Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
File: ygBGolNBzREDtgzOC5nqN1S6XEE.mft (raw, json)
Hash identifier: iTYqs1UnpG+NwgHzuclvviFlYRWJ8VGiTBQwGEAcMew=
Subject key identifier: 58:9C:91:15:74:1C:9A:E3:E2:72:6C:AF:B4:AE:94:88:E6:F5:50:39
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Certificate issuer: /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial: 019A71EEF2C4247540CB8CF0B537FE8EEB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
Manifest number: 0418
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: YKvMMcRqLG8F9RKMTccvi7ZwGaQ.roa (hash: vyK0AzONbiCe5g5hUQ+qpo+ABY7iaBzdOKFUE4y2Cqc=)
2: ygBGolNBzREDtgzOC5nqN1S6XEE.crl (hash: DLSWlaKQsu4eIW0uQP9pKBAWVmR04fF2TBporMPNgeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f2:c4:24:75:40:cb:8c:f0:b5:37:fe:8e:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=589c9115741c9ae3e2726cafb4ae9488e6f55039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:34:b9:d6:a4:c3:f3:15:30:16:3d:ef:c5:
60:cc:e7:da:90:9d:37:35:66:54:c4:65:cf:c6:25:
35:e4:21:77:7f:0e:00:9c:00:8f:c6:f2:a4:57:51:
e4:46:37:31:ed:e1:43:aa:fa:ae:25:6e:e4:14:fa:
fa:c6:b8:3a:da:fc:86:9e:9f:91:0a:05:5d:cb:ed:
f6:14:aa:6d:21:a3:cf:3e:d4:14:2d:54:69:6b:ce:
1d:e4:e3:db:aa:1e:b4:66:62:e6:bd:bd:0e:95:e6:
f0:db:11:e7:02:99:bf:c2:86:ba:ec:3c:bf:11:fe:
55:3d:51:cc:be:5a:c1:d8:e9:db:4d:a5:97:5b:60:
8a:00:0c:a1:d3:5c:6a:17:eb:61:73:5d:0b:6f:cd:
27:b8:12:a5:77:d4:ee:b4:56:08:50:77:ff:2d:d1:
d4:8a:31:40:34:b8:20:a5:b8:75:aa:a3:0c:cf:cf:
f4:8b:73:9d:bb:90:43:d9:b2:b3:c8:a4:1b:65:a5:
a2:ad:40:27:c2:30:42:71:78:c2:a2:c1:74:ee:43:
06:e1:09:cd:21:2c:51:61:0d:9f:22:1d:1d:c1:78:
65:4d:d6:07:c4:fa:38:3e:1f:3f:9f:95:9d:a5:65:
4d:f8:c2:55:8d:c4:3a:e9:8f:6e:d7:b9:98:95:85:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:91:15:74:1C:9A:E3:E2:72:6C:AF:B4:AE:94:88:E6:F5:50:39
X509v3 Authority Key Identifier:
keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:38:85:ba:31:81:05:1b:a0:c1:ca:4c:7a:97:cc:63:3c:e8:
c4:6e:9d:9c:ad:3d:89:60:70:bf:50:1d:13:83:d9:9b:84:e8:
b6:fe:58:68:c3:5d:b5:30:5e:0f:6f:1c:db:9d:47:ed:d5:ab:
d1:6f:55:98:81:13:c6:53:41:bb:8a:2d:7f:f6:8e:d8:50:90:
11:47:54:b1:da:30:41:72:a5:f6:17:44:64:a3:5a:a6:e6:5c:
28:16:c3:13:5c:36:6b:1a:4d:47:fe:ce:43:83:d7:47:43:16:
bc:a2:b7:f3:44:5a:23:86:0d:94:39:28:f0:42:1b:54:b8:6f:
75:d4:82:e8:dd:ef:a2:2f:23:1d:8a:69:b1:d3:a6:93:91:45:
85:a5:7c:ae:c4:10:2b:46:d0:0b:a2:69:04:f5:b0:fe:e6:1c:
05:ed:3c:65:45:1c:04:bb:76:a2:61:1e:dc:10:b4:95:cd:9a:
ea:6b:f9:2f:36:8a:4e:0e:75:01:42:c2:a6:0e:c9:cc:49:db:
a8:dd:97:6d:ef:fc:da:06:14:62:55:66:c3:c3:89:ab:72:a2:
b4:b8:a7:0b:d1:35:34:77:ff:ac:b7:3d:5f:ee:f7:8a:7d:b9:
36:cf:4e:92:80:39:66:db:a8:34:e4:80:96:e7:65:d3:0e:29:
5a:a1:cf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:18 2025 by rpki-client