Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: DtL1X9j1l/UqJCcF7n5wePC4bbX4LGs3pfIWmoinWCc=
Subject key identifier: CE:B8:DA:2F:08:31:C3:D8:F6:3A:00:AC:5C:8A:AD:B9:FF:06:0C:91
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 019A4D06CC689EB8C305333AD5370123922E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 1602
Signing time: Tue 04 Nov 2025 04:01:22 +0000
Manifest this update: Tue 04 Nov 2025 04:01:22 +0000
Manifest next update: Wed 05 Nov 2025 04:01:22 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: RPRfBtEyxO6Qi3CsPYeg++UI1Ox7l6GDCnfmh2wqQ/s=)
2: cEfVPR5BCH6wIIt0Scz-CewioBQ.roa (hash: uAMhXs6DpT0RTpQCmLK6tpFYd7c3BBCguRMW7ETBwj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:cc:68:9e:b8:c3:05:33:3a:d5:37:01:23:92:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Nov 4 04:01:22 2025 GMT
Not After : Nov 5 04:01:22 2025 GMT
Subject: CN=ceb8da2f0831c3d8f63a00ac5c8aadb9ff060c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:23:e9:f7:a6:cb:59:2e:0f:90:c7:71:38:47:
25:98:cf:1b:bb:81:1a:a4:5e:3f:3a:9d:ec:f7:8d:
37:83:05:8d:68:9b:ba:95:4b:db:15:7b:b3:6a:d4:
9b:70:80:3c:6f:f4:9c:7f:1d:de:90:d2:e0:da:cb:
97:7e:62:c9:eb:3e:ce:55:b5:92:d6:50:08:b8:0b:
eb:8f:b2:d9:c0:16:c6:06:d0:4d:0e:c7:cd:ee:77:
02:44:ce:cf:14:8f:a2:30:97:c2:8b:cf:0f:38:90:
5b:0f:69:53:0a:aa:79:25:05:67:51:c2:b6:4d:e2:
8a:41:8d:bd:04:1a:af:4b:82:10:05:bb:b7:a9:45:
c9:26:30:37:f0:48:6d:f2:5e:ef:d8:df:46:e5:51:
73:a9:7e:fc:ed:83:c9:70:f0:e7:16:a7:8d:24:3e:
7e:7b:c5:13:dd:c8:31:fe:ae:14:f8:b8:e2:1e:f8:
89:6f:33:8f:2f:22:25:28:d0:e8:df:c9:a5:ee:06:
49:d2:00:c8:fd:0a:92:84:23:db:a6:e2:53:66:46:
06:7f:1b:5c:d4:3e:e8:fc:89:9a:bb:8c:fb:4d:15:
b9:9d:28:6d:4c:43:7d:2e:ef:94:da:b8:c6:9c:96:
72:c4:86:23:97:04:96:68:2d:61:08:78:73:0e:e1:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:DA:2F:08:31:C3:D8:F6:3A:00:AC:5C:8A:AD:B9:FF:06:0C:91
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:15:33:2b:03:cb:c6:ff:72:6a:7c:c6:28:50:09:7a:ff:05:
bc:4c:ca:17:ee:f7:b1:34:90:f5:7c:e1:15:2e:f4:ac:3b:a9:
01:39:81:ee:b3:bf:29:1f:e2:bc:be:66:65:d3:eb:7f:b2:6f:
7b:ca:76:2c:c5:1b:72:c2:87:0b:c4:0d:63:41:52:0b:29:7b:
9c:6f:a8:31:b6:a4:5a:d3:07:b2:87:43:a2:e4:51:c5:0c:97:
48:55:2b:ec:55:ef:13:cd:ed:ec:f5:bc:5b:76:d9:7f:ad:11:
70:15:81:b4:09:fe:71:63:51:b1:06:84:80:41:1e:f9:07:d5:
f9:72:83:18:70:0d:75:04:13:d7:23:6e:d7:88:42:b8:24:ee:
de:63:a0:5b:3c:dd:fd:c1:38:bf:39:01:d3:10:fd:58:1a:94:
43:02:aa:1f:28:e8:01:b8:b6:59:38:69:ac:bc:54:18:dc:ce:
a3:be:b9:84:ff:fd:57:a2:eb:a2:74:56:df:d5:d8:f8:69:2f:
76:55:bf:ba:77:8e:8a:5a:c7:17:26:a9:f8:8d:31:6d:22:8c:
fb:78:6c:2b:b7:98:3d:97:94:49:a0:05:e7:a3:f2:33:5e:7f:
61:48:eb:9f:3d:5b:e7:89:9c:14:ef:28:24:5f:1c:2d:74:6c:
7b:b2:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:19 2025 by rpki-client