Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: tAn3/kuAqLjoShjqj4HvvAmnbvqWdJoG/OgBzBMFnms=
Subject key identifier: 5E:D1:4A:9E:24:6E:96:71:3C:F8:B6:B7:01:4E:23:0F:D8:E0:E8:A0
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 019896A5E64359B32D4E2499F54ED732087E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 1069
Signing time: Mon 11 Aug 2025 01:01:51 +0000
Manifest this update: Mon 11 Aug 2025 01:01:51 +0000
Manifest next update: Tue 12 Aug 2025 01:01:51 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: 8LN/tIvB3h+Rc8lV61/pdmReRMjiJ8WxCdnmS8cmI4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:e6:43:59:b3:2d:4e:24:99:f5:4e:d7:32:08:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Aug 11 01:01:51 2025 GMT
Not After : Aug 12 01:01:51 2025 GMT
Subject: CN=5ed14a9e246e96713cf8b6b7014e230fd8e0e8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:c8:c5:f8:a1:e2:a6:a9:49:b9:3f:14:91:
08:1d:21:48:ca:18:95:c9:96:86:94:a4:9e:9e:eb:
a5:27:85:d3:8b:28:db:23:b3:2e:5a:a6:e3:90:b4:
ca:bf:18:30:49:8b:f6:49:60:a9:f4:13:cf:bd:6e:
41:44:8b:79:0d:6e:8a:c1:27:f0:33:f3:62:8b:54:
b9:e9:47:a2:20:65:c8:c1:57:e1:8f:d3:0b:05:d5:
fc:c2:4c:7e:39:97:15:29:ca:0f:cc:4f:06:e5:6b:
f2:4d:59:21:23:90:7c:c2:c8:86:bf:ba:f1:a3:d1:
a5:99:c6:21:8a:ca:e2:7e:86:bc:24:b1:25:11:3e:
78:4b:68:a7:47:f8:7b:86:ac:75:54:74:25:a7:1f:
87:c4:2d:4a:34:89:21:c0:25:89:94:75:76:41:64:
24:96:ea:1c:90:1b:2d:b9:cb:1d:96:c8:19:5d:90:
ee:d0:95:73:da:c9:b9:8b:6a:6e:5c:db:d4:d1:f4:
60:e1:8b:f5:72:59:e6:ec:2a:fd:07:af:3e:3a:17:
99:49:d3:35:52:9e:68:17:30:4e:9f:fb:b6:54:10:
fd:1f:d0:4a:89:4d:60:02:38:6e:fc:2d:2f:3c:ff:
ec:57:1f:46:9b:ab:a4:5c:69:9b:0e:21:dc:3c:43:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:4A:9E:24:6E:96:71:3C:F8:B6:B7:01:4E:23:0F:D8:E0:E8:A0
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9e:aa:4a:be:4d:4f:5b:39:6d:28:f6:bf:72:30:6b:25:73:
52:bf:14:6b:f8:18:2e:ec:f8:0f:ac:af:6c:1d:cd:d3:ee:e4:
5f:85:70:3e:bb:c1:41:8e:1c:cf:ba:ce:35:da:73:80:d9:3a:
d3:06:60:21:e0:b9:8f:ba:3f:82:a7:06:9b:01:11:57:74:43:
2b:c6:16:13:f3:fb:84:8e:21:ad:e0:44:aa:34:40:9c:34:27:
04:f5:63:7f:14:27:6b:7b:f7:36:83:f7:e2:17:1d:61:9d:01:
a6:30:38:de:d9:a9:87:6a:1e:e1:4c:62:3a:fb:d0:bf:bb:00:
76:11:d3:51:f7:ca:6b:2a:3f:74:28:81:f0:79:38:08:4a:58:
15:80:b1:4e:81:63:a2:f6:e2:7e:f1:3f:5d:06:4d:f4:db:f9:
95:0a:0b:3c:86:c5:07:32:a2:be:fb:13:76:ea:d2:6f:da:f0:
b7:3b:16:b5:b4:8c:eb:ca:16:04:70:48:67:4e:90:c2:f6:ca:
7a:bc:4b:92:68:d9:8c:a3:53:1c:57:d8:94:17:b0:cd:ab:4d:
f8:ec:22:dc:2f:62:d1:c6:1a:93:77:ea:40:c9:ce:05:ff:d7:
1b:70:5b:d0:67:e2:1b:b0:d5:67:f1:82:e4:e7:75:03:30:0f:
af:43:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:13:20 2025 by rpki-client