:d4:31:f4:ef:7f:c7:cb:ab:
17:e9:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:25:04 2025 by rpki-client