Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
File: YMZLBPqPX-5oZvXHn499zqUBJRU.mft (raw, json)
Hash identifier: 6IisL3J5EmNRo2z+zW50tdGOSUusn3QY6Y+RTfCaE4A=
Subject key identifier: E8:08:2B:15:9F:18:7E:B7:70:93:E3:9A:21:AE:69:60:BF:07:02:D2
Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
Certificate issuer: /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Certificate serial: 0199228D2E40DB7AFFCACAB2CE4328DDBDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
Manifest number: 1261
Signing time: Sun 07 Sep 2025 05:01:41 +0000
Manifest this update: Sun 07 Sep 2025 05:01:41 +0000
Manifest next update: Mon 08 Sep 2025 05:01:41 +0000
Files and hashes: 1: Q9vdhvNHwOEEPnjfpoIoeq4pq_E.roa (hash: AjW64DrutKx53AvwTAQKpO/FJMGHUcE1ZDsQqqfuNRE=)
2: YMZLBPqPX-5oZvXHn499zqUBJRU.crl (hash: QTMskfYdM55qgnq9WG3frRfbwPaDTKMBxDX6G/hpaIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:2e:40:db:7a:ff:ca:ca:b2:ce:43:28:dd:bd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Validity
Not Before: Sep 7 05:01:41 2025 GMT
Not After : Sep 8 05:01:41 2025 GMT
Subject: CN=e8082b159f187eb77093e39a21ae6960bf0702d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:0b:6e:82:2e:69:3f:ad:56:0a:99:13:41:
52:19:92:e4:d4:03:b4:73:c3:e9:88:32:64:c9:ee:
c2:fd:1d:80:4e:5f:19:d3:53:7a:94:63:e4:02:47:
ff:1e:95:35:fb:bf:15:b7:37:0e:f1:d0:d9:70:0d:
57:8e:4a:bf:c5:30:af:70:f5:14:a6:3d:82:ed:93:
06:de:57:49:f8:54:a6:95:10:14:ae:1a:27:a1:f7:
e1:09:0d:66:96:27:4c:6a:eb:c8:56:86:08:45:db:
33:fc:d5:fc:81:57:d4:e1:2b:a8:8f:4c:26:cb:04:
72:6c:9b:6c:4f:dd:89:3d:63:8e:60:b9:2d:6e:f5:
10:bf:34:9d:78:97:1d:5b:f0:c2:2f:e0:5d:3f:27:
5d:26:7c:cb:48:8f:b5:41:ed:a6:f0:9d:46:4c:ad:
07:45:ca:5b:82:80:aa:40:b3:04:58:80:f5:fb:31:
5d:69:59:3d:3e:71:83:4c:11:7e:a3:91:19:17:8a:
75:20:bb:64:02:88:e4:f4:7b:a0:ad:26:b9:a7:cf:
4a:2a:77:aa:d0:9d:6b:d1:02:0e:e5:18:e2:57:e1:
cd:ad:f4:13:f5:7c:bd:28:57:f3:36:3a:b7:ba:02:
df:81:77:37:a0:77:4e:8f:2d:04:19:4d:89:86:51:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:2B:15:9F:18:7E:B7:70:93:E3:9A:21:AE:69:60:BF:07:02:D2
X509v3 Authority Key Identifier:
keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d4:1e:ab:83:46:93:23:ed:35:76:f3:d8:63:8e:9e:79:d5:
4b:41:12:87:ca:b3:fa:de:33:6d:77:83:5a:c6:29:f6:0a:21:
d7:e7:a9:a5:f0:65:af:50:7c:25:44:43:1a:7d:e2:7c:ba:b4:
ae:0b:2d:a1:27:6b:9d:25:da:ac:8c:79:ae:8c:8d:10:50:2c:
11:3b:1f:c2:d1:fd:33:a6:5d:87:97:26:87:c4:5c:da:95:d7:
8a:6b:7e:0c:d9:a6:6c:f9:0a:c1:86:ee:31:d7:44:06:a5:2b:
e4:4d:23:9c:ac:ab:65:46:37:9b:37:22:ce:81:87:3c:b5:3e:
6b:9d:47:0f:8a:dc:1a:fe:5c:f2:eb:67:e3:bb:e3:d3:21:d9:
7a:64:d7:aa:d7:ff:82:53:77:87:c3:03:80:f4:e4:36:7a:33:
91:2c:23:43:91:53:8c:21:06:48:84:9e:c2:52:46:01:51:20:
3d:01:c9:29:da:40:5f:7a:3d:db:fe:7d:88:24:0f:3f:f7:c1:
25:1b:b9:61:b3:3f:0d:01:1c:7d:22:44:85:9f:03:c3:69:09:
e1:a3:29:00:08:52:bf:82:94:06:2f:5d:07:4d:0f:37:c1:75:
5d:57:fd:cf:b3:26:c2:e6:a0:28:d0:80:17:62:01:62:ec:56:
97:f8:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:27 2025 by rpki-client