Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: VsUMYG7gA8n7j7DNQYfytN+Xj3b1vcKnK9E86ULoF6k=
Subject key identifier: 38:FF:C2:FE:7B:70:4A:39:F1:58:14:9B:9A:E4:6F:5C:08:E4:96:2D
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 01984A40CCC706FC083783886B32DB841698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 0680
Signing time: Sun 27 Jul 2025 05:00:17 +0000
Manifest this update: Sun 27 Jul 2025 05:00:17 +0000
Manifest next update: Mon 28 Jul 2025 05:00:17 +0000
Files and hashes: 1: QPglHGOSHFrs1mgAtq2zwd82Smc.roa (hash: y5xHnZXArsaVabnfSwbndMTBY0pIDvTGUm5JTD4ZakI=)
2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: x6+1FOjfhwq3IrPvq0c/AEEaveBRw3xsPcQiIdqAIKc=)
3: eTJhKe-LETepmtUCJc23KDC15Os.roa (hash: bWxC4iCttKGE5WGBMq9/txv6VyYSnQgWWwgULLvAoD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:cc:c7:06:fc:08:37:83:88:6b:32:db:84:16:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Jul 27 05:00:17 2025 GMT
Not After : Jul 28 05:00:17 2025 GMT
Subject: CN=38ffc2fe7b704a39f158149b9ae46f5c08e4962d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:d2:8a:22:45:af:34:fb:29:19:73:79:0b:
34:6f:d2:25:3c:6c:f5:52:b3:66:d7:05:6f:13:06:
7e:e2:35:4a:35:8e:c7:a7:67:c2:d1:13:9d:b2:fe:
a2:fb:06:99:97:8c:47:de:71:1e:8b:7b:89:7c:25:
e3:75:59:30:cf:7c:d5:d8:31:e6:46:07:e3:36:91:
3e:4d:27:c2:48:22:f1:4d:8a:09:ce:8e:f7:2e:14:
04:0e:fc:bd:02:5f:77:bb:af:06:ec:d5:e8:a1:cd:
c8:fb:62:45:eb:f5:aa:9c:7c:8e:bc:a1:03:f8:26:
ad:9f:4a:13:e3:a1:de:db:1c:01:c1:0f:78:a5:3c:
97:f3:ea:2b:cc:4a:a6:76:66:ec:7a:aa:24:c0:68:
24:db:ae:83:52:f4:8b:89:a3:77:e4:e9:fd:50:7b:
95:36:a1:00:ea:e4:29:ee:3c:55:4a:d2:9d:bf:45:
01:f6:95:4e:ff:97:1b:91:f8:f4:99:20:bd:32:85:
c5:9c:f1:3c:12:fc:0f:ff:57:63:b3:63:3f:f5:2e:
e0:a1:15:9b:48:a7:9d:b1:f9:98:53:e2:91:8e:2c:
7f:86:21:85:37:0b:95:32:eb:ec:07:dd:3e:eb:df:
bb:bb:7b:42:19:a5:05:7c:85:a4:75:77:4b:a4:c9:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FF:C2:FE:7B:70:4A:39:F1:58:14:9B:9A:E4:6F:5C:08:E4:96:2D
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:74:3a:62:be:bc:33:9a:18:67:38:fb:58:1c:1f:d9:8c:c3:
4d:dd:93:06:b8:8c:35:33:9d:30:2e:69:a0:71:26:37:69:ff:
14:da:18:53:e7:75:8b:5f:64:b0:40:de:95:ce:cd:81:23:30:
2e:70:ed:07:e5:21:02:48:9e:4b:e6:ae:1f:d9:3d:18:b9:a0:
f5:cb:da:f5:5b:8d:55:b5:ab:18:38:df:38:02:39:43:4f:fc:
52:84:16:3e:1f:76:b3:1f:02:d4:4f:ec:98:c2:2b:c1:2f:7c:
8a:6d:74:f0:44:fe:b4:a8:8e:4e:2f:fc:eb:15:17:57:15:49:
98:11:8c:47:9e:96:f5:55:cd:e4:b5:d6:ae:64:10:e4:73:7b:
91:18:92:81:f3:26:c1:44:50:aa:32:b9:18:f5:d1:81:3f:3a:
60:4d:46:a3:e9:67:28:75:ae:7a:86:d8:31:c9:87:73:b6:d9:
e2:44:4d:2c:c7:c5:87:96:ef:70:85:94:76:a6:84:5d:c0:ed:
06:08:cb:4d:b0:d6:f0:ca:0b:e3:2f:54:31:bb:0b:77:2a:3d:
ea:76:b7:1c:df:2d:a0:97:76:0b:62:2f:0e:2f:31:23:9b:06:
68:3b:34:9c:f0:74:2f:ff:ba:e3:62:c3:4a:d8:9e:50:e1:e4:
ec:ad:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:16:16 2025 by rpki-client