Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: Db7ueKwLxMZZAws+SflyGzNN6NfH5Sxbg7wwMxkhd9g=
Subject key identifier: C3:3A:E3:E8:FA:04:EE:C6:AB:1E:BB:19:BF:96:6B:EA:3C:22:BC:EE
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 0198D40480ED561D4A725A8CF348686A5798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 11F6
Signing time: Fri 22 Aug 2025 23:02:01 +0000
Manifest this update: Fri 22 Aug 2025 23:02:01 +0000
Manifest next update: Sat 23 Aug 2025 23:02:01 +0000
Files and hashes: 1: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: cB6RlWno34O1Wuw3rgmQynhmfBqX6k+R7p50olNfs94=)
2: shQWrGUmL_hnxXrykLqgxjUrJSo.roa (hash: WyhgYBiNi+KPH14FenrkvjOQfAHnL6lB02jl9DUrbbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:80:ed:56:1d:4a:72:5a:8c:f3:48:68:6a:57:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Aug 22 23:02:01 2025 GMT
Not After : Aug 23 23:02:01 2025 GMT
Subject: CN=c33ae3e8fa04eec6ab1ebb19bf966bea3c22bcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:c4:17:58:08:95:d0:8e:dd:3d:20:09:94:
7e:9c:4c:e3:e4:cb:4a:d5:d4:df:20:d0:c5:bf:27:
57:e4:2a:5a:8d:7e:9e:df:64:2f:40:f6:6f:79:39:
79:d4:66:9d:c3:49:c6:9f:3f:8f:fd:a9:54:c1:1e:
9f:7f:9f:fa:38:9c:eb:81:f9:67:29:46:e7:2c:82:
d3:67:1d:d3:71:34:b5:69:ca:12:ac:23:e9:08:d1:
eb:2c:50:b8:6a:bb:12:0b:53:21:0f:92:61:83:d8:
e2:2f:e6:fb:c8:08:85:8c:c3:69:af:ff:25:35:c9:
a4:7e:14:18:7e:54:bb:0b:7c:02:6a:98:9f:3b:f7:
fd:8c:1d:cc:95:d3:de:e9:99:10:36:dc:75:da:d9:
4a:87:11:6b:1c:1f:d0:20:44:49:4d:f3:9d:6d:3c:
44:33:7b:83:ff:a6:e6:95:e0:44:c4:64:e9:e8:34:
b0:9e:94:70:3f:1d:d3:d1:3e:c9:7a:9a:7e:af:21:
85:25:74:50:e7:fd:ef:e7:c5:04:60:62:d3:62:b4:
76:fc:f6:14:69:a6:83:7d:1d:5b:82:c1:b4:ff:5b:
79:ca:d5:70:b9:42:dd:73:80:1d:3f:9d:46:12:0a:
a1:b0:8c:cd:3b:77:65:8f:c1:21:85:00:29:af:16:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3A:E3:E8:FA:04:EE:C6:AB:1E:BB:19:BF:96:6B:EA:3C:22:BC:EE
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0b:19:e6:2a:d9:71:3e:f0:e2:31:1b:21:c9:8f:fb:6d:c2:
81:01:63:12:58:25:ef:b9:61:48:95:54:36:0f:23:83:18:72:
8e:9b:84:61:31:7a:d6:ba:79:d0:b6:67:74:21:12:fb:fd:97:
1f:19:b2:1d:9d:43:a0:3c:a6:89:0c:7d:89:c8:c1:03:3a:bc:
3f:8e:e3:9f:61:d3:fc:49:e8:e1:9a:db:bc:c6:d6:d3:7a:f8:
40:39:84:c2:fe:a1:67:85:6c:7f:44:2f:b0:01:21:8d:72:c7:
30:d1:1e:ce:df:12:5d:df:44:64:e3:67:4e:cf:c7:e4:20:15:
45:25:19:1f:33:60:be:8c:f4:92:7a:de:76:ae:c6:4a:80:0c:
fd:fd:43:c4:07:19:91:44:c8:fd:fc:6b:bc:f4:00:7d:a0:a6:
43:70:62:2a:f1:07:0c:8a:5a:1d:13:29:24:dc:52:97:ac:d9:
75:4b:e6:86:e2:6d:33:e5:c7:e5:95:45:f4:80:23:9c:4c:b1:
f8:66:a9:42:44:2b:12:f7:f2:60:4f:bf:27:52:de:79:d3:19:
ba:8d:84:8b:c2:b6:ad:a2:c4:ef:50:5e:e1:e2:93:ef:07:53:
3d:14:cf:68:a8:fb:05:62:eb:9e:02:3d:fa:2b:6d:4c:7d:28:
d3:1a:fa:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBIDtVh1KclqM80hoaleYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjA1Nzg5YTRlODI0YmU4MTAzZGU3NzBkYzI1YzU5M2Vm
M2ZkY2EwHhcNMjUwODIyMjMwMjAxWhcNMjUwODIzMjMwMjAxWjAzMTEwLwYDVQQD
EyhjMzNhZTNlOGZhMDRlZWM2YWIxZWJiMTliZjk2NmJlYTNjMjJiY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywPEF1gIldCO3T0gCZR+nEzj5MtK
1dTfINDFvydX5CpajX6e32QvQPZveTl51Gadw0nGnz+P/alUwR6ff5/6OJzrgfln
KUbnLILTZx3TcTS1acoSrCPpCNHrLFC4arsSC1MhD5Jhg9jiL+b7yAiFjMNpr/8l
NcmkfhQYflS7C3wCapifO/f9jB3MldPe6ZkQNtx12tlKhxFrHB/QIERJTfOdbTxE
M3uD/6bmleBExGTp6DSwnpRwPx3T0T7Jepp+ryGFJXRQ5/3v58UEYGLTYrR2/PYU
aaaDfR1bgsG0/1t5ytVwuULdc4AdP51GEgqhsIzNO3dlj8EhhQAprxYHpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMM64+j6BO7Gqx67Gb+Wa+o8IrzuMB8GA1UdIwQY
MBaAFGGwV4mk6CS+gQPedw3CXFk+8/3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzIt
ODYzMWZiZjVjNjIwLzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzItODYzMWZiZjVjNjIw
LzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuAsZ5irZ
cT7w4jEbIcmP+23CgQFjElgl77lhSJVUNg8jgxhyjpuEYTF61rp50LZndCES+/2X
HxmyHZ1DoDymiQx9icjBAzq8P47jn2HT/Eno4ZrbvMbW03r4QDmEwv6hZ4Vsf0Qv
sAEhjXLHMNEezt8SXd9EZONnTs/H5CAVRSUZHzNgvoz0knredq7GSoAM/f1DxAcZ
kUTI/fxrvPQAfaCmQ3BiKvEHDIpaHRMpJNxSl6zZdUvmhuJtM+XH5ZVF9IAjnEyx
+GapQkQrEvfyYE+/J1LeedMZuo2Ei8K2raLE71Be4eKT7wdTPRTPaKj7BWLrngI9
+ittTH0o0xr6Ug==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:45 2025 by rpki-client