Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: Pt6Flv0HY42IwVSS6MaVQZ5QptZAMxaaFwpi1KR5E9Y=
Subject key identifier: CB:E6:97:D3:28:79:C1:03:30:C1:D5:B7:81:71:47:3E:84:67:45:B3
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 01991DD443FB089C598CE5EB383702DF95E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 0580
Signing time: Sat 06 Sep 2025 07:01:14 +0000
Manifest this update: Sat 06 Sep 2025 07:01:14 +0000
Manifest next update: Sun 07 Sep 2025 07:01:14 +0000
Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=)
2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: mXqnjz8wtV856SSY1iEn5eQ9mTGACGeKTN+AB69caE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d4:43:fb:08:9c:59:8c:e5:eb:38:37:02:df:95:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Sep 6 07:01:14 2025 GMT
Not After : Sep 7 07:01:14 2025 GMT
Subject: CN=cbe697d32879c10330c1d5b78171473e846745b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:d2:e0:28:88:1c:35:b4:8f:6b:46:fb:d4:
1f:1f:90:f4:72:85:4f:55:94:6d:08:80:1b:96:c5:
fd:f1:71:25:1a:2a:21:e5:af:3f:4e:5e:98:89:9b:
28:23:c3:64:c3:e0:89:da:bb:2b:d8:7d:1f:e5:3a:
33:f8:02:55:f0:58:1d:38:f9:7d:47:2d:ed:d2:e6:
e5:4a:c8:51:e7:44:8b:23:13:17:7e:2c:fa:99:f3:
30:a9:46:77:ac:25:c0:1d:42:e7:cf:92:2b:94:62:
83:cc:56:50:d2:fb:ed:07:23:99:08:4d:92:de:50:
0f:ab:57:7f:50:56:a3:8f:e8:88:2c:8e:75:e6:c5:
e0:e9:ae:a3:49:f0:ce:2a:f7:00:b1:f1:2b:09:5d:
4c:1a:9d:5c:95:16:a3:98:77:8c:92:f1:f9:b1:68:
d3:81:39:a3:81:a0:3b:6c:82:a0:32:59:57:85:ca:
a1:59:3c:f5:c9:fc:7e:c8:6f:f7:99:ae:b9:3e:f1:
32:ca:18:cb:6a:ab:5e:9d:25:78:0a:fb:bd:71:4d:
4f:c4:95:84:f5:fe:d7:b1:78:c2:75:88:b0:05:b7:
d4:54:b7:2d:6a:8e:72:50:50:ca:3a:90:16:51:6c:
01:df:3f:4e:2d:d2:e1:39:15:13:77:b9:68:df:1f:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E6:97:D3:28:79:C1:03:30:C1:D5:B7:81:71:47:3E:84:67:45:B3
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b5:03:24:36:76:9e:e0:f2:12:af:26:e6:f9:cb:6a:37:06:
81:30:60:53:f9:c1:7c:51:01:83:89:f1:b5:cc:d3:5b:4b:b2:
c5:4f:42:cd:bf:ed:3d:e0:d6:bd:5a:2b:c8:a3:50:c5:b2:c4:
36:4c:90:3a:a9:bc:9c:74:5c:62:18:75:4c:97:f8:be:b0:c7:
fb:26:91:b4:62:70:fd:7a:da:f9:64:35:86:f8:1a:e8:19:22:
83:75:b3:bd:49:c3:ca:96:01:64:47:b1:34:82:9e:c0:fc:34:
c6:8e:cb:6e:bd:a8:bc:82:3e:35:33:88:2c:bd:5c:d3:f8:42:
96:a5:ec:d4:5e:7f:ce:9f:c8:39:32:96:b4:cf:e9:4d:a0:4d:
6f:7f:a5:85:db:f7:34:26:88:d1:63:79:66:3d:de:87:92:5d:
52:ce:65:52:2b:5a:a6:51:5e:06:9d:34:5d:53:7e:59:48:ec:
36:3d:31:2c:4d:a5:11:07:59:1d:da:a3:af:7b:20:da:de:2a:
7b:ca:75:61:66:74:7a:9a:47:9c:93:4a:0e:15:8f:d9:06:2a:
79:5e:91:73:bf:30:16:f3:06:cb:36:b5:12:fc:40:f9:8a:87:
41:f5:85:7a:f7:47:e9:81:71:03:0d:0d:68:06:5d:83:d5:3c:
3f:df:0a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:29:01 2025 by rpki-client