Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: YYOTfp6VmsR25LJDn9XMhDVKe+LT5Rks78EdEvZf4q8=
Subject key identifier: 90:CB:29:07:B6:C6:19:20:48:E4:DD:D4:35:72:FD:26:D2:FF:09:84
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 019A4EF52FF07AB277896928D82808C4CA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 114D
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: sb25VfiPbr83/9JZAYhN/ec9LrrWo3qCR+yR1+YeJ20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2f:f0:7a:b2:77:89:69:28:d8:28:08:c4:ca:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=90cb2907b6c6192048e4ddd43572fd26d2ff0984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:de:4f:54:bf:6e:ba:88:85:22:64:b8:8e:
70:95:43:de:8b:be:89:58:96:47:7e:3b:57:bb:15:
12:2c:55:4a:ef:26:61:dd:57:2b:37:53:7a:93:a5:
f9:85:37:f1:b1:b1:2a:c6:4e:eb:60:c5:7b:0a:47:
a5:da:05:43:0c:7e:26:99:f4:2c:7c:c4:5f:f0:03:
a9:6f:64:78:40:13:c9:f7:85:07:8b:03:69:95:92:
ea:26:4b:be:79:b6:22:e8:c4:b4:aa:8e:11:ba:2b:
cd:84:99:9b:62:94:10:06:e4:b7:b1:1c:cb:3f:a9:
b4:66:64:71:0b:bd:65:2e:74:e9:fc:34:3f:f7:4f:
b6:63:6d:ab:37:7a:d8:76:b4:4a:d7:11:7e:d6:0e:
1e:41:4a:7c:3c:c9:b0:17:02:cd:dc:51:8d:bc:1f:
ee:03:55:7a:99:1e:92:6d:17:76:7f:d5:b9:d5:4b:
f7:fb:ca:6e:16:1a:60:cd:13:61:04:9e:91:b0:5f:
43:f4:24:2d:c4:0f:47:70:1e:ac:14:fa:8c:94:95:
88:47:7b:c8:1f:8a:78:85:c9:39:72:0b:e3:2f:48:
d7:4e:7d:c0:b1:50:e9:83:c3:b1:46:e2:74:84:d2:
37:67:9a:f2:bf:58:47:62:c9:3a:8b:ed:f4:96:5f:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CB:29:07:B6:C6:19:20:48:E4:DD:D4:35:72:FD:26:D2:FF:09:84
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:08:36:53:2a:76:5f:77:0e:36:1c:00:ba:14:ae:b2:4e:f6:
6a:08:64:65:e5:ff:e4:31:12:fc:59:c3:80:d5:fd:24:e8:d7:
79:a1:82:b2:27:7d:20:fc:4b:2c:18:c3:fe:8d:89:65:b0:59:
ba:d7:e0:83:db:fc:7b:9f:02:32:bd:b0:19:b6:2f:9a:aa:9a:
10:a2:82:09:5d:22:fd:aa:2f:68:bd:55:11:53:13:19:72:e1:
14:ce:d3:2b:23:03:0b:5d:c0:93:e2:cb:b5:78:71:3f:84:b6:
af:60:c6:eb:55:8e:01:23:97:72:b8:dd:56:a3:cd:9d:82:74:
24:b7:c5:40:53:ec:d7:8e:5f:04:59:67:a8:b9:3a:6b:5a:1e:
cc:38:08:2b:d1:8b:3b:47:ea:4a:9f:f0:d2:63:60:8f:14:59:
cc:04:5c:cc:7d:65:fd:1a:ce:50:f8:b0:4d:05:eb:96:93:b6:
a1:c9:ab:41:9e:91:ca:76:c3:74:da:d4:d2:38:4c:43:49:aa:
94:fc:35:eb:a9:61:60:5a:f6:6c:28:c0:7e:65:3a:87:d3:a7:
f6:4d:44:b9:52:a0:0b:aa:85:48:36:37:d4:c4:e9:27:de:22:
2c:df:ea:06:67:57:ff:60:fe:16:87:94:73:53:fc:99:dd:5f:
10:44:2d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:00 2025 by rpki-client