Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: I8WlGoAiEBurYuGZSVVd+PEIKl76PxYjEQJz4xXs7d0=
Subject key identifier: C4:E2:6D:20:2F:42:24:E1:4C:C0:C2:D6:B1:0D:0E:D4:DB:A8:56:AF
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 019A511989401AB4BFAA5D9500C7695390DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 1314
Signing time: Tue 04 Nov 2025 23:00:19 +0000
Manifest this update: Tue 04 Nov 2025 23:00:19 +0000
Manifest next update: Wed 05 Nov 2025 23:00:19 +0000
Files and hashes: 1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: vgb0632meoEeVcIBvSOVO5AK6Qd3DpBso4j/5CxGQB4=)
2: iK-6vM3UN-0JPyozDLdhLjJ5znw.roa (hash: LEDGjWpooiw+DnQIpdRJAz1t/vP9dQU00MHsp9zo7Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:89:40:1a:b4:bf:aa:5d:95:00:c7:69:53:90:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Nov 4 23:00:19 2025 GMT
Not After : Nov 5 23:00:19 2025 GMT
Subject: CN=c4e26d202f4224e14cc0c2d6b10d0ed4dba856af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:a7:9c:3e:09:c0:de:56:62:26:68:2a:0c:
53:b2:51:05:63:46:d1:01:ff:f6:8a:2f:6f:4c:44:
6c:de:8a:94:3a:62:25:6b:8f:64:6a:b8:41:44:7b:
1c:6f:a1:51:9b:4a:5d:2a:ea:c9:02:2d:ff:86:1f:
c3:0a:19:68:ec:89:fd:88:3f:af:d7:4f:0f:79:51:
45:d9:b0:7d:be:f9:48:da:a5:96:4c:70:b6:94:d1:
d6:c1:84:80:57:dd:27:60:46:0f:5c:f0:48:c4:fb:
39:a4:bf:03:18:6c:3e:70:65:14:ea:29:b5:1d:f0:
ae:e1:7f:cc:8e:9a:bc:30:69:2f:e0:68:76:05:22:
fd:28:00:f3:cb:28:ff:7b:c1:ca:2c:34:df:31:a3:
b5:b2:0c:39:ce:ab:9c:ba:a0:3d:b5:2e:f9:97:8d:
43:11:16:1d:95:22:60:8c:e5:c3:b3:56:91:d1:d7:
af:88:00:87:9f:74:22:fc:66:45:9a:0a:f7:a6:50:
e6:83:53:cc:26:60:3f:27:f1:c3:2e:92:14:54:8d:
c1:63:54:57:44:93:af:01:58:62:9f:3e:7f:b1:ab:
21:a0:1c:bb:33:dd:6e:2f:55:b2:cc:e7:54:2e:f1:
4b:1b:5c:cf:10:50:f4:15:ce:4f:71:a7:06:06:5c:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E2:6D:20:2F:42:24:E1:4C:C0:C2:D6:B1:0D:0E:D4:DB:A8:56:AF
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:02:e7:6d:e3:05:1e:25:02:d3:8d:94:aa:c2:52:cc:b4:60:
c4:f5:1f:ae:08:3e:c4:f3:62:ae:0b:14:5c:89:bc:21:52:b2:
e3:06:f2:14:1a:dd:41:6c:47:1b:11:df:bf:d1:cc:7a:a5:16:
2d:21:f9:b6:0b:56:79:8d:b2:86:81:3d:4c:c8:a6:b5:38:a0:
70:18:f3:67:a8:3e:8c:78:4e:52:9d:b7:a0:ae:b3:b4:d6:86:
f1:1a:8f:f4:f4:a8:e5:b9:0c:98:0c:c0:19:a0:56:3f:ee:8f:
d4:d7:36:f6:16:16:19:90:f7:cc:d4:f9:58:10:2c:f3:39:1f:
7e:0a:33:b3:74:ed:1d:f0:2b:e5:85:d6:24:62:04:b9:1b:06:
25:73:5a:e7:91:83:42:75:c7:12:95:da:76:66:7f:b5:bb:3f:
b9:5a:aa:ac:6c:e8:82:0f:87:8d:54:59:2b:36:73:df:ee:bf:
de:f7:cf:0d:77:28:36:54:8c:ee:6d:4b:73:41:4a:61:87:8d:
70:52:07:1d:9c:ec:87:a0:53:cd:ea:3d:35:4b:36:e5:fb:4e:
d4:b9:ab:bc:63:2f:08:ac:39:3a:b0:be:9d:30:e3:34:75:69:
e0:83:f1:c2:f4:b2:6d:a0:4f:ac:b3:99:8a:cb:37:53:4a:5d:
54:da:ea:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:26 2025 by rpki-client