Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: 08NOZFM9XJNQ6v2okYBS1vf5L3Ity9s+tXLWTVXgkqE=
Subject key identifier: 2B:1B:B5:29:0F:88:B9:FB:8F:DD:5A:E5:2E:E1:6B:34:9B:FA:BC:9A
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 0198D583561FE5C5EE12388BD4D253E43782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0C45
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: PlCZuA/5fl7YojkaCAJrTK8usnWzB010cP//bblLRBM=)
2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:56:1f:e5:c5:ee:12:38:8b:d4:d2:53:e4:37:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=2b1bb5290f88b9fb8fdd5ae52ee16b349bfabc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:48:a5:07:ae:cb:b0:38:a7:40:36:9f:e4:c6:
61:40:55:52:5f:0d:a1:f2:41:2e:74:08:14:22:5f:
45:76:a8:8c:53:0c:cc:0e:aa:86:fd:6a:84:86:5b:
7f:af:70:47:29:a4:ac:09:9c:d1:a5:e0:6c:76:32:
98:60:0b:9f:32:69:65:9c:f3:27:e8:a9:5f:98:33:
a8:e3:6d:7a:9b:a3:5a:e7:94:b9:58:b4:4f:30:04:
a9:93:03:54:08:07:bf:a4:fe:50:30:6f:e3:7c:92:
97:3e:62:18:1a:53:3e:1b:de:f1:2b:1e:50:b3:94:
68:b3:6a:0f:4a:b9:0e:29:17:34:4a:77:7b:a4:cb:
04:59:29:9b:d2:c7:d1:74:a8:35:af:33:5c:e2:91:
bd:06:82:6b:b7:91:ae:e2:56:82:35:cf:90:d1:41:
e3:62:20:23:08:c3:36:7f:c2:00:a6:b3:30:e5:16:
c4:c7:59:aa:81:c1:36:52:ba:52:95:73:da:38:24:
94:d8:c9:19:67:cd:60:3d:40:41:9f:2b:ec:fb:a9:
0b:fb:54:e2:8b:16:fe:6c:49:b3:b6:3c:d0:b0:a2:
0a:f4:a6:42:7c:24:26:77:d6:97:a0:2b:63:b1:28:
48:10:d9:0e:54:c2:ba:97:9d:f8:9f:ff:48:3a:5a:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1B:B5:29:0F:88:B9:FB:8F:DD:5A:E5:2E:E1:6B:34:9B:FA:BC:9A
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e0:b9:cf:81:48:b6:f1:0b:16:f0:e7:2e:3b:aa:eb:a4:77:
de:cd:f2:05:8e:25:2c:53:7a:3d:1d:ba:93:85:54:42:f7:fc:
71:c0:08:e3:ce:73:5e:79:f3:69:d9:21:17:dc:67:19:81:0b:
da:27:d8:64:88:97:6b:b0:89:c9:6e:57:32:d6:aa:2b:13:de:
0e:51:63:24:1c:66:35:63:dc:c6:7b:34:18:df:6b:d8:3a:2c:
68:85:c6:54:40:18:98:e7:4f:45:53:9c:1b:24:d7:85:03:d9:
87:58:7a:21:be:ff:14:3a:29:20:3c:8f:fd:e5:31:5e:a7:52:
b0:e1:8c:92:d2:bb:a7:9f:0e:a1:1b:1c:ed:bc:dc:76:52:20:
d1:0b:d7:39:7d:5d:cd:d1:26:d9:03:2b:cd:9c:67:c4:ed:60:
99:de:2c:53:3e:0a:13:53:b2:ee:96:31:cb:9d:ec:0c:d8:e8:
d1:3f:94:71:29:ce:7d:14:e9:90:7e:e7:f7:be:f1:9f:ab:f6:
36:5f:af:9a:94:41:65:6e:3a:1b:da:6b:2d:8a:b2:f3:29:62:
be:69:9c:34:b4:fc:d8:70:29:24:a2:3d:00:bd:f6:36:ca:d5:
0a:54:77:a6:c2:96:a7:fd:c4:5e:84:5e:2f:3b:d4:54:df:c3:
2f:87:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:39 2025 by rpki-client