Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier: 1CsiSnWm9kAYW1LL4VGT+s9QQKhugJG2EdWr5kej7S0=
Subject key identifier: 73:20:81:A6:B9:56:61:52:B3:76:5F:B0:5D:A1:BD:25:DA:14:D9:A3
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 01992255A45C62E0E1E4DB6139A868E0FD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number: 161C
Signing time: Sun 07 Sep 2025 04:01:01 +0000
Manifest this update: Sun 07 Sep 2025 04:01:01 +0000
Manifest next update: Mon 08 Sep 2025 04:01:01 +0000
Files and hashes: 1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: +rGc/iD64ICR1aNNYuLmhSdQc1JQAX3KUNtyzEqX0UM=)
2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:a4:5c:62:e0:e1:e4:db:61:39:a8:68:e0:fd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Sep 7 04:01:01 2025 GMT
Not After : Sep 8 04:01:01 2025 GMT
Subject: CN=732081a6b9566152b3765fb05da1bd25da14d9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:b3:37:bd:db:2c:b1:49:d0:57:fb:b4:05:
9d:08:90:3e:59:d6:05:06:da:ad:71:ef:33:15:ca:
9a:74:95:59:01:b2:a6:20:e7:fe:60:7c:5b:d4:58:
bd:aa:93:ac:f1:68:89:03:91:aa:b8:01:8c:86:9f:
65:7c:2e:3e:6e:b5:f5:0b:39:13:b5:be:ab:c0:18:
d9:71:9d:d7:69:39:99:09:2a:c6:c2:14:c9:37:d7:
23:b6:bc:0a:3b:f2:33:87:69:cb:59:76:e4:b2:39:
02:6e:fc:60:f6:06:ee:02:e7:d3:78:b0:9c:c9:a7:
af:54:fb:aa:8f:0b:22:6a:07:f8:3d:04:56:cf:bc:
b1:58:a6:e1:66:d4:28:6d:14:db:8a:4e:0b:aa:eb:
1f:54:19:00:16:8a:f7:fb:b2:5b:7e:ef:e3:1d:02:
f0:8e:8f:18:1e:09:da:f6:7b:61:43:99:46:9d:74:
8b:76:f0:18:0c:4d:61:ec:2d:dd:2f:ac:72:40:57:
03:2c:32:10:b6:7a:35:42:88:71:de:a0:e0:82:f4:
87:35:a8:ff:cb:d8:79:53:c8:32:44:50:a9:5d:73:
ea:03:85:ca:d6:ed:20:da:0f:83:91:9a:9b:c3:4a:
b6:2a:aa:10:20:97:00:1c:19:da:8f:47:b9:5c:ac:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:20:81:A6:B9:56:61:52:B3:76:5F:B0:5D:A1:BD:25:DA:14:D9:A3
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:68:9a:cc:a6:3d:3d:a3:78:bb:4e:76:01:24:c7:f9:fb:a3:
52:c4:d9:56:f9:e4:31:42:c1:a2:8f:20:d0:08:a8:5c:16:1a:
67:e7:1a:3d:ca:d3:21:48:f6:ac:64:6d:79:61:a3:f5:6b:82:
df:dd:4f:13:f7:14:d8:bf:67:b5:bc:03:6b:73:76:8f:e1:9e:
6e:82:fc:80:e7:5b:0b:ad:c3:fb:f5:27:16:e0:a3:41:10:c9:
8e:f3:bf:18:f4:65:be:00:e0:d1:b5:8b:08:88:a3:df:b8:16:
c5:f2:b4:7b:e8:89:a4:49:58:11:d9:4b:ec:b0:66:f7:65:29:
58:75:37:c5:4b:61:a8:83:c2:10:42:94:f5:1d:7e:94:a1:70:
b5:98:7f:c4:12:5f:3c:bc:a2:15:2e:6f:ba:b2:9a:b6:15:f8:
fb:c8:e6:6e:e2:68:0c:e0:eb:79:08:62:cb:ae:b3:47:3e:4e:
0b:ec:d9:c3:c5:f4:fb:d8:ac:b5:c8:59:8a:78:ff:6a:d3:f8:
dd:6e:a2:06:23:13:a6:d0:5d:fe:e1:37:08:6f:90:f8:d6:09:
f4:1c:a6:f4:42:ff:ae:fd:4e:bf:30:ab:0c:97:1c:45:2d:22:
49:ca:d5:66:63:9d:96:ca:51:c1:2e:8f:27:b5:8e:3f:fb:63:
cf:fc:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:18 2025 by rpki-client