Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: EMwEFu1Xus+Fx5V6VBWI+dOO89UGi0igXGESW9kDsQw=
Subject key identifier: A1:7D:96:CE:89:B4:1D:A2:CA:0E:1A:77:56:C9:99:31:19:45:FB:1D
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 019923A073BDCC7BBEB03B6C9C965C7340D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 1568
Signing time: Sun 07 Sep 2025 10:02:21 +0000
Manifest this update: Sun 07 Sep 2025 10:02:21 +0000
Manifest next update: Mon 08 Sep 2025 10:02:21 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: bnemvGA9XvvIcnZ3d+U6joyiRErY74/eeFg5765jRW0=)
2: cEfVPR5BCH6wIIt0Scz-CewioBQ.roa (hash: uAMhXs6DpT0RTpQCmLK6tpFYd7c3BBCguRMW7ETBwj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:73:bd:cc:7b:be:b0:3b:6c:9c:96:5c:73:40:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Sep 7 10:02:21 2025 GMT
Not After : Sep 8 10:02:21 2025 GMT
Subject: CN=a17d96ce89b41da2ca0e1a7756c999311945fb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:6c:70:a9:6b:23:58:f7:d7:4c:fb:5e:3c:
f2:f6:da:28:d1:32:4e:74:80:d7:a9:0f:a3:33:7b:
ec:cd:b5:99:f1:3b:6c:7c:7d:8a:8a:9f:77:4f:8f:
f0:40:1e:a8:e7:40:b1:fb:b7:ca:9d:e8:f4:aa:b3:
6e:85:71:50:75:23:44:38:d2:07:15:0e:c5:6b:4d:
95:37:9a:a7:76:97:31:96:16:c7:b1:f7:b5:15:a9:
e4:e2:16:08:64:1e:6d:21:19:9d:a4:6f:8d:12:b1:
84:bd:50:da:ca:d1:8e:30:38:3d:1b:22:e8:0d:4a:
ef:6c:d3:70:06:63:4c:5e:f8:28:66:f7:9c:9e:4a:
f5:e2:04:7d:e3:46:39:1c:9c:42:3e:6d:07:c7:f8:
9c:9b:b3:f4:c6:be:de:23:20:93:a6:51:49:ba:ac:
37:7e:56:c9:42:ff:d6:63:c5:b6:14:76:d4:9b:ca:
eb:c1:c7:1d:a7:e8:fb:e9:8c:a3:7a:b0:7d:d8:ce:
99:50:b6:ed:72:2d:0f:0b:70:e5:ad:0f:7c:6a:45:
3e:b9:a4:12:de:f9:fe:1b:87:e6:af:42:72:85:57:
1c:b6:1b:99:81:62:cf:3d:ed:12:d7:ae:b6:cb:a3:
68:a6:11:3c:38:7a:5a:b8:06:7e:25:a5:02:39:7d:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7D:96:CE:89:B4:1D:A2:CA:0E:1A:77:56:C9:99:31:19:45:FB:1D
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b5:70:71:0b:cf:9a:e0:73:78:54:0a:5e:44:5d:77:54:89:
c0:87:25:84:81:27:72:01:4a:4c:96:3a:cd:7a:99:d1:e2:9c:
f5:b4:59:00:ed:f7:9f:46:83:83:81:d7:e7:51:7d:c7:76:e2:
8a:4c:1c:2e:0b:07:74:d4:b2:8a:52:7b:44:38:57:39:4e:da:
02:b9:dc:53:5c:30:e5:04:7e:c4:16:9a:37:65:7c:ff:54:19:
b1:a7:b0:ba:5e:78:7d:32:92:82:a0:ae:a5:97:ed:70:d9:79:
60:17:99:aa:cb:80:e4:00:10:41:05:68:8c:7e:b6:c2:07:21:
2c:85:23:a7:ea:a8:59:0d:34:7c:a0:10:ee:e6:87:c0:16:66:
92:95:84:46:df:fa:67:6e:d3:26:d3:df:d7:5e:79:8e:c7:4f:
06:42:6e:ed:e7:4a:a6:e5:0d:49:ff:df:d8:2f:c9:fe:ff:a8:
be:a3:9e:82:ff:cc:dd:cc:5c:56:13:0f:8f:ec:12:65:19:9f:
c1:fb:eb:34:87:f1:b3:2a:0a:8c:3f:19:a2:69:b3:d3:42:21:
55:66:38:d3:1b:71:54:57:8f:da:3c:a8:5b:d6:e0:93:e1:7d:
56:cd:fc:41:13:d6:e6:6a:19:37:37:c9:32:07:df:e7:46:dc:
24:3c:eb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:26 2025 by rpki-client