Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: J+TvwKj7qbzeoM31J8Q6FoMBnGzYldh4LpOeXbM8G5A=
Subject key identifier: 73:3F:72:25:24:B9:2E:F2:18:CF:F6:70:79:F4:7E:11:A4:26:44:FD
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 0198D7E135D5D3A032B49B1CF319FEF2C598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 1492
Signing time: Sat 23 Aug 2025 17:01:57 +0000
Manifest this update: Sat 23 Aug 2025 17:01:57 +0000
Manifest next update: Sun 24 Aug 2025 17:01:57 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: Nei8zqWFkJES1cHHqNCriucWtzp0p5WCSyhlqy1xkD8=)
2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:35:d5:d3:a0:32:b4:9b:1c:f3:19:fe:f2:c5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Aug 23 17:01:57 2025 GMT
Not After : Aug 24 17:01:57 2025 GMT
Subject: CN=733f722524b92ef218cff67079f47e11a42644fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:9f:9e:82:87:0a:15:b5:84:7b:f1:01:56:
ac:0f:10:5f:90:90:a0:67:2f:99:28:96:aa:1d:42:
db:66:f1:35:5a:46:2c:33:47:74:35:25:c8:d9:31:
5d:37:c9:88:50:7a:80:f4:d3:16:10:c0:d2:0b:bf:
2c:51:4f:ba:a7:11:1c:54:10:26:eb:03:30:ba:4e:
bb:25:44:0d:90:28:1f:ef:48:90:e5:6a:41:f1:b6:
c8:fe:c8:8e:03:bb:13:de:b8:13:c8:5b:e2:1e:d9:
e5:9a:5b:04:9b:09:0a:be:e6:36:37:e1:4f:d7:a6:
91:38:21:51:85:06:bf:9f:ae:97:ec:c3:bd:c0:e0:
95:ff:cb:51:84:20:b1:f7:ba:dd:8f:b3:8d:f5:9b:
cb:cb:f3:0e:03:94:70:50:26:bb:91:1f:79:05:07:
52:3f:c8:78:1c:f1:40:09:75:04:63:74:17:a5:42:
03:6f:ff:95:04:79:72:68:1b:7c:dd:85:61:a4:66:
8b:ef:ac:23:7d:82:c8:28:23:bd:8f:b6:20:40:43:
69:c9:b2:93:f0:51:7a:db:f4:4a:aa:fc:ac:59:9a:
9e:8b:18:50:d0:a8:e7:26:a8:a6:95:37:ac:d4:b0:
ea:b5:3b:f9:d2:fc:ad:bb:fe:3d:a3:47:3c:ab:0d:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:72:25:24:B9:2E:F2:18:CF:F6:70:79:F4:7E:11:A4:26:44:FD
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:26:66:ca:eb:7c:ae:46:98:14:59:72:05:9f:08:9f:b8:b2:
56:8d:58:03:73:2d:01:2e:33:4f:0e:11:4a:d6:e6:21:3e:c0:
b8:f4:7b:48:f9:95:da:31:91:55:9e:10:02:26:3f:44:2a:c7:
be:48:9e:bc:a4:8e:73:60:06:48:95:b6:09:77:27:eb:5a:a5:
d5:4c:39:54:52:34:ed:44:e5:26:f2:e0:32:ec:41:47:be:02:
90:4d:fd:4e:e0:6d:9f:bc:c6:cf:01:22:63:81:93:b2:ef:8e:
fc:cf:fc:10:34:7e:fd:03:60:b4:45:33:fc:92:3a:97:03:56:
7c:fa:24:ac:cf:e2:d2:de:ab:4b:93:84:ae:28:ba:10:6d:d6:
0c:1a:05:f9:e6:28:91:94:36:ed:67:f2:4f:08:55:e7:eb:a5:
21:85:00:0a:c9:b8:69:11:64:d3:3f:24:65:94:a6:bd:bc:cb:
4f:f7:85:4d:3e:c7:0c:98:b1:8b:16:9c:a2:e1:d1:2a:64:df:
f2:69:f8:f7:7a:0c:e9:ff:91:94:82:95:4c:10:8c:35:e6:cb:
6a:d7:06:28:4f:39:80:c3:05:f2:9c:9b:24:f7:50:b8:5e:69:
9d:34:34:12:eb:ba:10:88:ad:c1:8e:ed:06:78:02:37:ef:32:
9b:f1:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:00:39 2025 by rpki-client