Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: sp2wd/PG3UwsAxqnK6JRDOpW5t1gMtbA+4VPSC64NzI=
Subject key identifier: 98:06:B6:96:BD:34:81:C5:3D:DB:6B:8A:2C:C7:A7:34:78:C7:C0:6C
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 019A7149B867EDB63BD05C70151006F93913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 12CC
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: Up/OxWLY/LVwME5GQZX2hprqZSAvo+uHif404QLuLp8=)
2: shQWrGUmL_hnxXrykLqgxjUrJSo.roa (hash: WyhgYBiNi+KPH14FenrkvjOQfAHnL6lB02jl9DUrbbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b8:67:ed:b6:3b:d0:5c:70:15:10:06:f9:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=9806b696bd3481c53ddb6b8a2cc7a73478c7c06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:3e:e9:37:0c:1a:58:9f:98:cb:bd:54:09:
97:6b:cb:0f:89:2e:1c:49:86:9d:92:4b:33:65:f5:
c8:dc:ec:7a:06:42:49:93:37:4c:44:44:c5:ac:cc:
42:62:73:56:1f:3d:48:56:ab:4d:49:06:29:7a:5c:
79:b2:e3:c4:cf:68:ff:56:d9:36:68:26:0e:e5:64:
79:78:17:7d:04:02:2d:4e:df:73:71:d6:f7:38:af:
76:26:75:38:39:f3:8b:d2:22:69:a3:06:a3:e7:9f:
ad:db:2d:ef:f5:05:d2:2e:88:ac:bf:0c:4b:2d:e6:
eb:bc:3e:f8:ab:34:b1:97:fa:1d:cc:8f:13:e4:2d:
da:74:cd:9c:f8:b7:77:d7:e7:fa:d5:9a:b0:67:cc:
e1:de:e5:c2:09:9b:4c:0a:9e:e6:fd:e1:a8:7c:9f:
86:43:85:0a:15:ee:06:3c:26:dd:92:4f:6e:4c:d5:
20:e6:12:78:32:52:3d:ce:61:45:61:e8:c3:25:68:
6d:f4:b7:d8:65:e5:4d:41:f8:70:38:d0:fb:37:ec:
40:cc:8c:71:d3:d9:3c:1e:03:a8:fa:c9:6c:62:14:
e0:97:05:14:5f:c6:13:73:c5:0d:a2:a5:b3:25:3f:
06:6d:49:86:fc:89:87:63:21:aa:6f:4d:ce:29:a3:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:B6:96:BD:34:81:C5:3D:DB:6B:8A:2C:C7:A7:34:78:C7:C0:6C
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:00:56:99:38:8f:68:a1:db:ad:70:07:31:c1:cf:8d:e0:19:
b8:a1:20:38:a8:40:cd:7b:ee:28:6d:86:80:7e:31:74:df:3a:
68:89:5e:c8:96:f0:c1:83:47:14:08:82:52:79:04:33:b6:d8:
0c:ad:aa:f5:4f:28:84:da:e8:61:50:21:b0:77:f8:49:b7:fb:
6d:4d:46:8c:8e:17:35:1d:38:8f:6d:5f:bf:c5:76:4e:cf:96:
d5:4f:54:5e:4c:26:f6:e2:01:85:1e:f4:00:8d:9b:11:68:b8:
a7:6a:a7:ab:77:9e:d4:52:e2:c6:aa:c3:4d:84:8c:d1:b1:cb:
a7:ed:89:f5:d9:51:c6:0f:ef:83:e6:b3:73:96:2e:74:d7:f8:
1e:df:40:bf:23:43:9f:da:49:36:cd:3b:3e:b0:98:e8:57:82:
b2:a1:da:bc:5a:4c:06:71:02:d1:2f:dd:a2:77:44:fd:41:01:
ff:bc:cb:75:b0:00:0c:f0:14:bd:fa:f5:dd:12:0a:0d:ac:d2:
18:ed:75:63:17:2d:7d:61:78:4b:05:cb:d3:7f:14:c8:4f:69:
aa:e1:08:77:c7:85:4b:61:25:e3:2e:ce:ca:b5:0c:d2:c4:fe:
01:de:5b:a2:a8:02:74:48:a2:d1:a9:62:05:5b:39:06:29:2e:
aa:0a:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:44 2025 by rpki-client