Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: 4UUFkJW1zYuFBrIrb5TAzom5crWLMqeOtYhzSxAv56o=
Subject key identifier: CE:F0:4C:4A:53:92:2F:F3:B5:82:7C:CD:A6:9F:01:E9:01:14:D1:85
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 019921E73AB1C83AD07C86AF9BDC7BBD0535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 032F
Signing time: Sun 07 Sep 2025 02:00:25 +0000
Manifest this update: Sun 07 Sep 2025 02:00:25 +0000
Manifest next update: Mon 08 Sep 2025 02:00:25 +0000
Files and hashes: 1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: Wex3b4AzMhOV5RopP1UklHqVHpU7ftCyVORfkM0zBIk=)
2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:3a:b1:c8:3a:d0:7c:86:af:9b:dc:7b:bd:05:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Sep 7 02:00:25 2025 GMT
Not After : Sep 8 02:00:25 2025 GMT
Subject: CN=cef04c4a53922ff3b5827ccda69f01e90114d185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:ff:69:57:f1:1a:16:b0:57:f6:58:6b:50:
bd:32:6e:33:c4:fc:f8:e7:9c:3e:81:18:9a:49:ca:
ec:d4:8f:2e:68:85:c2:1f:e7:dd:65:da:ab:06:5e:
d4:31:24:e6:8b:fc:88:89:9f:24:b5:da:7f:0b:ce:
89:57:73:8d:19:c9:67:d3:c7:31:c3:95:f3:d3:f7:
a2:f9:0e:23:d0:51:66:9e:64:c1:76:5a:15:25:50:
16:dd:c1:26:10:dc:0c:d5:2f:14:39:17:75:fa:44:
a4:12:d1:aa:76:4b:b7:8c:e3:43:81:d5:98:15:67:
c3:28:1b:cf:87:1b:0b:f0:2f:ee:37:6c:ea:a9:75:
aa:14:d3:0f:5b:b8:3f:8e:8d:75:52:f9:5c:66:65:
37:b0:e9:a4:80:92:15:09:35:bb:56:98:47:b8:cd:
e4:6c:78:2b:7c:47:6e:21:3d:1a:5c:0e:9c:88:3a:
2d:cc:c5:f5:73:73:3d:90:20:41:b0:76:e6:7e:8b:
7e:fb:9e:1b:00:36:f9:16:52:5e:f7:09:a0:b1:b8:
92:a5:42:45:49:32:05:b0:09:96:b5:a9:f3:6d:34:
f5:cc:db:c6:ed:43:fb:79:6a:f6:26:20:91:8c:21:
6b:21:e2:8e:79:a6:5e:5b:29:83:f9:82:a8:e8:71:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:4C:4A:53:92:2F:F3:B5:82:7C:CD:A6:9F:01:E9:01:14:D1:85
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:93:7d:99:ad:54:7b:2e:49:87:49:b4:17:7d:dc:08:01:04:
31:6a:d6:12:f8:9d:7c:5d:99:af:12:51:b5:4a:27:4c:46:be:
8d:35:cb:f7:d9:29:1a:78:7c:af:6c:d3:18:f1:91:bf:10:14:
63:95:78:4c:46:fc:1e:80:15:c7:31:59:cd:ea:e7:54:35:66:
bb:04:40:93:61:28:ca:8d:e0:64:28:16:57:10:d0:d3:a6:9a:
8c:70:30:1a:b4:15:5e:e0:bd:10:bf:77:b5:e4:9b:b3:9f:a5:
cd:a8:e1:59:a2:03:df:f0:c5:39:2b:cb:a2:62:73:a8:fb:ac:
0e:17:75:56:b5:c7:e3:fb:03:62:7c:0a:55:ab:7e:41:69:5c:
2b:be:b6:32:c2:c1:dd:bb:5d:5d:46:08:c3:86:78:1f:f7:82:
f6:ba:8a:de:5d:2e:a1:6e:8f:98:62:47:31:60:bb:62:3c:8d:
2a:f6:52:94:05:36:8c:a0:18:b2:47:76:d1:23:0e:5b:51:f0:
4b:48:9a:ca:37:b8:86:bc:59:2c:15:32:65:fd:f7:dc:17:f6:
d7:4c:c9:39:a3:eb:66:81:96:05:ab:f1:9c:ac:76:cd:94:92:
b0:d4:13:76:d8:41:e9:f7:fc:ae:cf:2f:7a:ff:83:2a:1a:01:
44:71:87:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:00 2025 by rpki-client