Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: ENJL9zmL1sKV38UQPevVt9LrdSqbeLnyUWw3Zg9Sc6w=
Subject key identifier: 94:F1:3D:47:F3:A4:4A:9D:2E:46:6C:3E:39:D4:01:2B:BB:70:38:D3
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 0199FCFD83904DF1D6053A2800655137F2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0CDE
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: t0jvF7B84M0jPulHIX7PMIwrrE4sen/BUMLZ9Rgl8qE=)
2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:83:90:4d:f1:d6:05:3a:28:00:65:51:37:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=94f13d47f3a44a9d2e466c3e39d4012bbb7038d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:86:20:82:90:c8:ac:3d:0c:c9:c0:4f:62:dd:
79:9c:86:2d:9d:ae:42:ec:08:7b:e7:71:54:4c:c3:
64:b3:3a:2e:d3:2a:43:c9:8d:9f:1b:71:17:54:63:
c3:2e:7f:94:9d:be:3e:c0:03:f3:ae:07:32:a2:72:
60:b7:8b:eb:0e:61:28:78:33:bc:fb:d9:c0:c0:f5:
94:9b:5c:e1:79:dc:f8:e3:2f:99:01:d8:95:db:ca:
03:d3:a9:95:ae:89:08:41:22:fa:ad:c9:38:6f:a0:
07:47:22:1d:1a:f3:6a:79:fb:fb:86:00:51:ea:25:
4b:aa:d2:bd:06:2c:96:13:b8:e3:42:9c:2e:14:d6:
93:cf:33:89:19:dd:cd:9c:88:e0:32:6b:26:96:ea:
7a:b6:11:16:64:b4:32:4b:6a:07:5e:28:d0:28:eb:
b0:64:32:3f:dd:21:ed:6a:5e:06:b2:01:ea:04:a3:
3e:e8:65:7f:65:a4:28:e4:56:a7:29:67:67:37:c3:
00:9d:2b:32:c3:fa:85:a6:4f:09:3c:8c:6e:22:f2:
6c:9a:6b:1b:a3:18:7e:b2:1d:7d:bb:78:ce:5c:dc:
e4:eb:1e:e8:6e:3a:1f:ee:36:02:ff:4f:65:82:2d:
a5:cb:45:b7:e6:fb:60:c7:fb:62:37:d2:52:33:d8:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:3D:47:F3:A4:4A:9D:2E:46:6C:3E:39:D4:01:2B:BB:70:38:D3
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:94:af:20:0b:d0:bf:65:8e:77:1b:4c:f8:e6:74:cb:5b:84:
fb:64:69:d0:50:f3:88:c8:69:7e:ec:14:18:0d:17:2d:fa:63:
a0:08:01:52:f8:f4:aa:1f:d6:fd:d5:2b:f1:2f:e3:8a:b0:aa:
46:7d:39:33:d9:b4:57:23:e0:fd:04:ed:a0:d3:d0:02:ee:46:
74:af:ce:f1:a7:3e:d1:96:e5:74:fb:60:bb:de:5f:1d:1e:04:
4a:15:21:a6:5e:b3:1e:69:5b:67:0b:1f:9f:73:25:50:c7:64:
8c:70:27:97:77:45:9c:78:a1:92:38:2b:7e:48:d0:f2:3e:fc:
99:54:1c:94:11:0f:8f:be:0e:e5:d7:7a:e8:3f:3c:bd:62:0a:
e4:eb:cc:60:17:28:8e:51:97:a4:bf:e8:a2:ea:c4:84:28:f1:
0d:08:4f:05:6b:86:45:79:ae:8c:19:38:87:ed:61:23:e2:50:
36:df:5f:ce:9d:24:e6:03:7b:96:73:b1:26:ff:6d:47:5f:d4:
bd:1e:e6:57:b9:0e:e2:33:4f:c0:a4:d5:d6:35:a3:7c:8a:fc:
99:bf:0b:fb:f3:ab:be:44:03:16:de:af:c3:14:ef:a5:de:15:
33:58:8e:ff:29:c5:ab:46:13:53:f7:5b:0f:ae:ee:97:27:84:
7f:f2:68:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:50 2025 by rpki-client