Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: CSP/gQqS3XFRXduz02QbfIH3y++MslurvRdQKyJ+jXA=
Subject key identifier: 72:FD:D6:E0:F1:FD:2C:EE:CE:E0:F3:B9:B3:A0:43:A1:58:62:1C:FB
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 019A71B770903EC24D7BDA001361BAC9620F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 115F
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: VHdTZmShTnyVIq1iifmz0tm7t9FtD6t/eh7W6kxCTYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:70:90:3e:c2:4d:7b:da:00:13:61:ba:c9:62:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=72fdd6e0f1fd2ceecee0f3b9b3a043a158621cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:29:62:55:61:a1:11:7c:83:c1:d3:d7:11:
fd:c1:83:a2:d5:b2:d3:f9:7a:f2:d4:ef:f4:d2:17:
0e:d4:5a:90:ad:e0:24:59:34:bd:06:04:51:93:a3:
18:50:8e:db:0e:19:ad:d6:21:68:b9:02:9b:f9:7b:
a8:5a:40:fd:d6:e5:01:53:11:9d:1e:92:1d:17:a8:
49:b2:bc:95:91:d7:80:9c:34:ca:b4:11:7b:70:c3:
c0:a5:40:95:72:53:43:5b:38:1e:16:e5:30:f0:45:
9c:86:06:41:8d:0d:89:eb:bc:2d:93:ef:17:eb:91:
b6:89:0d:2c:5b:91:fd:d0:28:24:9a:98:70:61:c8:
41:19:8a:0e:ce:16:bb:68:c1:63:51:fd:6b:5c:19:
87:dd:7d:e3:6d:41:b2:9b:32:96:35:cd:1c:75:82:
9e:fa:e2:22:ed:39:ff:aa:81:95:06:b4:f1:2b:e6:
42:69:0f:da:cf:84:1e:1a:e2:94:c8:c4:ca:cb:c2:
01:3e:40:1c:4a:9f:db:23:26:ae:b1:7b:de:a7:b6:
b8:04:e1:bf:39:02:2c:0f:2f:65:03:f9:51:54:81:
73:08:44:2d:d0:cc:2f:7e:a3:f5:fb:72:c5:90:07:
f9:ec:ab:c8:cb:ff:61:8b:73:c5:53:e0:42:18:73:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FD:D6:E0:F1:FD:2C:EE:CE:E0:F3:B9:B3:A0:43:A1:58:62:1C:FB
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:df:05:ed:72:81:64:bc:ee:3a:63:2d:01:0c:20:0c:3a:76:
3a:14:ca:9e:38:42:2f:0b:37:9a:54:4e:1f:a4:ea:4d:b7:f3:
fb:82:71:5d:79:9c:7e:af:69:67:9c:f0:10:d1:5f:35:4c:0a:
f2:58:77:58:f4:92:7c:97:3f:9f:b3:e9:86:60:69:d8:5b:16:
47:da:85:fd:81:96:78:f9:a3:33:06:59:8d:7f:96:d2:ca:7f:
7c:a0:62:17:1c:d4:87:6f:b0:ed:08:ec:6e:df:dd:fd:e6:1f:
3a:4e:14:de:9d:7a:3d:79:47:bc:a0:f5:7d:2a:4d:61:22:16:
8e:0e:16:c8:7a:7c:73:2d:70:0f:c2:63:b9:0d:e2:7c:89:ca:
e3:1c:fb:97:1a:3c:53:88:c2:fc:2d:f5:6e:a1:6e:83:71:46:
6c:0c:9a:98:82:20:13:fb:90:e9:64:9f:e4:21:91:84:b8:5d:
6e:bc:f0:71:58:b8:66:00:12:80:68:da:dd:37:53:35:f5:41:
3e:52:97:3b:cc:5b:12:65:ab:d2:07:4e:6b:1c:07:50:e3:4a:
10:2e:e9:07:f8:b6:f2:42:29:44:53:5d:5a:1b:8c:04:e0:71:
86:a5:bb:75:b4:3b:17:99:fa:92:c4:89:05:9c:c9:0d:fa:f3:
be:be:fa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:00 2025 by rpki-client