Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
File: ygBGolNBzREDtgzOC5nqN1S6XEE.mft (raw, json)
Hash identifier: f1yHfDZOQMuVgWL736AsfBW5uYBPMyZuwonEzbUjVG0=
Subject key identifier: FF:F6:3A:45:28:67:20:B0:02:5C:94:3F:BC:56:D0:7E:33:04:D5:17
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Certificate issuer: /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial: 01993537AE2FA509F8045C3BE002CDBEEF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
Manifest number: 0374
Signing time: Wed 10 Sep 2025 20:01:05 +0000
Manifest this update: Wed 10 Sep 2025 20:01:05 +0000
Manifest next update: Thu 11 Sep 2025 20:01:05 +0000
Files and hashes: 1: YKvMMcRqLG8F9RKMTccvi7ZwGaQ.roa (hash: vyK0AzONbiCe5g5hUQ+qpo+ABY7iaBzdOKFUE4y2Cqc=)
2: ygBGolNBzREDtgzOC5nqN1S6XEE.crl (hash: o02PrUdIRewyaoKhfOHEQoqWDMKRalQB5WMRDv4MAY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:ae:2f:a5:09:f8:04:5c:3b:e0:02:cd:be:ef:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Validity
Not Before: Sep 10 20:01:05 2025 GMT
Not After : Sep 11 20:01:05 2025 GMT
Subject: CN=fff63a45286720b0025c943fbc56d07e3304d517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:f8:52:7a:7b:61:73:78:be:c6:cd:60:a1:
47:a4:06:9d:1a:99:da:16:e4:03:79:8f:3a:cd:6b:
e8:4c:61:5b:77:03:ab:c7:b0:e4:8a:b9:a8:01:da:
22:21:df:c7:f6:38:a3:06:68:5b:90:07:0b:c8:cc:
dc:b0:ed:0a:98:b0:e6:ef:a5:ff:3f:b0:e0:ad:7f:
c2:55:97:3b:51:96:ac:fb:f4:21:dc:da:57:2d:cc:
59:c8:1b:c2:ae:f1:89:4c:d4:b9:46:92:03:b6:7d:
6e:30:10:21:a9:8d:d0:98:dd:4f:d8:8b:5f:6e:48:
da:83:a2:d2:e1:d0:70:da:c8:b5:70:52:7d:04:8f:
87:5b:27:4f:95:77:a0:23:dd:f8:df:78:40:89:84:
56:51:62:3d:91:08:72:5c:1e:92:dc:ed:d5:26:e3:
7c:1b:d7:4a:e7:6c:70:3c:21:b7:2b:28:5e:2f:7e:
9d:2c:c5:4b:a3:c8:31:10:bb:8a:7e:26:8d:44:27:
d9:00:b9:24:06:08:53:b1:39:c7:41:cd:cc:49:cd:
88:fb:e5:39:bc:bb:d6:37:ad:0a:60:b8:6d:81:ed:
99:61:f8:3d:66:2c:fb:55:14:2b:62:f0:f3:50:1b:
2a:b6:97:99:dc:5a:14:43:3b:99:8d:83:2c:c8:e9:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:3A:45:28:67:20:B0:02:5C:94:3F:BC:56:D0:7E:33:04:D5:17
X509v3 Authority Key Identifier:
keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6c:77:ef:38:9c:68:13:59:a8:5d:0e:b8:81:a4:3b:26:5c:
1b:25:57:0d:e8:2a:8b:75:13:b5:4c:0c:b8:7a:0a:0b:d4:3d:
11:71:78:65:42:e9:bd:7f:44:85:4b:b8:51:de:22:cf:bf:e2:
0e:3c:1f:e2:50:53:0b:f5:fa:31:28:e8:d9:40:4a:9f:a8:92:
7a:2d:8c:46:18:f6:92:d4:3f:7c:c9:79:33:69:cd:17:57:94:
3b:cb:ef:d9:88:08:34:13:09:27:b0:82:76:40:42:c0:dd:fe:
4b:19:ca:b2:d1:47:40:77:a3:24:cb:57:83:21:bb:10:92:8e:
e3:fa:72:35:0f:24:45:36:fa:50:12:5d:74:42:64:4a:da:67:
74:1a:1f:d0:96:23:65:75:90:d0:3f:9f:6c:da:7b:20:61:26:
60:6a:f0:c3:20:07:73:db:53:85:c9:92:90:20:5a:07:60:3a:
8e:11:14:f0:e8:c0:c5:0d:e6:e9:04:69:06:d9:51:7b:12:b7:
96:4b:c4:bf:0e:84:a2:94:e1:30:42:d9:71:7d:56:65:e9:14:
d0:0e:d7:31:90:53:6e:f6:c8:4c:74:ea:c8:8f:a5:d2:1a:7f:
24:7b:82:9a:84:a2:85:31:69:3e:4f:dc:be:80:e8:c0:86:8c:
2e:04:06:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:39:50 2025 by rpki-client