Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json)
Hash identifier: M3XDhfArwvvujV6qPUwM47JVTPIMHaQtGtJ4IbePEIc=
Subject key identifier: 11:9D:19:74:D8:5C:DC:C7:6C:B9:CA:E2:0E:A0:A1:CE:A6:5F:B6:67
Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Certificate serial: 019879AD9B67DDDA564CA743016A1D1814E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
Manifest number: 0DF0
Signing time: Tue 05 Aug 2025 10:01:17 +0000
Manifest this update: Tue 05 Aug 2025 10:01:17 +0000
Manifest next update: Wed 06 Aug 2025 10:01:17 +0000
Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: UlBCL3c6XLoTdGLcD+aco3BSN3DtmkhvE2+8zduf2iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:9b:67:dd:da:56:4c:a7:43:01:6a:1d:18:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Validity
Not Before: Aug 5 10:01:17 2025 GMT
Not After : Aug 6 10:01:17 2025 GMT
Subject: CN=119d1974d85cdcc76cb9cae20ea0a1cea65fb667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:52:cc:ac:1a:61:d4:66:91:7b:3e:85:bc:
86:66:10:a7:4d:49:04:73:cf:4f:45:65:d3:41:cc:
90:8a:8d:21:92:4d:29:2a:62:c1:32:7d:b5:22:4c:
ba:5c:be:f7:6b:4b:22:94:91:02:fe:5d:0e:e6:44:
7d:a3:c2:27:41:cb:e3:fd:9e:21:5d:ec:1d:77:41:
74:f3:70:e1:b5:ce:fb:2e:42:45:11:0e:4c:3b:a1:
20:fa:f0:f7:f0:86:58:84:a7:45:54:11:1e:da:d6:
b4:ca:51:73:dc:9d:d2:bd:a0:88:ed:f7:16:42:1b:
d3:04:54:c4:79:b1:e5:43:4a:c1:04:58:b7:d8:9e:
1d:ff:4b:16:f1:11:0b:02:cc:20:28:8e:80:d3:c8:
c2:9e:cb:ea:d4:62:71:e2:f6:af:ba:45:dc:95:a8:
e5:f5:61:f0:0c:b4:4a:39:1b:6b:b8:24:90:34:60:
39:13:26:3e:2f:59:0f:04:dc:63:20:26:5c:42:5d:
7c:24:99:61:ea:04:46:d0:65:19:f8:3d:4a:19:5e:
97:91:55:ac:e0:69:ef:85:86:40:a5:85:2f:88:c5:
e6:ce:d8:f0:8c:bc:6e:2f:0e:fd:00:90:3e:a7:9a:
c5:b5:2c:27:6f:7f:55:d7:d2:88:8c:13:4f:51:c3:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9D:19:74:D8:5C:DC:C7:6C:B9:CA:E2:0E:A0:A1:CE:A6:5F:B6:67
X509v3 Authority Key Identifier:
keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9a:40:c3:4a:f6:f6:90:51:79:57:12:44:7c:76:ee:b7:f3:
a3:71:fe:41:c6:c4:ff:d6:18:7c:46:52:9a:c2:2b:30:54:6b:
95:32:92:ab:f6:7f:da:de:e7:cc:0d:c8:48:36:21:ed:8d:4c:
d2:95:b3:17:4b:c2:b4:75:5e:53:24:ca:54:21:f2:ae:a0:8e:
a1:61:9b:45:68:79:7f:85:04:d2:47:35:8a:07:39:7b:5c:30:
7d:37:a7:ee:29:c6:dd:12:8c:1d:94:5f:62:c2:e4:70:23:55:
a9:68:95:88:f0:9b:11:68:b4:dc:41:9b:94:a1:2c:0d:e4:ea:
9a:4a:10:49:85:34:a8:7b:de:f8:04:49:a7:33:08:1a:56:5e:
a8:0f:4e:f8:08:ce:df:0f:ff:e9:86:ff:a4:a4:4e:5d:04:bd:
63:cf:8d:cf:0f:33:1a:2d:50:fb:21:d9:ab:f7:26:19:11:aa:
94:1c:f1:be:bb:e6:1a:4a:c6:4e:6b:77:03:fe:c8:c5:c4:cb:
b1:a8:4e:66:b5:94:a5:92:8d:d3:89:86:10:b1:48:75:64:86:
f4:2b:fd:11:2e:0c:96:13:d6:06:e0:ac:94:45:6f:34:2f:41:
60:08:2b:7e:e2:31:a5:fb:bd:50:5d:b3:19:fd:a9:e9:74:12:
50:c9:fe:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:00 2025 by rpki-client