Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: tE5Oa9wP8qka90RXBsra7QKm69Pc5EicjpfoxMKxAAQ=
Subject key identifier: 27:E6:6B:C2:A0:46:26:A5:AA:86:2D:7E:AF:F5:DC:56:5F:CC:E7:A5
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 0199FD34868B0F192A3D505F2A61D5F0CD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 1186
Signing time: Sun 19 Oct 2025 16:01:41 +0000
Manifest this update: Sun 19 Oct 2025 16:01:41 +0000
Manifest next update: Mon 20 Oct 2025 16:01:41 +0000
Files and hashes: 1: TUukLx44kjF0H_lfWyE2v7MimXs.roa (hash: hh6d1KEKUecIQgdhGgz8Bqi6uh15mWOy43tdVfLxrHg=)
2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: MoqV8ELxNC4CNIoWVZfEsOAFFDWAof8bGM/I3iHBNto=)
3: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:86:8b:0f:19:2a:3d:50:5f:2a:61:d5:f0:cd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Oct 19 16:01:41 2025 GMT
Not After : Oct 20 16:01:41 2025 GMT
Subject: CN=27e66bc2a04626a5aa862d7eaff5dc565fcce7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:02:2e:48:aa:84:86:7e:6f:67:cc:75:aa:
3b:bb:d7:25:a7:ca:f8:9f:29:78:a2:5f:93:10:85:
ab:64:27:ff:a4:04:5d:ad:de:8f:6e:f8:6e:b8:ab:
ee:38:19:2e:83:0c:66:e7:23:81:ab:ac:2a:9c:32:
9e:f2:50:4f:78:26:b6:9d:2a:b8:74:2c:11:24:77:
8f:a3:50:fa:77:93:08:2b:3a:35:15:a0:25:5f:ba:
d7:a9:2a:92:5c:3f:aa:ae:3d:8d:f6:b6:32:97:08:
c3:18:7f:f4:2d:2c:fa:66:29:c4:96:0a:48:02:e5:
dc:e5:37:02:3e:dd:78:b8:92:3e:2a:93:44:a1:1b:
80:dc:b2:8d:92:85:13:9e:2b:cd:53:20:f6:4b:9d:
eb:1a:b9:aa:1d:bc:73:e7:d5:f3:fa:52:df:72:63:
b5:b9:ab:09:37:5b:7c:bd:57:14:46:49:03:45:f9:
b3:06:da:1c:ea:4d:d9:7f:3b:5e:87:7e:e2:c8:11:
2f:a6:58:17:0f:e9:cb:77:b0:7d:7c:fc:2e:57:19:
f6:d5:d6:88:68:24:72:86:ae:f7:53:87:c6:85:1a:
29:a7:90:ad:7c:70:37:12:41:49:88:96:d7:69:f0:
41:73:26:89:16:5c:35:79:ac:23:24:6e:40:93:f2:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:6B:C2:A0:46:26:A5:AA:86:2D:7E:AF:F5:DC:56:5F:CC:E7:A5
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:eb:3f:95:6d:fd:49:8d:08:a9:fe:60:f0:84:ac:7a:f0:42:
1a:41:10:8a:9c:82:51:b2:05:8b:07:97:ff:af:6e:93:1e:d3:
b2:bd:5d:cd:41:5b:6a:d8:d1:d9:35:0c:61:02:f3:86:e3:d2:
e0:d0:d7:0f:57:fa:31:90:f9:dd:3c:89:ce:7a:61:df:0f:9b:
f2:2a:d2:a3:fb:6b:1c:a9:c8:b0:d4:5b:73:c4:b7:05:fc:59:
cc:b5:75:71:31:69:21:77:b3:9e:c1:27:b8:ea:cd:6b:51:38:
86:42:59:bf:cf:92:3d:30:5b:94:06:d7:bf:0b:c8:69:d8:87:
d3:36:65:cd:31:20:f0:5b:b5:4b:2e:bb:b1:20:4b:02:44:21:
4f:c8:86:ee:66:de:51:16:fa:d8:20:a3:de:5d:72:70:4e:bc:
71:74:9f:6f:24:4d:e3:09:f1:93:c8:e3:5f:f0:19:89:37:43:
64:5b:7b:72:98:0d:c2:d5:34:f7:3c:31:02:95:2a:1d:37:56:
78:1c:f1:ab:6e:14:cb:46:d4:1c:e0:a5:27:8a:4f:3b:c1:86:
6b:07:28:96:a3:90:7b:d2:5e:e2:1c:85:42:0b:01:7b:de:c9:
55:6b:6a:4e:2d:41:11:9c:19:9a:c5:c5:25:70:81:8e:7e:e5:
9f:97:d4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:37 2025 by rpki-client