Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: G9ePddPz595D9hf1o3YQMZ7egjuZc7VE7YysgawJDeY=
Subject key identifier: 58:35:35:7E:4E:45:E1:A2:09:D5:1A:1A:1D:44:78:85:0A:79:07:66
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 019879AE0A630E5856E58249042225BA2670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 121F
Signing time: Tue 05 Aug 2025 10:01:45 +0000
Manifest this update: Tue 05 Aug 2025 10:01:45 +0000
Manifest next update: Wed 06 Aug 2025 10:01:45 +0000
Files and hashes: 1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: MP7jRVMlWM27KAOOcaLm2pYOBKKukvdvnSjKMSSGeUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:0a:63:0e:58:56:e5:82:49:04:22:25:ba:26:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Aug 5 10:01:45 2025 GMT
Not After : Aug 6 10:01:45 2025 GMT
Subject: CN=5835357e4e45e1a209d51a1a1d4478850a790766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:4d:a1:63:95:cb:c9:ae:d2:69:8c:f5:1d:
22:10:3b:04:91:77:ab:7a:c0:cc:2d:7e:6e:d9:d4:
34:8e:4c:ec:ab:1e:71:89:57:d9:ca:4c:25:b8:93:
81:52:b7:45:37:eb:ad:7f:a6:65:27:89:ca:b0:1d:
46:50:bb:76:87:90:9a:50:65:b9:7d:aa:a5:da:d1:
28:3d:09:84:94:e1:02:d5:d5:0c:52:1e:eb:c5:27:
5a:52:3a:c7:79:15:75:d8:0d:62:6d:10:80:9e:aa:
3d:55:99:5f:a0:24:00:7d:93:f1:ea:2d:c2:e0:86:
d1:52:5d:ba:60:0a:e5:93:19:e9:42:0d:d0:c8:84:
ac:09:4f:d1:33:f0:b2:3b:a5:64:3b:2f:2d:71:6c:
77:1e:36:ed:88:35:5c:34:05:4b:7d:1d:9e:fa:ae:
f4:d4:ff:8c:3b:e2:26:b4:51:29:c6:eb:9f:ee:cf:
8b:72:41:00:6a:b4:08:18:7b:4e:d0:d2:e7:d2:60:
b8:4a:05:68:17:11:6a:7f:f1:41:e0:66:13:05:35:
44:8c:1d:46:22:93:10:98:6e:bc:86:d0:e3:53:9c:
7c:97:39:b5:6b:d4:18:65:9e:0b:83:07:06:f3:9b:
4a:7e:5c:74:f8:3d:c5:30:44:aa:32:4c:a8:8c:3b:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:35:7E:4E:45:E1:A2:09:D5:1A:1A:1D:44:78:85:0A:79:07:66
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:02:6a:fd:03:74:4d:db:19:99:f1:b0:bc:34:c5:c3:c9:95:
ac:47:73:ba:81:51:ff:1a:02:6e:4b:38:50:02:d6:ea:a3:28:
ce:b4:ff:7d:01:32:28:4c:13:4b:68:7c:8f:55:56:11:4d:e9:
3a:84:b7:a3:05:f7:5f:d2:4c:b6:4a:81:9c:03:fc:43:41:95:
09:fc:9e:a8:10:7c:a6:62:40:36:24:3a:de:18:73:59:d2:23:
c6:7f:76:f8:bc:10:43:ad:78:87:fb:ca:aa:f2:35:b0:dd:ea:
1a:00:97:16:42:00:54:98:dd:d1:7e:e7:14:52:7f:1a:81:43:
1a:8e:62:6d:b8:77:00:81:89:e4:1a:8c:98:2e:01:a3:59:44:
cb:ea:7f:b8:65:ca:43:28:d4:2a:2c:b9:f3:13:be:b6:78:29:
4b:50:d4:d6:60:9c:80:0d:bd:ce:75:6e:b6:fc:33:18:e3:02:
e0:51:76:86:b0:dc:ba:5b:80:8a:f0:cd:1d:5b:4e:b6:b8:6a:
02:42:da:9b:02:7a:b8:aa:76:6d:6e:41:96:6f:69:3d:38:7b:
9a:eb:c4:5c:bf:75:bf:16:5b:a1:72:87:95:e5:d6:8a:56:cf:
f7:f0:fd:33:35:08:84:1b:4b:a1:1d:42:cc:79:9a:05:a3:16:
de:1f:c7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:59 2025 by rpki-client