Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: rYcGledEl9WL0KMfIO+Pk58QsCDrS7N4uAY6juISAwo=
Subject key identifier: EC:03:AC:A9:B8:FC:DA:45:15:2A:67:27:5D:38:2B:67:06:4F:75:52
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 0199FC215082F33F922B968244FA3A0C1D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 03A0
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: Ya5YFIwHyjkJwQuSdOXF+pGSYDnf+IaAyWhQKQnFw5Q=)
2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:50:82:f3:3f:92:2b:96:82:44:fa:3a:0c:1d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=ec03aca9b8fcda45152a67275d382b67064f7552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:1d:1c:92:95:5e:03:17:4c:c0:0c:d5:1b:
22:a1:76:98:50:9e:35:97:bb:69:26:36:aa:78:a9:
bb:dd:09:5e:9a:f0:06:fc:75:2b:6c:2b:70:62:5e:
40:d7:b0:4a:67:c4:5d:a3:26:6a:a7:68:07:6f:e8:
d1:28:7e:4c:76:77:d6:86:81:4d:ff:3f:07:12:c4:
85:c2:84:aa:6a:6b:ae:03:ae:e7:57:23:9e:73:11:
aa:d0:5e:f4:b5:4c:21:78:60:23:e0:c4:ac:ed:88:
d4:a8:72:43:e1:e3:e1:7f:43:0b:0d:b1:40:a5:4f:
94:77:4e:d8:0a:d2:3d:78:48:ae:d3:a6:ae:4e:5a:
1a:2b:58:31:f1:3a:81:18:1c:42:a0:0f:57:fa:56:
4c:69:76:d9:d6:20:ae:68:2e:af:62:25:2a:74:c8:
75:c7:ea:74:39:19:23:e9:58:9e:ec:aa:5c:ad:73:
8d:1b:84:cf:ae:f0:26:22:7c:96:84:a3:69:71:1f:
c5:44:dd:62:81:89:ca:e4:70:61:6b:96:b2:71:84:
bf:e1:ce:09:ad:e8:dd:f4:1c:10:be:fc:9c:38:d1:
db:3c:ec:f9:9b:4f:d7:3b:bf:2c:84:90:7b:18:3b:
0c:f9:63:21:21:6b:69:6c:a6:d0:7a:02:09:46:69:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:03:AC:A9:B8:FC:DA:45:15:2A:67:27:5D:38:2B:67:06:4F:75:52
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c7:13:60:f2:d7:b2:68:8b:e9:9e:92:91:5a:b3:84:36:b6:
4e:5d:55:a2:08:ff:e2:0c:04:db:d7:c4:8a:74:3b:af:8a:af:
a7:f8:18:4f:34:bc:15:6c:fe:4b:05:e0:a7:49:d6:1e:ae:5f:
08:d4:c3:fe:f4:39:da:59:ea:6c:eb:be:28:97:c5:ff:f1:96:
e0:f3:01:ad:34:dd:f6:c3:12:85:c8:77:c5:ff:df:ef:de:aa:
dd:67:4e:26:20:97:99:5b:2c:8b:a2:66:58:94:c0:55:ca:4a:
fb:59:6e:ec:27:34:a1:42:39:a7:a5:2b:83:2d:1a:27:88:1e:
23:9a:17:42:ee:13:fd:da:62:4a:22:c8:a6:bb:c9:55:7f:50:
da:20:db:f2:3a:a9:de:51:f3:a4:ca:7d:c8:a4:1f:22:11:bf:
74:5c:80:e0:db:e9:8b:2d:56:92:86:72:e9:77:44:c4:04:75:
f9:e7:34:07:2f:19:b4:8e:c6:79:b4:1c:e0:81:18:39:a9:e4:
e1:f2:b4:b1:e2:dc:73:62:a2:0f:e2:52:2d:d4:a7:e6:fb:36:
fc:d4:d6:cf:7c:f1:47:91:51:c3:01:a5:bc:06:46:df:66:9a:
56:5c:56:7d:44:3e:f6:5d:99:55:c5:e4:05:8e:fb:81:5c:56:
50:b8:0b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:03 2025 by rpki-client