Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: VOBlGM6H990zn+hTObUkhaawtTT3Zjq6177BF5K3zro=
Subject key identifier: AE:1B:02:82:E7:D7:35:D3:9C:0B:17:94:CB:02:B3:4C:39:E6:CA:D3
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 019923D5F4E1A8CE85B51B030158E8EF8D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 1278
Signing time: Sun 07 Sep 2025 11:00:48 +0000
Manifest this update: Sun 07 Sep 2025 11:00:48 +0000
Manifest next update: Mon 08 Sep 2025 11:00:48 +0000
Files and hashes: 1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: LkLL4p/cFVrw75FmzCHxAaOJf7DGmBODeKJXPT4nBTg=)
2: iK-6vM3UN-0JPyozDLdhLjJ5znw.roa (hash: LEDGjWpooiw+DnQIpdRJAz1t/vP9dQU00MHsp9zo7Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:f4:e1:a8:ce:85:b5:1b:03:01:58:e8:ef:8d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Sep 7 11:00:48 2025 GMT
Not After : Sep 8 11:00:48 2025 GMT
Subject: CN=ae1b0282e7d735d39c0b1794cb02b34c39e6cad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:b3:78:fb:a5:82:50:5b:20:ff:f9:ef:a3:
2b:88:86:1d:4a:5b:ee:59:9a:90:a0:a6:24:5a:30:
1d:3c:29:a1:11:76:ba:26:46:9e:69:4e:f3:2f:4c:
60:8b:f7:19:d6:53:80:d6:8b:e7:16:c1:db:3c:b5:
db:84:0f:1d:2b:c7:d8:0b:9d:1b:ea:be:a5:13:1e:
39:07:70:02:3e:7b:20:c2:10:42:f9:40:54:36:9f:
70:53:75:6e:ae:ce:da:d7:cf:87:26:ad:53:48:c0:
7c:16:46:9d:76:8f:7d:d3:a6:fe:66:b9:9d:15:7d:
0f:4f:3e:f5:21:b4:a6:e5:29:98:52:e6:3d:80:77:
20:ae:2e:3f:3a:af:ec:f1:98:d9:ee:25:40:2b:0c:
a8:95:a3:4b:d1:39:03:34:8d:74:71:db:23:f2:1f:
00:d9:56:eb:6a:9e:d8:a8:d7:bf:80:78:2e:4c:3d:
f8:9d:a6:a2:6c:21:4a:01:3c:c0:c1:e3:2b:1e:34:
9f:dd:7a:20:26:46:3b:a5:24:a1:2f:42:bf:13:e0:
10:a6:28:b5:59:91:90:20:00:76:c6:36:06:e9:4b:
b0:cc:19:cd:4a:7f:d9:6a:39:a9:0b:cd:cc:42:9c:
f1:d4:e7:c4:6f:45:89:89:01:95:86:7b:53:40:c1:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1B:02:82:E7:D7:35:D3:9C:0B:17:94:CB:02:B3:4C:39:E6:CA:D3
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c2:33:b6:da:24:49:e2:8f:58:57:48:58:c3:a5:f3:49:1c:
cc:5c:a5:f8:2f:9a:d4:1d:9d:b5:5c:4e:ee:c3:f3:b0:70:85:
0e:84:8b:39:ea:c7:d5:57:4c:d3:f4:0a:b8:00:61:93:c2:d8:
56:ea:12:43:fb:e3:2c:8d:6e:dd:86:47:9b:9a:ca:0b:1b:b5:
09:bf:29:98:a8:96:dd:99:f4:bc:8d:59:d1:bb:d3:d0:13:a7:
a9:73:87:99:75:68:ae:7c:0a:b4:a8:ba:fe:00:e7:4d:5c:6b:
ce:98:51:43:69:ff:ad:dd:80:cf:0a:7a:2e:d4:a4:1e:68:ca:
a8:87:ec:53:de:b4:ba:d0:e1:b4:b1:d4:1b:63:a5:fa:17:90:
fe:e3:b1:12:05:56:52:83:e7:44:83:41:c7:54:56:05:4e:6f:
5f:df:80:98:19:d5:99:42:47:f5:84:03:f6:63:33:47:b9:f4:
c1:20:3f:b0:28:b8:ea:fd:95:38:a1:dd:0a:fc:21:6a:40:3c:
0a:ee:40:a8:43:72:db:c1:bc:dc:e2:06:a7:83:5c:02:45:8d:
67:ce:0a:04:c8:00:89:aa:f4:45:59:0c:4f:71:e6:67:10:44:
9e:bb:63:e1:4c:ec:3d:ff:4f:22:fb:7b:4c:f4:56:47:93:11:
5a:15:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:37 2025 by rpki-client