Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
File: YPclN-3x3At_aURTRQvKSu74P2Q.mft (raw, json)
Hash identifier: dtWm/ZTfIMR0hRll4mF6R0jkqYZl8YzQHunBnk9uVaw=
Subject key identifier: 4D:7F:2E:9C:5E:5F:C5:8E:A9:20:D9:D3:73:38:45:0E:30:91:66:A8
Authority key identifier: 60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
Certificate issuer: /CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Certificate serial: 019A71EE82324E29D10FD7202A390B2E8721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
Manifest number: 0BAF
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: 64MeW97pL92-_QUPEgapyM7HNao.roa (hash: gMWV3xN0pHUk4BWbscqYu+HnLvJWI7ZvfzjkigsBbmk=)
2: YPclN-3x3At_aURTRQvKSu74P2Q.crl (hash: VITv1PV6k30pgL9IRo6+FWQRpcF0rNfIQSBrDSa+wWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:82:32:4e:29:d1:0f:d7:20:2a:39:0b:2e:87:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=4d7f2e9c5e5fc58ea920d9d37338450e309166a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:78:c0:7a:39:3d:df:fb:58:c8:0a:17:b3:
b3:02:29:c5:c8:87:36:24:15:21:d1:80:aa:ef:16:
4f:e9:4a:3d:6d:a8:5c:9a:75:1b:33:52:26:06:e1:
d8:b2:02:8a:fd:2e:ce:c3:6e:80:ed:00:f2:57:64:
59:00:56:f7:0c:34:36:59:4d:a5:05:92:a3:74:e3:
3c:0b:26:6e:05:e1:70:72:e7:dd:0e:dc:46:48:b2:
33:94:4a:5c:6d:6a:e0:3f:49:29:bf:08:17:17:42:
9d:ab:fd:e6:26:f6:86:9a:d9:ba:e8:b6:0c:79:45:
5f:80:14:63:52:7f:7d:bc:43:bd:89:ae:82:e7:14:
20:b5:98:8e:c4:23:03:7d:90:96:a9:31:3e:a8:53:
09:89:03:e9:72:f0:34:3c:f5:88:9a:2e:4c:ae:d1:
10:ca:31:66:ea:af:84:e2:b7:da:4c:3c:40:07:41:
8f:95:ed:be:d3:cd:0d:46:2d:e8:c8:db:e0:93:ca:
a3:e4:61:1c:e8:5e:b3:06:85:e3:36:6c:7a:57:8f:
f4:5e:1b:08:54:53:c3:96:9d:59:67:1e:7d:47:57:
7c:d4:7e:2a:45:2b:62:2f:81:3a:7d:0e:3c:a4:04:
b6:bb:42:e9:58:4b:2a:ba:6c:c9:34:e8:f0:57:cd:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:2E:9C:5E:5F:C5:8E:A9:20:D9:D3:73:38:45:0E:30:91:66:A8
X509v3 Authority Key Identifier:
keyid:60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:55:67:de:97:20:eb:27:6d:73:09:88:3a:8a:c6:c5:8f:25:
0f:e0:ba:79:7a:ed:42:58:f0:5a:a4:71:68:08:3c:eb:46:8e:
d5:ed:c6:e3:dd:b4:35:51:16:16:fb:59:68:d2:0f:be:ee:6c:
00:dc:24:55:90:41:46:f9:ca:c7:1f:18:91:48:8f:0e:6d:8d:
44:0e:4e:1f:d4:fe:26:76:b2:94:71:eb:5e:3d:f0:7a:ee:88:
44:58:af:b5:70:15:b6:48:b9:f6:eb:8b:67:48:96:37:4e:6b:
d2:9e:46:9f:e6:da:55:e0:17:23:a1:64:4f:4e:73:ec:a8:b1:
01:24:5e:e9:8f:14:e1:9c:e0:68:ad:f8:53:7d:44:9e:84:b8:
b1:55:7b:b5:72:4e:2b:d5:81:08:42:9f:df:0e:fb:ce:6f:31:
da:6c:a5:d4:d9:1e:bd:1e:5d:07:dc:5c:3b:99:1d:ad:34:44:
42:5a:1e:c8:39:28:8e:6c:8a:df:cc:0f:53:9b:50:35:d3:9e:
fd:26:af:97:41:fa:fd:2d:06:2e:04:eb:4a:fe:8f:09:ae:61:
36:eb:19:d6:c8:14:56:ac:79:3c:56:fe:b7:60:69:68:b3:65:
4a:c2:6f:c7:ce:55:e3:5c:e2:36:e8:21:bb:ec:21:fb:f8:e7:
73:62:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:33 2025 by rpki-client