Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: PW9GCDT3c448fNus+s8HKCcITF08I9JXgdLVhMnWmdw=
Subject key identifier: A6:20:22:13:14:40:AD:A0:D6:17:AD:9B:FE:BD:D4:A6:AD:B6:26:59
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 019A72CA70E6E51FBAFA9CE92A4167E72042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0D1B
Signing time: Tue 11 Nov 2025 12:01:01 +0000
Manifest this update: Tue 11 Nov 2025 12:01:01 +0000
Manifest next update: Wed 12 Nov 2025 12:01:01 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: XudR18wVvEzXCz59DDLTjbNjz7SXP2t3URzm96JdQLg=)
2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:70:e6:e5:1f:ba:fa:9c:e9:2a:41:67:e7:20:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Nov 11 12:01:01 2025 GMT
Not After : Nov 12 12:01:01 2025 GMT
Subject: CN=a62022131440ada0d617ad9bfebdd4a6adb62659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:bf:09:b1:9b:d2:5b:8c:df:cc:10:95:43:
f4:8a:8b:5d:4b:48:cf:a1:8e:0d:ad:08:b0:80:c8:
b7:af:86:fb:dc:44:2a:e3:a0:b7:b5:46:72:b8:59:
2a:72:f6:d3:1c:bc:df:c0:66:8c:91:4f:9e:51:1f:
b2:1f:bb:c0:55:bc:6c:2c:93:b2:34:70:dc:54:3f:
a4:47:72:a9:63:f3:21:30:3c:52:d6:37:cd:4b:6e:
21:d7:bd:7e:f1:23:9d:6d:22:dd:18:b7:82:90:c1:
8a:52:70:5d:c2:b4:1c:28:68:f5:b6:bf:d9:40:a5:
80:f0:d1:0f:05:01:5c:ce:9a:b3:bf:0e:6b:e3:61:
00:2e:a3:e2:1d:d0:88:3d:76:d0:55:82:e7:d3:41:
fd:99:1e:a2:09:29:24:c3:6a:f2:05:b3:ae:85:14:
b1:5f:7c:50:15:10:88:9a:af:16:7b:8c:aa:6e:01:
71:5d:d4:c8:c8:5c:43:a4:f4:b2:0c:52:a9:e6:44:
bb:03:b3:6d:9a:2c:fd:76:f4:ea:90:1e:f1:e6:b0:
76:19:7c:b1:2f:07:8b:07:0a:ee:1d:65:2b:83:1a:
bd:ae:37:8d:6f:e7:22:c2:f9:c3:92:b9:12:78:c5:
d1:57:61:9f:f6:2f:c6:06:48:53:f3:64:72:ad:13:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:20:22:13:14:40:AD:A0:D6:17:AD:9B:FE:BD:D4:A6:AD:B6:26:59
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:82:64:1d:6c:96:97:88:57:11:28:a3:cf:36:d5:58:e8:b5:
87:16:28:2a:cf:37:d9:c1:0a:a9:9f:a7:68:96:8b:6d:35:31:
e8:3b:62:90:aa:ba:54:83:12:ef:5e:68:fa:7a:85:05:25:e9:
51:66:e3:9f:ff:af:7b:e2:9a:25:d8:53:fd:ca:16:41:55:bc:
29:af:2a:8a:65:ca:04:4e:21:4d:ba:ec:56:98:d8:34:a8:4b:
ba:a6:b9:4c:04:6c:7a:cb:be:8c:aa:4e:cb:ae:49:ab:57:e2:
e1:d2:c6:e8:66:ea:a2:92:a4:51:bc:9a:41:a7:f7:ce:f4:ed:
fc:92:37:e4:27:99:0e:17:07:f6:86:7a:6e:50:75:53:51:3e:
3d:53:42:29:4e:40:9e:0f:d4:a6:22:bb:aa:40:56:39:db:a6:
55:0c:88:41:12:4d:98:97:c4:b9:9f:a2:cb:21:52:d6:72:72:
5c:4a:b6:eb:5f:4e:8c:51:a3:96:ea:f3:61:e0:07:48:58:8e:
0f:8a:48:6c:9a:71:c7:31:f4:e3:a4:5f:92:5e:f0:90:44:46:
03:8f:3f:22:1c:0c:cc:ef:14:6b:59:6f:e5:16:f6:75:48:0a:
96:aa:28:30:0c:a1:fd:3d:10:2e:3f:bb:95:d2:7a:a7:ea:e7:
be:e0:69:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:44 2025 by rpki-client