Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
File: YMZLBPqPX-5oZvXHn499zqUBJRU.mft (raw, json)
Hash identifier: 1jGnU/8NBWW6hPlhrtxCqMshTw42rjth70kZXYTem+I=
Subject key identifier: E3:37:15:C5:35:BD:1E:74:94:B2:DE:21:4B:97:B9:03:B0:39:29:02
Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
Certificate issuer: /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Certificate serial: 019A21773DD2CFDD8043512ADE3A3D94B50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
Manifest number: 12E5
Signing time: Sun 26 Oct 2025 17:00:54 +0000
Manifest this update: Sun 26 Oct 2025 17:00:54 +0000
Manifest next update: Mon 27 Oct 2025 17:00:54 +0000
Files and hashes: 1: Q9vdhvNHwOEEPnjfpoIoeq4pq_E.roa (hash: AjW64DrutKx53AvwTAQKpO/FJMGHUcE1ZDsQqqfuNRE=)
2: YMZLBPqPX-5oZvXHn499zqUBJRU.crl (hash: taX+rDou3xDMmftnyiWmoWqFpZcliXPHPxCzqJoJ7Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:77:3d:d2:cf:dd:80:43:51:2a:de:3a:3d:94:b5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Validity
Not Before: Oct 26 17:00:54 2025 GMT
Not After : Oct 27 17:00:54 2025 GMT
Subject: CN=e33715c535bd1e7494b2de214b97b903b0392902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:f0:b0:10:1d:41:5a:60:fd:8b:10:e2:c4:
cd:48:29:bc:35:e5:77:68:43:b4:16:0a:8e:dc:f1:
21:45:ec:e3:0e:53:5f:b7:14:74:6c:d7:c3:47:0d:
f5:d8:0c:f4:4e:e9:58:73:08:18:cc:26:3c:cd:77:
21:cc:be:25:65:69:9d:89:69:eb:f0:e1:c6:50:77:
bb:79:53:08:2b:00:1f:4b:db:b3:10:a8:95:37:dd:
23:ee:68:f4:c6:b2:05:22:3c:ac:b7:47:33:86:a9:
58:eb:8e:97:0a:82:30:37:86:24:e8:4a:64:25:1c:
a8:35:e4:1c:24:17:ad:6e:32:50:92:30:b3:ac:01:
62:37:8f:43:3b:78:2f:9c:a5:e5:7c:66:1f:6f:a8:
47:a9:15:7f:1d:78:82:5d:8e:33:6b:ee:3d:58:fe:
59:7d:ea:15:99:88:20:6c:ee:96:93:f7:cb:c4:65:
06:86:e9:ec:be:29:09:4c:55:0d:a4:f2:d1:51:ed:
19:8d:67:b6:23:9c:2b:08:fa:ce:36:7b:db:b1:fa:
3d:3f:0e:32:74:74:d9:42:bb:a4:39:1d:8d:81:6e:
63:86:f1:e2:9f:54:e3:48:21:ef:c9:a7:1a:87:17:
99:00:25:b3:6a:4a:4a:98:6b:0b:7c:ef:b3:f5:dc:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:37:15:C5:35:BD:1E:74:94:B2:DE:21:4B:97:B9:03:B0:39:29:02
X509v3 Authority Key Identifier:
keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f9:15:a1:01:a6:0b:6d:47:a2:89:a6:55:40:8f:5b:46:42:
1f:7d:07:bb:89:6e:e9:8f:2d:8d:2d:68:f6:b2:7e:1a:e6:38:
56:7d:85:c0:84:91:ce:e1:26:98:21:18:ac:54:7a:35:e3:a2:
77:ac:7a:93:1a:15:f6:71:bc:d4:a2:be:a9:d3:56:8d:c3:56:
46:2a:65:02:e8:c8:e2:0b:4c:59:6a:d4:44:b4:11:df:89:4d:
38:fa:70:88:04:8f:fa:45:79:37:34:bd:36:3a:0a:f4:65:78:
1d:11:4a:f6:21:08:96:93:9d:29:75:15:d8:f4:38:01:f4:9a:
94:bc:be:a4:42:1e:d2:b3:81:32:d3:b4:58:2a:56:6b:90:9a:
ff:3f:47:9e:aa:e1:7c:fa:b5:75:4d:9e:6d:9e:63:d2:d4:c2:
82:fe:40:35:dd:dc:b6:fa:a0:22:96:fa:ab:8f:74:08:ca:75:
76:43:2d:04:7e:b1:5c:62:53:18:da:cf:1e:ff:64:a3:6d:fe:
65:cc:f8:5d:f1:d8:ee:df:6e:a7:72:c7:79:c8:be:20:74:4f:
65:9f:a6:a9:00:cb:f7:ba:c6:4a:ee:ee:4a:1d:0a:53:3b:db:
c6:d1:18:2b:1c:f5:15:fe:f0:9f:4a:16:67:4b:87:70:24:a3:
d3:4c:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 02:44:56 2025 by rpki-client