Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: a/Acz/CfJi4kuiZ7CV5mC5g+mSaY9s33Zg3ECDFkKSM=
Subject key identifier: 60:22:CE:F1:01:23:E7:B1:0C:C4:D9:FB:A6:0C:8E:77:12:52:F7:DC
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 019A0C017309C414A436110AEF3A4969C849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 9F
Signing time: Wed 22 Oct 2025 13:00:12 +0000
Manifest this update: Wed 22 Oct 2025 13:00:12 +0000
Manifest next update: Thu 23 Oct 2025 13:00:12 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: MXHH0Depzsz03TKK2PMKkKfBlfBjWmd2mzQoV4DXg5c=)
2: ZvIBvN3gO9RJM7uC8BrV6jzhAmk.roa (hash: dioBOx3h8ph3ofANtrh34SCoANsWuT4s9fkC5DmIrUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:01:73:09:c4:14:a4:36:11:0a:ef:3a:49:69:c8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Oct 22 13:00:12 2025 GMT
Not After : Oct 23 13:00:12 2025 GMT
Subject: CN=6022cef10123e7b10cc4d9fba60c8e771252f7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:22:a9:53:90:f3:b5:be:4b:8c:57:c0:5d:
54:61:17:fa:7c:99:b7:f7:fb:9f:c8:34:1c:be:11:
c3:47:a1:55:72:a4:95:e4:9f:03:80:34:70:95:e8:
4f:bd:1c:7b:a5:cc:59:27:fb:2d:88:c6:b4:fb:5d:
b0:79:b5:72:f8:96:e7:4b:de:06:eb:39:a7:72:0e:
63:7b:84:78:8c:68:e4:cb:7b:73:50:a8:ab:29:29:
7b:78:b4:c7:d3:a9:16:56:17:95:9e:30:ae:b9:10:
47:49:49:f0:fd:5f:00:6c:13:ff:93:37:1d:bb:1c:
e6:89:e7:88:a7:60:62:1e:99:19:62:97:cf:15:2c:
55:d2:4a:58:2a:ff:73:b6:53:f1:29:ab:84:f0:fb:
fd:8d:3d:ab:e0:a4:38:2f:19:0b:66:83:1d:41:f7:
c1:7b:59:39:3f:c7:c7:67:01:36:4c:2b:1e:49:5a:
0a:c2:d9:f1:c6:0c:06:07:35:a9:c1:02:af:89:77:
56:53:06:17:3a:60:dc:b0:33:34:40:9e:8c:f5:52:
39:08:41:1b:8f:ed:39:58:9d:6b:71:a6:ec:54:11:
3a:b0:91:97:16:d8:0c:14:9a:81:4b:be:32:57:fc:
9c:ab:5c:a9:81:b8:0a:6a:31:8b:89:4a:70:cd:83:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:22:CE:F1:01:23:E7:B1:0C:C4:D9:FB:A6:0C:8E:77:12:52:F7:DC
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e1:67:96:4c:25:03:8d:40:8a:01:c8:48:c8:ab:8d:b3:0a:
72:a5:bd:b1:c6:8e:a8:f0:0f:d4:66:7f:aa:d9:6c:6a:34:c9:
5a:c7:74:fe:05:48:65:42:4f:46:fc:89:a4:0d:9a:82:6f:c1:
b0:42:99:e4:9f:03:89:d1:11:76:6e:02:e8:1f:4e:90:03:a6:
7d:7d:e2:dd:9f:a5:cd:d4:54:aa:75:0e:00:ee:ea:2c:e3:e3:
b0:37:51:e1:00:1f:76:f6:c2:d6:21:12:4e:3d:df:6f:d4:8c:
11:bb:0d:26:a5:e1:90:57:40:20:ce:d7:03:c5:6d:34:14:eb:
bb:54:98:9c:36:c4:f7:7a:56:4e:55:ca:69:c5:86:2d:36:42:
21:8d:30:99:3f:7e:bc:5f:c0:e9:6d:bd:77:5b:2f:8e:ae:c5:
27:5e:15:2f:05:ec:88:a1:60:30:ed:38:b9:df:96:d9:3f:6b:
52:c4:9c:bd:d5:a4:a1:92:d6:cf:e7:bc:03:e7:1d:03:6f:c0:
7b:9d:69:b7:ff:1a:d1:88:18:29:67:ae:45:d5:9a:37:5d:2f:
d9:36:63:59:ae:3e:9f:dc:75:2d:f6:84:ac:05:d3:c2:3b:03:
63:34:ff:91:9c:22:02:86:25:2f:ec:39:ac:af:28:fa:24:9a:
66:7a:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:53:25 2025 by rpki-client