Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier: b9/RFCVyL45tAkXNqeyjblrTE9POklBtf+XDsgYQbZ8=
Subject key identifier: DF:DE:9C:B3:89:5B:79:B9:96:EE:1D:AE:59:04:B0:94:46:22:8A:57
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 01992F360C770D1899EFBD066AF05CCFDE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number: 041D
Signing time: Tue 09 Sep 2025 16:01:35 +0000
Manifest this update: Tue 09 Sep 2025 16:01:35 +0000
Manifest next update: Wed 10 Sep 2025 16:01:35 +0000
Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: Aa7LkggPkTW8AuN5s+MOq7eTO4NXLtdjHBoJ1SOOAD0=)
2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:0c:77:0d:18:99:ef:bd:06:6a:f0:5c:cf:de:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Sep 9 16:01:35 2025 GMT
Not After : Sep 10 16:01:35 2025 GMT
Subject: CN=dfde9cb3895b79b996ee1dae5904b09446228a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:83:0f:4c:67:5d:24:1c:69:c6:e5:ac:27:
af:d4:cc:8d:19:48:c2:1a:bc:9e:fc:0a:4d:7b:00:
e6:78:e2:5a:5b:c8:90:b7:7e:cb:d2:74:73:84:3b:
d4:ed:52:a4:c2:d6:e8:88:e2:61:71:db:15:90:0f:
da:6b:68:36:2f:f1:03:d4:97:d7:f4:6d:74:f6:47:
a8:02:96:16:e9:61:ce:ad:be:fd:a0:7a:e1:dc:54:
20:4b:9e:08:b1:f6:c6:29:36:b7:9b:11:51:d2:e6:
11:e4:eb:e6:ad:2d:c1:a6:50:71:4b:2f:4c:c8:b4:
99:c9:ea:13:e6:68:9c:5e:aa:46:a1:78:15:b2:7e:
1d:52:84:05:00:5a:08:93:50:a1:3c:34:24:77:b7:
5b:dc:db:f5:75:06:30:e7:f9:33:f8:52:57:4b:75:
9a:19:11:c6:7a:92:b4:ad:19:40:51:61:ae:70:f3:
ad:60:53:13:a4:c9:a3:d8:4f:73:0c:07:95:79:57:
7f:aa:cb:fe:ea:f5:be:ea:bf:40:bd:c4:07:2a:f7:
31:45:f8:32:e1:8f:ef:1b:e6:eb:76:30:ca:82:7b:
a0:d7:bb:af:99:ec:fd:9b:83:0e:ae:c7:20:2c:54:
7e:30:3f:65:ed:c5:40:a9:56:71:5b:b9:92:43:42:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DE:9C:B3:89:5B:79:B9:96:EE:1D:AE:59:04:B0:94:46:22:8A:57
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:67:df:8d:92:cf:85:7a:c1:69:b8:1a:ae:41:c4:26:3f:bf:
4a:4f:b6:97:9f:91:63:27:c1:20:bf:07:e9:ee:b7:c4:da:3c:
8b:49:80:64:f0:29:ed:6b:9b:98:2a:41:6f:e0:a1:70:30:b1:
b3:88:bd:8a:c6:01:a3:5c:de:5d:88:95:10:39:aa:cd:18:02:
b0:35:26:59:9d:bd:e5:28:16:05:24:68:e0:7b:c2:60:1f:be:
d1:d4:0e:90:fd:ff:40:d0:47:48:57:e1:82:b6:d9:9b:74:9b:
7e:bc:4e:86:c0:7c:ab:fa:45:b0:89:d7:cc:c1:6e:43:0a:a1:
a7:d8:b7:82:b8:d8:7e:23:6f:03:93:11:1d:7d:52:d3:03:92:
ff:7c:00:d7:01:78:3d:fe:98:ac:56:0f:15:16:56:9f:3c:3b:
02:bd:9f:ba:ed:0b:12:fe:eb:6f:53:04:da:ff:c0:c3:c1:20:
25:f3:62:b9:16:ee:0d:d4:4e:54:b8:fc:06:f0:99:01:93:60:
37:91:70:b8:56:62:b4:64:bf:1c:a9:f6:bb:92:ba:2f:1a:bc:
30:92:92:5f:c9:53:8c:57:0e:2f:a6:ed:9c:d0:f7:9f:73:f4:
34:64:34:6e:21:f0:3c:a1:d6:83:a8:27:81:3c:5c:8f:2e:f4:
a2:4a:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:08:16 2025 by rpki-client