
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: ammVGiigKMxCFiStLnMzrMM3cR967k0jvhxmj2N6wXY=
Subject key identifier: 9B:CB:06:C7:0D:2E:E9:85:BB:06:60:49:81:F1:F0:90:8B:91:F1:57
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 01988B7CD35F1F19D5720048438F421387B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 14F8
Signing time: Fri 08 Aug 2025 21:01:10 +0000
Manifest this update: Fri 08 Aug 2025 21:01:10 +0000
Manifest next update: Sat 09 Aug 2025 21:01:10 +0000
Files and hashes: 1: 0TtFz6wVP0jqaQNw01V55drmS3k.roa (hash: TMVD5m2P0IJi74IF8JJhCFdWfhDxP8MQCO9QQGNNZr4=)
2: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: IHmi+UrNUGig5S5fCN7Gb5sgWjFLSiqKQsc1S4H3QMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:d3:5f:1f:19:d5:72:00:48:43:8f:42:13:87:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Aug 8 21:01:10 2025 GMT
Not After : Aug 9 21:01:10 2025 GMT
Subject: CN=9bcb06c70d2ee985bb06604981f1f0908b91f157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:58:ec:05:82:7d:9e:83:2f:11:43:97:50:
9b:c9:df:73:f8:d8:96:22:ac:88:62:49:ad:fb:c2:
94:e3:fe:ec:a9:35:bc:57:46:57:a8:73:f2:87:ce:
26:75:ef:f2:e5:49:c4:11:8b:81:b8:82:1f:a2:d2:
f3:25:9a:4e:a6:03:22:05:90:30:b0:5a:ff:a3:6c:
e9:a9:bc:5d:82:35:cf:35:d3:63:25:64:b4:d1:6e:
63:49:f1:a0:12:ea:f8:7f:5c:75:d9:cf:6b:5c:cd:
6c:39:57:30:f5:40:3f:27:2a:86:6d:8b:59:93:99:
41:14:f7:dd:5c:57:e1:86:3a:09:c7:31:a5:f5:1e:
14:c1:16:cd:d2:87:4b:76:29:12:23:d0:91:9d:e4:
9f:c0:11:87:c0:8e:69:61:6d:4f:c8:3f:db:86:d9:
60:b7:dc:db:62:d4:a6:29:42:86:ce:56:d1:3b:58:
97:5b:61:d6:b9:f7:a8:4d:64:d5:82:b9:aa:8e:b2:
02:2b:a7:40:38:bb:f6:ca:a9:0c:e6:d4:7f:88:28:
87:2c:8f:50:cd:a7:ba:2c:97:6e:d5:7b:0d:5b:d8:
a6:da:06:67:f8:d9:c8:51:6d:e1:a2:48:a0:c3:d5:
9f:82:de:77:5b:b0:1b:5d:bd:52:60:6f:26:52:61:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CB:06:C7:0D:2E:E9:85:BB:06:60:49:81:F1:F0:90:8B:91:F1:57
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9c:4f:c5:bc:8f:ed:2f:cc:04:4d:6a:80:0b:b6:3e:e8:fc:
f4:1c:d0:cb:7e:bd:89:cb:8c:01:f6:d1:dc:68:65:f0:b1:ee:
09:62:0c:30:89:71:a2:42:e4:53:4e:6d:2e:a5:a7:6f:aa:e6:
5a:58:59:c2:3e:22:5b:09:1c:c4:5f:a0:96:37:36:f5:d7:34:
2f:a3:8a:49:8c:7c:6a:21:73:c1:fd:fb:03:15:13:89:1d:c7:
a5:5d:09:f8:df:da:5a:30:81:c2:f1:62:83:77:a0:45:54:3e:
64:73:63:8b:cc:89:3c:0e:87:80:75:47:5d:86:38:65:84:14:
53:cc:09:be:3a:75:91:eb:19:57:36:8f:cb:33:28:fd:95:93:
cf:d1:f7:01:d1:d5:14:cf:45:b1:66:91:89:e2:bb:1b:97:22:
9c:c5:86:41:24:5a:ae:9d:0b:65:23:91:1b:41:80:05:75:72:
f6:e6:96:53:d3:9c:ae:f5:2c:38:ea:ab:eb:f1:50:c4:7e:ae:
8b:7a:6b:11:bc:d9:a5:c9:24:2a:13:d1:19:d0:b2:9e:84:46:
c8:7a:da:09:73:de:5e:0c:e3:f8:ac:da:fe:9c:a4:69:1a:b4:
94:41:4c:33:2b:ea:81:48:f0:b0:4b:46:3b:e5:4c:4b:3c:ff:
a7:1a:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:39 2025 by rpki-client