Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: 87KTQbOVfiEAidl8lZ+YQUyt2sHKE+ShmAuhsmjeLMk=
Subject key identifier: 1C:C3:F0:A1:41:EC:BA:13:D3:01:5F:21:73:D8:7B:0E:78:1C:77:30
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 0199345C1A4AA7791F5920DB787DF968726E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 111E
Signing time: Wed 10 Sep 2025 16:01:15 +0000
Manifest this update: Wed 10 Sep 2025 16:01:15 +0000
Manifest next update: Thu 11 Sep 2025 16:01:15 +0000
Files and hashes: 1: TUukLx44kjF0H_lfWyE2v7MimXs.roa (hash: hh6d1KEKUecIQgdhGgz8Bqi6uh15mWOy43tdVfLxrHg=)
2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: t70MO18mypbB+NhhoaInKUGv6s72YxlscwkGtltEjj4=)
3: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5c:1a:4a:a7:79:1f:59:20:db:78:7d:f9:68:72:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Sep 10 16:01:15 2025 GMT
Not After : Sep 11 16:01:15 2025 GMT
Subject: CN=1cc3f0a141ecba13d3015f2173d87b0e781c7730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:c7:94:7c:bf:4c:87:82:fd:3e:00:6f:de:
21:47:dd:80:ca:bc:86:06:0a:a3:7d:0c:f5:01:07:
37:43:f2:68:98:dc:af:32:eb:22:b0:7d:77:3c:f1:
da:83:4a:d9:e9:5f:3a:a5:22:9f:d5:a8:c3:9e:84:
27:5c:11:de:3a:99:b9:89:ff:9b:e2:f5:d7:a2:fe:
c7:c9:9c:48:bf:6f:b4:ad:7a:1d:56:07:13:7d:c1:
89:35:90:fe:73:a5:64:cf:d3:92:8c:00:4b:10:eb:
fd:60:b2:f7:10:dc:aa:ba:23:ca:5c:74:80:f6:c7:
a7:c3:09:78:94:11:9f:f1:4c:73:36:12:2e:7a:08:
63:f2:47:60:1f:10:56:9f:64:c2:1d:0e:83:04:37:
c9:ba:ba:01:21:42:0e:66:ee:41:b6:e7:90:23:ea:
5c:80:7f:0f:3d:cd:b8:6d:b4:43:9f:a7:94:2e:98:
eb:6e:00:75:e8:c2:3a:5c:c2:f6:22:57:db:1a:35:
5b:cd:0b:9a:aa:64:00:72:6e:12:ee:78:ba:eb:bb:
2a:5b:f8:26:8b:23:29:fb:cd:83:69:aa:40:ff:61:
3c:3b:fc:f1:9a:cb:96:a5:29:c0:49:29:27:4b:de:
44:cc:b9:e8:08:52:47:22:2b:8a:0d:26:89:c9:14:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C3:F0:A1:41:EC:BA:13:D3:01:5F:21:73:D8:7B:0E:78:1C:77:30
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:58:e4:7d:d7:b8:5d:f7:55:09:36:e7:03:c7:ed:1a:8d:34:
af:d5:b0:bf:2a:f3:37:22:71:97:b0:35:05:51:b7:f1:21:26:
44:f3:79:d2:13:63:25:35:d8:24:f6:a5:fc:f9:4c:d6:13:45:
ca:7a:5c:0e:36:95:27:68:40:bd:84:e3:ad:12:28:a4:3f:fa:
b7:a5:11:45:8e:3a:e9:eb:b8:7e:f2:28:e9:24:b0:b6:27:8c:
ba:01:41:05:ff:eb:f0:19:90:27:17:3e:fc:d5:9e:39:fe:37:
0b:62:c7:43:e3:47:88:11:2b:5c:73:c9:f7:9b:91:2b:cf:55:
69:3d:44:8c:b2:90:05:0f:dd:12:08:d1:db:c3:b9:d3:24:b8:
c0:9f:0a:2f:5a:5e:a2:c5:7f:4e:ff:47:cb:bb:23:db:ba:19:
a0:5e:53:5f:14:36:43:52:6a:99:d3:52:41:10:33:89:d5:68:
ff:fd:df:99:ad:1e:2e:f1:fb:e0:fe:55:0f:65:d6:a9:de:e6:
58:49:dc:cd:a7:fe:6e:20:64:31:45:65:ac:66:56:f6:16:f5:
23:e1:be:59:e5:a5:93:81:e7:c0:a0:e4:0b:64:92:85:97:9c:
e2:e7:81:47:9d:a5:ab:e8:b4:9a:8e:e5:a0:25:88:2a:57:61:
c6:a4:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:54:00 2025 by rpki-client