Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: 39XwCCoe9yeduguQDaIMcTMSe9FoteTB1DbratXMds0=
Subject key identifier: 42:C5:79:26:A0:48:F2:CA:95:EA:3E:10:D5:90:62:78:CE:71:BD:56
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 0199FAD7EE73CEC6AE7065B49F7E41E9259B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 0760
Signing time: Sun 19 Oct 2025 05:01:19 +0000
Manifest this update: Sun 19 Oct 2025 05:01:19 +0000
Manifest next update: Mon 20 Oct 2025 05:01:19 +0000
Files and hashes: 1: QPglHGOSHFrs1mgAtq2zwd82Smc.roa (hash: y5xHnZXArsaVabnfSwbndMTBY0pIDvTGUm5JTD4ZakI=)
2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: 5gnHTHqcj1YJEhX1hpaQ6ux+PYhCmuy99lJJdBPdGi8=)
3: eTJhKe-LETepmtUCJc23KDC15Os.roa (hash: bWxC4iCttKGE5WGBMq9/txv6VyYSnQgWWwgULLvAoD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ee:73:ce:c6:ae:70:65:b4:9f:7e:41:e9:25:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Oct 19 05:01:19 2025 GMT
Not After : Oct 20 05:01:19 2025 GMT
Subject: CN=42c57926a048f2ca95ea3e10d5906278ce71bd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:14:64:22:7a:54:8b:db:5a:22:49:5f:7c:
cd:ac:ba:2e:e4:84:be:b2:99:4c:0c:0c:f2:c5:9f:
c3:86:9a:e9:6b:de:31:73:cf:ce:ef:50:4e:71:8f:
b3:8c:59:3f:42:02:21:41:3d:58:b9:53:ca:c4:79:
fe:56:bb:f4:a6:2a:84:9c:19:b4:06:4a:f4:33:c0:
27:36:84:f2:93:6e:72:eb:9a:f2:c0:53:dd:67:4c:
45:cd:fb:6d:57:42:6e:95:e8:43:92:85:2d:0f:28:
f1:47:e8:81:8d:8a:01:4d:6f:1e:00:67:fa:02:f2:
c5:d6:5e:ad:ee:5f:1c:33:95:35:de:bf:f1:21:04:
53:ea:bb:55:74:93:f5:28:e1:9a:5f:6c:af:27:bf:
1a:d8:34:5d:5d:37:09:c1:76:bb:c4:38:0d:b5:cc:
09:79:88:d9:1e:f4:b7:9e:a2:98:36:fe:92:d7:04:
63:83:43:24:e7:eb:94:3d:d2:ab:bf:40:01:35:c9:
db:c1:d7:c3:01:2d:16:f7:45:06:a7:bc:97:71:e4:
0f:7c:a2:dc:79:79:89:d3:91:26:30:43:45:75:f6:
51:80:23:20:6c:0c:12:3a:46:51:a6:a6:fc:8f:ca:
5b:60:5a:f5:5b:7d:1c:4b:1a:45:0b:fb:2a:6e:df:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:79:26:A0:48:F2:CA:95:EA:3E:10:D5:90:62:78:CE:71:BD:56
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:82:a8:2d:8a:8f:2e:61:bd:7d:4b:c2:a2:03:be:aa:da:cb:
0b:e7:65:88:41:6a:8e:e2:15:7f:47:92:d6:dc:79:e2:d6:5e:
41:1a:dc:73:ff:94:9c:8e:a1:52:0c:39:c2:46:30:c7:e9:e0:
a5:b5:0c:2c:a3:7b:44:83:b2:3a:13:b6:1e:d8:09:f8:48:14:
8f:68:70:a7:5a:e4:95:e2:11:4c:61:d1:e8:66:cd:bd:f9:c8:
e4:e3:c0:dd:42:9e:f4:08:ed:b4:41:f1:5a:df:61:f8:43:16:
50:17:ea:6b:10:5d:1d:8d:65:e7:9c:07:54:f3:0b:12:b7:99:
c2:cf:83:35:b4:d2:e6:79:73:0b:34:a3:06:92:3e:95:f6:9f:
ee:0f:41:7c:82:09:5b:b8:5b:94:ab:ff:cf:af:3f:b3:50:8b:
0c:f4:1c:e8:39:e5:d6:b2:8f:bd:91:32:69:16:0b:3d:39:e5:
3c:c0:89:20:95:86:13:37:d6:ea:c7:81:6c:ad:d8:d8:68:49:
40:80:c3:f1:54:5e:1b:ef:4f:57:ef:34:e9:76:1b:5d:a9:65:
be:d5:58:bd:9c:c3:7f:92:e2:66:7e:bf:f3:64:08:da:3e:93:
bc:91:50:1e:e7:94:61:31:f1:1e:a8:a7:4b:27:e9:d8:c0:07:
27:24:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:42 2025 by rpki-client