Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: y4RoZYcSPLRBLujP1NSSF8OmQxGhnqSBVyqG6roAbyM=
Subject key identifier: 9F:C5:C5:9F:84:37:B7:71:12:51:80:B2:04:50:CE:7B:9C:BD:BB:D7
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 01984AE5954307CAC9A8E4911AC6D8155637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 11AF
Signing time: Sun 27 Jul 2025 08:00:16 +0000
Manifest this update: Sun 27 Jul 2025 08:00:16 +0000
Manifest next update: Mon 28 Jul 2025 08:00:16 +0000
Files and hashes: 1: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: zl6KqEoYmv9Z3cIF4EGRJleGlLDJqjB+Qe5zsDFKDYo=)
2: shQWrGUmL_hnxXrykLqgxjUrJSo.roa (hash: WyhgYBiNi+KPH14FenrkvjOQfAHnL6lB02jl9DUrbbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:95:43:07:ca:c9:a8:e4:91:1a:c6:d8:15:56:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Jul 27 08:00:16 2025 GMT
Not After : Jul 28 08:00:16 2025 GMT
Subject: CN=9fc5c59f8437b771125180b20450ce7b9cbdbbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:35:25:9b:73:a8:43:5f:21:1b:de:1a:98:
5d:b0:f6:f6:ec:90:47:ad:9a:de:4d:84:7b:a1:34:
97:03:3e:14:0f:19:b0:dc:c4:9b:13:9e:c9:a6:50:
9a:77:99:f7:26:96:b3:1d:45:19:98:2e:0c:1d:5f:
70:a9:84:39:34:24:8a:85:c8:20:44:84:c3:71:0d:
a4:90:a2:13:65:7c:68:03:33:d8:c5:d0:cb:31:77:
14:be:8f:78:42:9a:d2:59:23:0a:35:e4:74:d0:db:
0b:4f:f9:9b:7d:f4:62:81:09:41:dc:4f:3d:ee:72:
df:af:27:d1:84:03:14:0b:60:2d:9a:af:2c:31:7e:
2c:4c:4b:63:c8:df:2b:7a:96:63:07:3f:42:b2:06:
e5:57:fc:d1:95:2f:d7:78:38:90:af:ce:5d:b8:de:
eb:70:57:3c:27:10:cf:de:4f:58:6e:61:1e:18:0c:
83:de:9c:84:b7:5e:1b:17:6a:08:7a:a0:7d:2c:28:
b1:dc:77:52:ed:0d:05:e4:15:a6:81:69:5f:22:ed:
de:64:d0:b4:bd:46:c9:4f:7d:b0:c6:e2:76:26:d0:
62:1f:cb:c4:5c:be:be:d9:37:10:87:cc:fc:1a:02:
3a:b3:f7:9c:66:fe:63:79:dc:64:4b:9d:2f:4d:0a:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C5:C5:9F:84:37:B7:71:12:51:80:B2:04:50:CE:7B:9C:BD:BB:D7
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c9:cf:b4:84:78:d2:ec:4a:4e:27:25:35:48:c9:b8:3f:cf:
d2:bb:b3:f5:e9:f1:c1:00:9c:61:6d:e9:09:30:15:da:1c:bf:
7c:3e:0c:ea:1e:35:ae:e3:33:6a:65:15:10:b0:58:c2:89:18:
cb:c7:1d:2f:e9:6c:a1:ce:f9:db:00:89:d5:96:84:ed:2a:b0:
c3:d8:43:7d:40:97:c8:0b:22:51:0b:07:32:71:e9:21:af:3a:
7d:ae:e7:e1:fe:96:b8:67:33:e0:72:96:d0:e1:86:5e:bf:ca:
72:05:cf:69:57:0c:8e:25:18:0a:8c:2e:06:6f:55:e8:2b:93:
34:3d:ee:07:3d:34:20:e4:24:76:6a:91:92:e3:cf:f4:a0:a2:
c0:c8:dd:7d:76:4b:06:6e:1c:9b:6d:97:0a:8a:25:3a:54:f5:
ef:68:7d:fa:dd:5b:91:3a:44:8d:d7:cd:b1:96:18:82:97:af:
1c:24:4e:d7:a9:f0:12:ad:09:77:c7:72:cf:4f:6f:fa:c8:82:
4b:ab:11:24:c6:71:ff:5f:29:45:d7:4e:42:05:93:12:31:fa:
54:b3:3f:3e:44:3b:8e:1a:20:91:37:5b:75:0a:ee:e6:0e:98:
69:ac:39:a0:42:fb:97:d3:5c:fa:2c:54:e0:62:d2:2f:d6:38:
77:54:5e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:37 2025 by rpki-client