Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: kXgHoaHupF3E+K4oxpZBu/+uckBGybmEnkg8A7sQCYY=
Subject key identifier: B2:85:07:05:DA:D8:D8:F1:D0:0A:5E:8E:69:9B:35:27:09:31:5A:71
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 019846D289B5DBE7A489D805DBA96F0EABDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 10A3
Signing time: Sat 26 Jul 2025 13:00:59 +0000
Manifest this update: Sat 26 Jul 2025 13:00:59 +0000
Manifest next update: Sun 27 Jul 2025 13:00:59 +0000
Files and hashes: 1: TUukLx44kjF0H_lfWyE2v7MimXs.roa (hash: hh6d1KEKUecIQgdhGgz8Bqi6uh15mWOy43tdVfLxrHg=)
2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: +5fMGuYbj5b+9/WajTt0LcavQsz+AMQclANaCYNUimQ=)
3: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:89:b5:db:e7:a4:89:d8:05:db:a9:6f:0e:ab:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Jul 26 13:00:59 2025 GMT
Not After : Jul 27 13:00:59 2025 GMT
Subject: CN=b2850705dad8d8f1d00a5e8e699b352709315a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:06:72:6b:99:92:f4:79:18:b0:bf:f2:11:
da:52:e4:d1:fa:57:2b:0d:03:9a:ff:a5:48:f3:43:
ca:b6:92:59:12:a1:1b:30:b0:f5:44:28:b0:a0:1e:
a6:0f:de:18:08:7c:64:7d:5b:d3:94:5e:7c:1d:ec:
3e:02:22:d7:26:60:2c:ee:d5:34:5c:8c:41:44:61:
e9:7e:b3:84:6a:fd:f1:9f:8a:d0:2d:86:39:b4:1f:
b2:cc:b5:9b:8d:55:60:d9:e9:fa:f0:4b:58:75:02:
7a:56:4a:d6:f3:48:59:2d:9a:50:c2:67:66:61:61:
2d:07:00:ed:aa:b2:82:59:5f:f2:02:c2:68:46:c9:
0d:55:40:75:bf:6b:48:e1:cd:d5:08:1c:b8:20:de:
7a:1d:52:a6:98:ec:6e:5c:5f:75:7f:96:1d:9c:24:
0a:6f:b3:a6:38:55:cb:ba:8e:4c:d4:60:10:6a:78:
d5:e0:dd:38:a3:fa:6e:96:f3:9f:f1:01:77:9f:b4:
2a:7f:e7:3a:02:25:ba:69:ae:06:26:e4:88:5b:12:
33:b1:17:83:c9:ea:49:4a:6f:27:75:43:99:eb:04:
72:56:8a:7d:1a:15:4a:1b:0b:90:f5:8a:c0:63:0f:
46:b0:c5:72:6c:0d:b6:2e:52:2d:c9:7d:c1:20:ed:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:85:07:05:DA:D8:D8:F1:D0:0A:5E:8E:69:9B:35:27:09:31:5A:71
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0e:31:4d:1b:13:14:39:76:39:c7:d9:99:e9:03:33:4b:08:
05:3d:df:59:76:b2:de:63:83:ca:64:d5:ea:72:9e:12:be:32:
95:80:2a:fd:44:2b:10:09:61:53:d9:75:84:28:2a:f3:ca:5c:
f5:31:35:6d:d5:de:65:4f:f2:58:ce:ed:ab:1d:ee:9e:b0:41:
0f:7e:61:1f:81:90:c8:e9:b4:ce:ef:9b:ff:66:5b:ad:1e:de:
5c:4b:cb:15:bc:82:2d:26:6e:89:e9:c7:5f:a6:66:ac:84:d0:
6e:45:04:d9:ee:ef:54:bf:11:af:74:e9:4a:08:19:cd:ff:10:
c8:7b:33:cf:8c:f0:55:5e:58:61:f9:47:98:ec:bb:f1:75:7d:
39:09:67:2a:66:61:91:b4:c8:40:bc:5e:f6:b5:5f:70:92:2a:
97:1a:5d:9e:1c:a4:d1:ac:5d:b9:56:e6:36:d5:2b:e9:6d:4c:
24:c0:8e:3c:83:7b:39:66:80:78:ab:19:19:29:5d:ec:ce:9a:
0d:c1:5a:ce:78:7e:13:01:57:20:38:0c:a2:6f:df:6a:d6:a0:
8b:93:2c:a3:65:cd:9c:16:71:00:e0:e9:8a:6e:f7:b5:ba:77:
59:54:ae:9e:21:48:dd:59:ae:b5:70:5b:81:67:7e:52:47:81:
33:4a:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:52:02 2025 by rpki-client