Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: wSa3Bt3xm24Aza9atwa8kvxO4gh0booCMKG8/t8cJAE=
Subject key identifier: 9B:55:BA:00:A7:CC:42:30:DF:97:30:F5:B2:4E:E7:32:04:36:66:06
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 019A299E740C335755A7A7DAAB7178D02640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 119D
Signing time: Tue 28 Oct 2025 07:00:41 +0000
Manifest this update: Tue 28 Oct 2025 07:00:41 +0000
Manifest next update: Wed 29 Oct 2025 07:00:41 +0000
Files and hashes: 1: TUukLx44kjF0H_lfWyE2v7MimXs.roa (hash: hh6d1KEKUecIQgdhGgz8Bqi6uh15mWOy43tdVfLxrHg=)
2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: tNLsaPKds8tZ1exLFCI43AYXqaAlHaCpu4hta5p1VAU=)
3: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:74:0c:33:57:55:a7:a7:da:ab:71:78:d0:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Oct 28 07:00:41 2025 GMT
Not After : Oct 29 07:00:41 2025 GMT
Subject: CN=9b55ba00a7cc4230df9730f5b24ee73204366606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:76:7d:1b:f7:e0:97:19:66:f9:e7:fb:63:
1d:0b:4a:1c:ad:cc:54:1f:b9:7f:c3:1f:42:6e:94:
f0:c9:10:e1:ca:81:a9:50:6a:30:30:4a:8f:a7:03:
76:50:a2:63:27:ba:ca:14:b3:ed:d2:3a:cb:90:e6:
f9:06:da:42:e2:0b:b3:4f:0f:b5:1d:bd:37:b8:50:
07:89:e9:05:af:12:de:4e:9f:e8:4c:68:7a:88:35:
c8:b5:6d:ef:6d:92:58:16:d2:d2:62:b5:9d:b0:88:
b2:d2:9f:87:bd:d8:47:5a:51:40:15:3f:8f:11:b3:
d1:01:a3:d3:72:95:a1:09:f4:6e:54:0c:dd:50:81:
6f:72:e1:34:96:a2:ea:5c:e8:39:b4:18:8c:77:f2:
ab:08:3d:58:ad:8a:1b:21:2d:31:60:56:2c:75:8f:
cc:32:1c:b6:c4:29:9d:93:83:b4:fe:47:5b:fd:a0:
f9:c8:44:c8:27:ee:5e:ca:19:7f:3c:57:f7:06:73:
02:01:9c:e6:a0:03:ba:c2:67:c2:c3:43:d2:2d:81:
a8:7a:19:10:42:bf:df:cf:cf:0a:a8:c6:d3:89:a5:
01:f5:17:41:49:8b:bb:0e:50:8f:f1:d4:1c:88:67:
1a:14:bf:e9:58:72:c6:76:97:05:d6:f6:66:01:85:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:55:BA:00:A7:CC:42:30:DF:97:30:F5:B2:4E:E7:32:04:36:66:06
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b2:d8:00:8a:10:13:fb:ea:bd:9d:43:4e:9e:13:9e:24:1d:
d3:27:c9:cb:ae:a6:9c:8f:6e:d7:92:34:e1:bb:89:d3:df:81:
6a:6b:3c:39:73:72:a7:df:b2:91:2b:98:ef:11:7f:16:e0:63:
9f:01:ac:1a:0f:67:2b:5a:4f:6a:35:f5:f6:a8:47:05:d8:57:
bd:09:91:27:bd:3f:dd:d0:25:31:e9:d3:fb:b7:28:33:36:39:
cd:04:0d:f8:a3:5a:c1:28:34:93:4f:e0:bf:22:00:bc:bf:9b:
b1:83:68:9a:02:9c:5f:18:0c:67:68:88:c3:36:ac:02:d6:0c:
64:44:b9:f8:f0:55:50:ac:f1:94:07:cf:82:f8:aa:c2:e7:ba:
10:73:ad:44:44:b0:69:c8:7e:91:dd:07:fb:62:cf:34:9b:c5:
c7:99:d4:e6:84:5b:74:d0:ba:92:58:05:ba:7e:f8:3c:8b:a0:
4a:76:65:16:db:93:f8:57:76:c3:95:38:6c:e1:e4:e4:f2:f0:
62:83:bf:30:47:f9:c5:0d:14:17:63:11:b1:c7:d6:ae:2f:73:
da:a7:97:3c:18:6e:51:8b:bb:fd:d3:ae:ff:f7:f3:5b:2d:c8:
fd:8f:46:99:fa:1d:aa:37:2a:66:1a:54:2a:ab:da:66:0e:79:
b1:9d:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:35:43 2025 by rpki-client