Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: Jq3JhgDybCq3wmfZPhFIE9hcZ85CKOA4myhDnJ8bcU0=
Subject key identifier: A3:CB:37:46:23:59:5B:DC:7F:C5:1A:F6:CB:BB:7D:A7:FA:31:8F:11
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 019745F92734C441FEA47F5176D0B90015C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 101E
Signing time: Fri 06 Jun 2025 16:00:45 +0000
Manifest this update: Fri 06 Jun 2025 16:00:45 +0000
Manifest next update: Sat 07 Jun 2025 16:00:45 +0000
Files and hashes: 1: TUukLx44kjF0H_lfWyE2v7MimXs.roa (hash: hh6d1KEKUecIQgdhGgz8Bqi6uh15mWOy43tdVfLxrHg=)
2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: znrh4malAD3UdfzaJTFCMAMHEvYItNjc4AtB1DcNaic=)
3: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:27:34:c4:41:fe:a4:7f:51:76:d0:b9:00:15:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Jun 6 16:00:45 2025 GMT
Not After : Jun 7 16:00:45 2025 GMT
Subject: CN=a3cb374623595bdc7fc51af6cbbb7da7fa318f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:4d:7d:f5:46:0c:4d:1d:e6:22:26:30:d4:
99:d5:4f:00:3a:c2:f3:3e:f1:84:e3:98:a9:37:95:
30:b7:a7:04:f2:5c:9c:91:b5:51:74:1d:4e:71:b1:
fd:74:6c:24:72:00:df:01:86:b0:cb:75:7d:8c:13:
c8:5b:63:ef:0f:af:81:f1:31:d2:6e:82:a6:23:6a:
bf:5b:97:73:d6:d7:61:20:87:da:ac:ec:df:e8:68:
b0:e1:33:22:0b:83:f6:9a:ef:56:f4:53:d9:e9:c4:
6a:ef:c2:e4:79:9d:6d:9b:77:98:a3:7a:42:f8:2b:
b1:87:11:b3:6a:5b:82:53:3e:2d:b8:dd:f5:b5:4d:
57:0a:b3:b7:0e:c6:e5:56:1f:2c:1d:7b:a4:c7:01:
f3:58:e5:59:32:21:07:0b:c5:05:ec:58:ff:43:15:
a9:d2:94:b2:b1:01:f1:ac:0e:df:7d:fe:c6:e2:e0:
ae:86:32:35:4a:c3:96:14:38:79:10:33:13:5e:af:
10:0d:6d:fb:87:fa:d6:25:ed:c6:7f:de:71:5a:77:
e5:46:b3:ad:69:d1:9e:76:19:fa:fe:4a:6c:b9:83:
a3:7a:85:eb:1a:eb:b8:1c:ae:07:0d:a3:71:d2:dc:
0b:20:19:67:6e:9b:01:7e:f2:63:a7:25:54:0f:21:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:37:46:23:59:5B:DC:7F:C5:1A:F6:CB:BB:7D:A7:FA:31:8F:11
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2d:2f:b7:43:06:f1:6c:dc:50:df:0e:9a:91:1e:45:23:0b:
48:ce:d5:3b:dc:79:7c:e2:a6:70:53:2d:fc:ac:6b:30:5a:b3:
b9:0e:43:30:61:00:93:5e:c5:51:21:e1:fb:73:46:c4:47:f3:
dd:b9:de:f9:8c:71:c7:c0:97:b0:e3:d4:e4:7a:6d:89:d9:f6:
4a:93:7d:ca:6e:b5:3b:05:b1:2d:8c:24:c9:2a:31:a7:e7:ba:
eb:be:19:ab:09:4c:90:67:f4:4d:e0:77:68:9c:7d:17:56:ea:
14:b0:bc:c8:31:bb:d2:3c:72:53:60:9f:d2:18:0d:0f:4e:5f:
3b:81:d2:3b:e1:22:d1:5c:b9:c7:02:fc:c1:1f:6b:c6:05:0e:
1c:77:6e:d2:15:72:4f:b1:2d:c9:97:54:89:cf:e4:a2:23:a6:
74:35:c7:23:37:0b:22:76:3e:a1:5a:6c:05:5c:04:6f:52:f2:
09:6e:9a:10:cd:a7:b4:b9:21:07:e1:cc:e7:38:f1:d2:ed:43:
1b:56:12:b4:55:2e:64:89:36:fc:40:a5:98:ce:f9:a4:df:ef:
d7:15:3f:89:81:ed:cc:f0:9b:c5:87:4b:9b:b5:38:93:f6:72:
e7:87:97:bd:15:80:77:0f:0b:98:71:db:c9:8d:50:e8:b1:d8:
97:35:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:47 2025 by rpki-client