Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: X9JKMQDSMqNAZp1jbxJKPIwNzha/4Pc6WARjvZsnj9M=
Subject key identifier: BC:30:41:2F:1A:6A:17:62:24:67:A2:48:9D:DB:D1:B7:59:9D:42:12
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 0199228C502CEA90D6F5F72E9E23E5525EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:00:44 +0000
Manifest this update: Sun 07 Sep 2025 05:00:44 +0000
Manifest next update: Mon 08 Sep 2025 05:00:44 +0000
Files and hashes: 1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=)
2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: I/J0w8JpQgMYqY7t97+nBhhuY4W1J0UDehTNkrWPGOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:50:2c:ea:90:d6:f5:f7:2e:9e:23:e5:52:5e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Sep 7 05:00:44 2025 GMT
Not After : Sep 8 05:00:44 2025 GMT
Subject: CN=bc30412f1a6a17622467a2489ddbd1b7599d4212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:57:fb:e6:e4:f2:4e:10:91:2a:27:b9:17:
24:6e:b6:ca:a6:3b:11:46:49:3f:8f:12:f1:ab:3d:
28:85:fb:6c:1e:60:7e:40:cb:19:5f:c2:7e:be:3f:
b8:17:4f:f3:f5:43:db:5c:fe:f0:ba:72:47:03:c1:
fc:8b:a2:1a:36:10:f0:72:1e:ca:c9:19:02:51:f3:
0b:71:40:1b:e6:5d:9a:51:1c:02:ff:56:28:21:b8:
6f:d1:b9:ae:ec:4a:e0:f7:8b:60:bc:fa:9f:75:5d:
b4:a3:db:04:7e:44:5e:71:2f:7a:0e:d3:c0:a9:65:
a1:29:b3:68:cc:29:7a:ff:27:45:5d:8f:8c:15:3c:
50:23:27:c6:61:db:07:9e:74:5b:33:2b:8b:4d:f7:
84:dc:d7:90:e8:83:99:84:04:0e:76:ef:1b:0d:f6:
c8:17:c4:54:4b:3f:4f:57:bd:2f:2f:df:3b:d9:4b:
93:22:f5:00:ab:f7:a7:d3:3f:1f:05:19:49:b6:75:
8a:9c:f4:ef:aa:d5:cd:10:bf:e6:82:a4:26:6e:72:
4c:34:28:08:6f:f7:82:c2:66:68:24:49:1f:76:8f:
85:83:e3:20:2e:ad:2e:14:b6:ee:08:ef:7d:9a:08:
d3:fa:08:2f:11:50:69:65:28:21:39:32:17:f0:00:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:30:41:2F:1A:6A:17:62:24:67:A2:48:9D:DB:D1:B7:59:9D:42:12
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c7:80:d3:66:3a:4a:c5:70:be:5d:58:50:ab:6b:be:9b:e4:
83:06:7b:31:74:20:d7:4e:64:f1:9c:9e:ea:b0:b7:29:7e:db:
22:c9:9c:5c:ec:6a:0b:19:b9:3b:db:75:79:e8:d8:e8:0b:ad:
d1:8e:4a:98:d9:b5:4f:f7:ca:96:15:09:70:a7:af:3b:e6:dc:
c1:e0:c1:bd:52:e4:ef:94:e4:09:d8:8d:45:08:9f:52:95:4e:
db:e2:d3:f7:e9:be:60:ab:d7:7d:6c:e3:6e:3c:ba:38:fe:48:
d4:5f:e7:fd:ce:8a:e3:36:8e:dd:ce:b0:f5:a2:da:4d:6a:75:
7f:2d:9f:22:71:1b:90:5e:6f:64:e1:b8:9c:fe:57:57:6f:d9:
cf:d6:49:f8:df:6e:98:a8:5c:f4:82:11:d5:99:ca:f4:c2:8b:
5b:a7:c9:c3:dc:5b:98:55:a2:46:9b:56:03:96:9e:06:ba:16:
74:a8:70:8a:cb:bf:e7:d9:38:53:a7:67:a3:bf:77:4d:5e:f4:
a1:17:6c:74:93:fa:54:70:5a:36:08:4f:27:38:55:13:7f:97:
0f:0a:57:ef:c6:39:aa:6a:7f:40:c5:aa:9a:63:1c:90:e1:e0:
f9:25:1a:4a:1b:5c:99:80:8b:60:78:9c:51:5d:fd:39:ec:c9:
42:8c:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:18 2025 by rpki-client