Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: gh3XuocEI6iZUgapy1UDHfVMY0ulUivKZP/2yDqgcO8=
Subject key identifier: C6:E7:DA:08:2D:F5:63:2F:E8:24:B1:26:D3:25:BE:71:90:FC:14:C8
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 01984AAF1975B17A4ECF78772FF308AB349D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 07:00:45 +0000
Manifest this update: Sun 27 Jul 2025 07:00:45 +0000
Manifest next update: Mon 28 Jul 2025 07:00:45 +0000
Files and hashes: 1: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (hash: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: eynrPAcD78QpFm75g3prxu084avRyDyGC5279tHy5d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:19:75:b1:7a:4e:cf:78:77:2f:f3:08:ab:34:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Jul 27 07:00:45 2025 GMT
Not After : Jul 28 07:00:45 2025 GMT
Subject: CN=c6e7da082df5632fe824b126d325be7190fc14c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:e9:03:e7:95:76:17:ca:8e:76:47:b1:d9:
c9:0c:ce:4b:6f:a0:0d:74:97:08:18:99:7f:f1:2e:
ff:df:36:94:ce:43:6a:58:de:11:9e:6e:fa:af:20:
9f:3a:b4:42:fd:f3:70:69:09:db:7e:d8:c2:81:88:
54:43:fa:b3:95:92:c5:48:b1:b6:4f:07:4c:1f:75:
91:de:40:41:46:a6:8e:30:d1:6d:fb:52:53:8d:ce:
bb:60:64:a4:ef:12:dd:25:f3:e7:1a:61:31:28:89:
79:ce:65:fe:89:53:c0:17:54:6f:59:bb:19:30:c1:
91:75:41:47:8f:da:3a:42:7e:a4:c3:a5:c8:73:7a:
6a:87:a9:5f:6b:37:17:84:c9:ac:43:fe:86:aa:96:
c2:0b:14:b9:3d:86:4b:71:6b:5f:47:19:dc:b3:68:
e6:8c:6b:67:a0:4b:08:e1:6f:6e:ee:5d:0e:d9:9f:
61:47:a4:ef:d4:4c:f0:2b:cb:f1:3b:af:aa:09:b1:
25:bf:0b:63:26:2f:22:a9:2f:eb:23:75:a2:9b:48:
56:f0:73:df:14:2a:d2:37:e5:da:e5:16:7d:a8:d8:
10:40:4a:01:c4:f8:6b:b4:ca:6c:c2:66:95:4f:96:
0b:43:c2:73:b3:ea:3c:12:ae:85:83:7a:9a:61:1f:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E7:DA:08:2D:F5:63:2F:E8:24:B1:26:D3:25:BE:71:90:FC:14:C8
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:71:09:8f:ef:8f:1a:d5:7f:67:8c:c9:a7:56:54:fb:56:17:
43:93:ad:9e:f3:ac:e8:4a:cc:3b:c2:30:52:8a:62:58:f9:c2:
08:8c:33:a3:7b:f3:c1:e3:ad:a2:ab:6f:69:a5:ed:75:ac:16:
95:f3:49:a5:2a:ea:7e:df:94:d4:ea:91:07:2b:b2:7a:fc:be:
49:dd:65:4f:27:f3:1a:8f:3f:1f:8c:76:f6:ed:f3:26:36:26:
e6:a8:93:b4:cb:1f:3a:ac:04:0e:04:52:4d:89:7d:35:a7:71:
66:62:ce:f7:8a:13:bf:da:fc:5e:17:32:84:0b:0e:50:be:b6:
40:f0:25:c3:5b:1a:75:2f:87:30:7a:4e:bd:2d:27:bf:54:f6:
1e:5c:66:52:de:bc:66:58:42:04:b7:b2:ab:17:45:ff:76:07:
ef:1d:aa:b3:2a:3c:13:13:22:5a:fa:4e:54:01:31:6d:a8:75:
ad:0d:f2:cc:0f:1e:9d:83:59:e4:0c:81:cc:69:48:ca:36:48:
49:dc:3c:b0:26:d2:dd:9b:f5:7b:1f:78:34:ef:59:72:29:ef:
0b:52:17:75:cc:9b:32:5f:f3:5b:3d:a9:fe:3f:08:61:b3:35:
8d:d1:17:8f:fc:57:f4:f1:36:09:e7:4c:9a:3d:68:f1:8d:91:
3f:57:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:07 2025 by rpki-client