Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: 6iP7PcZy579Xx4inDhw5l9w2y9pJQrR3SfOwUWrE8l4=
Subject key identifier: 03:39:40:AB:7D:D5:CD:E8:99:FE:F4:88:F3:D5:35:41:B5:CC:6E:03
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019873743997E5A149B82B47C904DD7717C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 145E
Signing time: Mon 04 Aug 2025 05:00:53 +0000
Manifest this update: Mon 04 Aug 2025 05:00:53 +0000
Manifest next update: Tue 05 Aug 2025 05:00:53 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: dAA42NVy9ktxYOBVArBCZP0pm/AEzH7vBKU7vsO6Yvs=)
2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:39:97:e5:a1:49:b8:2b:47:c9:04:dd:77:17:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Aug 4 05:00:53 2025 GMT
Not After : Aug 5 05:00:53 2025 GMT
Subject: CN=033940ab7dd5cde899fef488f3d53541b5cc6e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:2a:ce:4d:5e:5f:3d:52:e9:bc:09:99:5a:
cd:59:70:24:75:c7:06:40:a6:a2:9d:01:d1:d0:e5:
d5:5f:a7:8e:12:7f:ed:3d:56:0e:67:a2:50:33:db:
20:fa:1d:e4:db:26:d7:43:45:e9:4d:f6:50:91:ce:
85:fc:5a:80:ff:3a:f1:d0:c7:34:00:99:cb:da:26:
77:6a:5f:24:fb:24:db:be:6c:7c:00:93:cb:f8:25:
e6:29:2d:a2:27:71:98:5b:fb:bd:3c:5b:5c:ab:dd:
de:9b:ca:25:20:95:f1:8c:e2:f5:65:19:e2:70:e7:
36:14:24:86:1b:c9:b7:6f:a4:18:16:75:2a:a8:2b:
8b:41:af:92:74:95:5a:f8:14:1a:8e:ec:e3:10:c6:
c8:bf:db:be:70:d2:4f:9b:4f:8e:59:28:6d:53:c2:
1e:3e:15:39:6c:e9:e3:90:ac:bb:bf:c9:9d:b9:52:
31:b9:cb:01:72:ea:9e:f0:11:7b:13:f3:4c:02:0d:
b6:32:55:9f:c2:0a:21:ea:31:66:84:b0:fa:5b:bf:
d5:ff:d2:9c:3b:9b:4c:37:f8:69:8a:f0:93:ae:fd:
8d:58:1e:8a:2f:35:78:de:56:db:d3:da:2e:b7:6c:
e5:16:d8:fe:bd:6a:1b:5b:0b:ca:ac:9e:6a:62:97:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:39:40:AB:7D:D5:CD:E8:99:FE:F4:88:F3:D5:35:41:B5:CC:6E:03
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:79:bf:61:ed:4b:8c:03:a4:78:76:00:f1:6a:5c:4b:e8:43:
5c:c0:91:51:03:54:8e:7f:ed:61:c5:d3:f4:c4:90:85:7b:8f:
2e:d0:f0:42:41:77:89:c5:10:72:3a:78:0f:08:b2:1e:7a:66:
9c:93:f8:f3:ca:ee:33:f9:d4:67:82:7a:04:a0:1e:61:c3:0a:
76:8b:55:32:43:a6:b7:f7:8c:94:07:f5:e8:3e:34:15:28:81:
63:1b:b8:29:15:84:4c:bf:2c:92:fc:01:95:bd:32:fd:81:d0:
5c:de:3d:b8:df:8d:ac:7a:96:4f:9a:1a:aa:87:32:83:9c:88:
47:cc:dc:7f:11:5c:a0:70:da:9f:ce:fb:93:fd:da:df:d8:4e:
08:41:f5:f1:cc:0a:9c:5e:43:68:d2:93:c4:fd:b3:f2:55:60:
ec:05:0e:a1:24:46:a3:c7:53:3d:96:33:f8:cd:20:31:76:d1:
98:9b:03:1d:cc:89:77:7f:1b:93:67:80:9b:32:3c:44:73:ad:
d4:dd:8c:79:9d:7c:3a:de:c0:ee:b3:a3:e5:c1:76:0c:72:ef:
c3:c1:17:f4:aa:61:b2:7a:76:7f:c2:4f:05:41:57:4d:2a:3b:
f2:f8:ba:36:3b:bb:5d:d1:50:3c:4e:ab:25:41:2e:4a:05:88:
4d:2e:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:51 2025 by rpki-client