Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: Sv7Ly2TzMYCN9lqgbEVYAJMWcQ8TuXpAbitqeGjlhxM=
Subject key identifier: 99:A3:D6:28:C5:BD:C0:69:4F:31:19:05:7E:81:45:FA:D0:7B:15:8E
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 019922C346224203183C143F467C0A9F37AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0C6D
Signing time: Sun 07 Sep 2025 06:00:46 +0000
Manifest this update: Sun 07 Sep 2025 06:00:46 +0000
Manifest next update: Mon 08 Sep 2025 06:00:46 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: YSGFTAVAbBDjTbOPGJ4PSm9JIAktPaEoLAqSAFkXuZo=)
2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:46:22:42:03:18:3c:14:3f:46:7c:0a:9f:37:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Sep 7 06:00:46 2025 GMT
Not After : Sep 8 06:00:46 2025 GMT
Subject: CN=99a3d628c5bdc0694f3119057e8145fad07b158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:c2:13:f1:9e:72:55:17:1e:8b:de:58:1e:
5f:48:df:2a:20:e7:e9:da:81:93:73:70:a2:34:0f:
a3:09:d1:d6:6d:a8:88:9c:4f:3d:cc:e2:60:ec:0d:
2f:19:e2:49:37:eb:a7:59:d4:59:af:db:3e:b0:18:
99:d0:a5:73:bb:00:a7:b8:7b:13:95:af:46:51:e6:
ca:fd:fb:94:8b:f7:20:db:80:35:36:ec:22:86:f6:
db:50:4a:c8:4f:06:9f:ef:32:a1:5a:5d:83:02:e0:
23:1c:40:ce:b9:dd:5d:b2:04:72:d3:46:d1:80:94:
84:44:41:d1:9d:3d:c8:a0:86:f2:47:1d:67:d9:5c:
f3:42:04:5a:0f:14:06:88:dc:43:9f:39:28:af:b8:
9e:5f:ef:14:de:69:e8:70:59:fd:f3:e2:18:cf:9a:
64:c4:2f:88:37:24:a1:d7:db:a4:4e:b5:1d:59:87:
ec:3b:8c:5d:21:c0:90:dd:1c:f5:e8:e4:54:ea:72:
ef:78:38:6b:a8:74:36:0b:c3:4f:c8:8b:fc:4b:c9:
1a:68:e6:7e:44:be:65:a3:1e:78:b8:9c:a5:18:8c:
6e:ce:70:cc:1c:89:38:c4:cf:a2:39:57:01:6c:e4:
01:4c:76:e9:71:4f:31:1e:73:b0:42:2f:a6:2a:ad:
b9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A3:D6:28:C5:BD:C0:69:4F:31:19:05:7E:81:45:FA:D0:7B:15:8E
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:37:14:01:6f:d8:33:d9:1f:a6:e0:39:ae:34:f1:75:3e:e0:
24:ba:4b:f4:a5:ee:88:f1:b2:8e:ee:f1:3d:c0:1f:b0:d1:d1:
6b:1b:90:77:f5:aa:a1:cb:4a:40:ab:27:5d:b8:c5:69:f4:2e:
c6:f8:9f:6f:f8:c2:28:4e:57:aa:89:11:49:a9:54:f5:bb:71:
dc:21:40:da:70:70:e8:b0:e7:30:37:f8:9d:e4:22:d1:2a:cb:
fd:12:33:2c:4c:a1:7f:ba:1a:19:bd:21:a6:1f:53:73:67:2d:
62:24:08:18:72:3f:53:5e:81:f5:76:f9:72:ac:7c:cb:77:b9:
57:86:c2:df:c7:61:5c:0a:18:e0:07:fc:4e:a0:5c:cf:36:41:
c0:0d:1f:82:90:0a:d0:33:ce:f2:4e:fe:e5:0b:bc:87:8b:c0:
84:95:18:d8:0d:10:7a:bf:4b:73:77:36:e8:2c:ed:4c:4d:96:
cc:cf:d9:46:53:ba:4f:7c:cb:73:fd:66:b4:70:33:b4:04:db:
d2:0b:a9:61:f3:12:08:35:11:74:07:84:3c:27:45:3f:93:2a:
ef:e4:77:56:30:77:35:62:42:3f:d1:df:36:8c:23:12:13:8d:
90:06:75:af:55:0b:10:e3:92:7d:f0:1f:e1:33:24:49:60:f0:
3f:08:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:29 2025 by rpki-client