Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: 2gxnMhJRNUUGCEbv8ClIkwevsgrvrqcGVtiqPxAy1hQ=
Subject key identifier: E7:7D:6C:D9:2C:8E:67:D9:1E:E6:5D:DB:D3:05:16:57:BA:83:4F:9F
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 0198D54E7437950CF6FB0136A5B129734755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 06C8
Signing time: Sat 23 Aug 2025 05:02:25 +0000
Manifest this update: Sat 23 Aug 2025 05:02:25 +0000
Manifest next update: Sun 24 Aug 2025 05:02:25 +0000
Files and hashes: 1: QPglHGOSHFrs1mgAtq2zwd82Smc.roa (hash: y5xHnZXArsaVabnfSwbndMTBY0pIDvTGUm5JTD4ZakI=)
2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: l9sW1QSvdZur0TkHJh+T8Npodf4CrADMuN8neQS3yaI=)
3: eTJhKe-LETepmtUCJc23KDC15Os.roa (hash: bWxC4iCttKGE5WGBMq9/txv6VyYSnQgWWwgULLvAoD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:74:37:95:0c:f6:fb:01:36:a5:b1:29:73:47:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Aug 23 05:02:25 2025 GMT
Not After : Aug 24 05:02:25 2025 GMT
Subject: CN=e77d6cd92c8e67d91ee65ddbd3051657ba834f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:58:3d:00:4a:a1:c6:77:a8:29:c7:6c:b7:
8d:3b:82:8d:bd:c5:e8:a8:53:92:ad:59:d1:6c:32:
f1:ff:74:53:c4:9c:8e:11:43:9c:68:c9:74:f1:97:
07:3d:dd:47:a3:60:01:67:b9:ec:7d:40:23:44:d2:
62:29:de:ef:d6:8a:81:d7:6d:c0:b7:13:13:78:d2:
56:14:36:0e:c2:92:8a:c6:cd:8e:68:d1:b0:a3:7a:
47:49:5c:29:2e:f8:57:ff:31:bc:77:7c:41:e0:c0:
18:1d:a7:99:29:ed:d6:e6:df:3c:ba:0d:d6:7c:b7:
32:09:c0:7d:a1:a9:6a:e7:b4:43:d4:ac:f6:a7:de:
5c:20:7f:02:a7:13:de:30:94:91:1e:b5:b2:a6:b3:
ef:d3:ee:91:59:53:59:aa:54:94:9a:ab:fd:4a:4c:
61:b5:c0:e6:d7:5a:5b:34:9d:28:bd:ae:f8:53:d5:
70:da:87:78:fc:12:47:83:27:00:be:a2:65:ad:6b:
3b:37:89:94:bc:0f:37:ac:6f:c7:99:f9:bc:61:72:
97:34:f7:ef:2a:5e:16:20:5e:5d:0d:de:18:ee:c4:
39:56:bf:bf:59:a0:1c:3e:c7:29:36:80:63:67:d0:
08:ac:67:55:03:96:7f:4b:b7:56:ea:83:76:ad:d1:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7D:6C:D9:2C:8E:67:D9:1E:E6:5D:DB:D3:05:16:57:BA:83:4F:9F
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e7:38:be:d7:57:e3:f5:80:a4:ff:59:f4:c1:38:4e:63:cd:
62:1c:ed:dc:9d:02:25:78:50:eb:20:05:38:22:64:b6:bc:a8:
b1:63:f7:54:b7:e6:c4:91:bf:56:42:f9:80:d4:67:81:50:c7:
96:1a:a9:74:a0:e6:dd:78:44:ab:83:cc:3f:7f:c3:2e:3b:9f:
f6:68:07:bc:8e:53:c8:b7:37:08:fe:88:52:72:07:04:6b:1e:
e9:7c:b9:f6:07:38:1b:73:c6:46:5d:68:cd:91:8e:d7:52:2d:
9c:ab:4b:a8:da:a5:15:b5:b7:27:14:28:8e:24:2e:7d:df:2a:
76:92:94:b3:4c:6b:4a:6e:60:7e:0d:fd:5c:c7:c5:4c:78:d2:
1c:6c:b6:ee:bc:df:8d:63:b2:e6:c8:66:5b:62:a1:3b:59:43:
88:1a:e0:f1:72:76:57:3d:14:f4:da:34:c4:93:a4:33:bb:f5:
ff:85:43:d3:d8:ea:37:27:b1:62:01:42:5b:d6:df:3e:42:9c:
1e:4b:18:90:31:05:63:33:5f:54:cb:f7:69:51:86:ac:56:bf:
ac:6b:00:8a:e4:12:3e:81:64:53:20:e6:52:93:84:05:37:b8:
79:3a:73:35:62:a4:0e:53:f0:a3:56:a7:46:36:66:11:24:49:
1d:6f:22:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:29 2025 by rpki-client