Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: jYbCBUz5n9Lzg9bqQBx7BKYuE0im1u1S/G12WxVsglg=
Subject key identifier: 39:BA:F7:AE:A3:8C:72:25:35:FF:F7:E9:DE:E1:B9:6A:8F:E8:14:AC
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 01987B9CFCF5FDEAFAFD3076535512800D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 052C
Signing time: Tue 05 Aug 2025 19:02:22 +0000
Manifest this update: Tue 05 Aug 2025 19:02:22 +0000
Manifest next update: Wed 06 Aug 2025 19:02:22 +0000
Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=)
2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: gz7SMQi8f3QsGAw1HvxzVEBztobdoMBGX05JxvcaoT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:fc:f5:fd:ea:fa:fd:30:76:53:55:12:80:0d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Aug 5 19:02:22 2025 GMT
Not After : Aug 6 19:02:22 2025 GMT
Subject: CN=39baf7aea38c722535fff7e9dee1b96a8fe814ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:f5:fc:79:8f:3d:44:75:10:40:c1:07:22:
3f:10:df:d7:22:e5:64:12:ee:f3:16:b8:b2:fd:f1:
42:a8:6a:a1:34:af:5c:2d:8e:1b:45:2c:58:82:bf:
b0:f6:64:ff:dc:9d:dd:6b:a9:85:95:b8:be:f6:49:
e7:f2:57:d1:c4:6c:57:7c:12:cf:3c:39:d4:78:e5:
b6:d2:0e:a1:64:7a:7f:98:ad:35:47:67:8d:03:06:
89:32:dc:0d:6b:68:1a:1c:65:e6:fe:ca:46:fb:ec:
c2:af:3c:cf:ae:7a:49:48:d5:75:d8:33:17:cc:a3:
fe:d0:78:bc:7e:5d:a1:07:7f:f8:b3:3a:b5:82:48:
52:3d:d4:64:3a:17:06:7d:24:a8:70:27:da:8c:f2:
12:82:a0:6f:58:c2:ac:5a:4c:a2:56:30:22:fb:c3:
01:29:8a:a1:eb:f2:66:e3:bf:6b:aa:8d:e9:84:4c:
75:02:16:e8:fa:01:ef:37:6a:aa:20:37:1e:3d:e5:
c5:79:92:60:86:6f:29:89:4e:72:a7:89:61:33:f3:
94:9e:67:e6:f0:2d:5b:cd:05:a6:7d:74:54:3d:f4:
4a:78:89:bb:93:d0:e3:be:2a:ee:b2:c6:42:aa:d6:
18:f5:9d:cb:e2:3e:4d:de:3d:c3:f7:64:f5:49:99:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:F7:AE:A3:8C:72:25:35:FF:F7:E9:DE:E1:B9:6A:8F:E8:14:AC
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:37:9b:cb:ec:1e:bb:10:66:6a:a2:41:86:9d:6f:42:17:4d:
7a:63:ae:2a:ca:46:76:8f:9b:9b:8b:36:80:31:b2:ee:4d:02:
49:d2:12:73:5f:e5:bf:87:5c:dd:9a:d6:52:cd:40:44:00:69:
d6:0e:53:5b:6f:c2:b0:fc:1c:60:f6:76:d0:95:9e:63:ec:9e:
59:e7:f9:c2:f1:3e:75:1f:db:67:2f:72:d0:75:78:1d:c1:e5:
87:73:b5:87:42:2f:3d:c4:99:e0:5c:ca:41:f2:1c:f0:7b:dc:
bb:c6:f9:2e:d6:e0:5b:23:6f:44:d3:25:a4:e4:c7:71:31:cf:
07:08:6f:ac:c6:48:81:29:44:13:a2:86:37:a0:4b:f7:74:48:
58:fb:b4:ec:33:7b:4e:6b:cc:45:16:30:a3:a8:03:ed:8c:14:
19:6d:91:9d:4c:46:60:bc:60:8c:ad:c8:45:dc:1d:b1:e2:51:
66:77:fc:fc:a9:0b:58:e2:28:aa:52:f9:51:32:80:c7:6e:e9:
a5:ae:72:0b:97:7b:cc:da:ef:a8:5f:90:bf:77:aa:47:dd:4b:
b0:b4:e3:8b:ab:4c:ca:10:da:b7:a4:57:f3:cc:36:0f:19:46:
06:0d:80:ab:44:21:76:93:8e:71:16:22:5b:3e:3b:cc:13:ab:
ce:3c:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:35 2025 by rpki-client