Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: 9b2qvK6e4NtPbNPgvc0zgtPiZvf+jVeXBMtSVZWr3Bc=
Subject key identifier: 2B:8A:96:D7:1C:97:9F:42:1C:00:1F:BE:93:74:93:55:49:89:78:73
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 019A4E18A4D195A597A3196AF089CC78B193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0D08
Signing time: Tue 04 Nov 2025 09:00:29 +0000
Manifest this update: Tue 04 Nov 2025 09:00:29 +0000
Manifest next update: Wed 05 Nov 2025 09:00:29 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: VB4ldDi0r+lvMn+2r8/nxxkhQLJQqUbXt1VlXhENYS0=)
2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a4:d1:95:a5:97:a3:19:6a:f0:89:cc:78:b1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Nov 4 09:00:29 2025 GMT
Not After : Nov 5 09:00:29 2025 GMT
Subject: CN=2b8a96d71c979f421c001fbe9374935549897873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:84:20:0e:0f:e2:8a:37:30:ab:68:09:00:
b2:f5:d5:99:db:1a:1d:95:16:a3:53:6a:65:c3:05:
a4:7d:ee:30:56:43:94:8a:cd:8b:e8:b6:72:73:18:
8f:93:3d:12:63:0c:ac:11:44:77:d6:fc:88:58:44:
88:fc:94:23:97:9f:90:5a:63:b1:ba:c8:71:16:44:
9e:70:c6:6a:54:3d:58:99:ef:3f:a4:91:b6:79:9a:
8d:60:dc:1f:20:eb:a9:e2:99:d2:c3:f5:79:1e:c3:
eb:89:f8:6a:a0:8b:be:7d:58:73:1e:cb:dd:24:95:
f6:fc:ff:f5:f3:0b:f0:b9:d8:7e:00:8d:28:9d:76:
8d:84:87:fa:6e:08:2c:32:89:df:4e:8c:b3:6c:32:
01:78:3c:6d:2d:a5:5c:54:34:73:8c:91:da:b0:6f:
56:10:d0:34:41:89:58:14:38:2c:f0:23:8b:95:86:
72:28:d7:bb:65:90:58:71:82:4e:eb:cc:13:8c:09:
e9:5e:60:47:98:80:8b:64:eb:94:ed:76:34:7e:df:
e4:ba:0c:e8:64:28:63:3d:8c:a5:e2:c3:75:c7:ac:
2b:89:2e:46:ca:aa:66:a5:59:9c:ef:c5:19:61:70:
a7:c0:20:38:4a:47:f7:a4:39:9c:16:ef:05:2b:b3:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:96:D7:1C:97:9F:42:1C:00:1F:BE:93:74:93:55:49:89:78:73
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ed:57:6a:84:54:36:78:c2:19:16:9a:2a:ac:a2:10:7b:94:
c1:53:45:ba:39:f5:c8:ab:2e:b6:cc:10:4c:a3:69:74:d0:12:
87:b1:32:67:1f:79:55:86:12:ed:26:32:cf:3d:29:22:d0:f8:
2d:9d:c9:a9:26:34:5b:90:41:db:14:bf:62:47:04:e3:e3:bd:
59:68:c5:a3:62:64:8a:3a:64:54:25:13:18:f0:ba:a3:d8:d5:
f7:a6:c1:0b:d9:69:2c:da:12:4b:96:2f:55:05:55:cb:da:24:
48:78:14:59:31:97:78:0f:99:3b:b0:63:02:ca:5e:82:f5:00:
f4:68:28:83:29:2f:d3:fb:2f:be:11:a8:79:df:7c:b4:c7:75:
04:1f:6d:51:72:dc:41:68:ad:fd:eb:56:e3:a3:66:59:6c:f1:
92:a3:15:9a:a1:4a:7a:89:48:11:9f:b2:b5:4c:9c:3f:b0:ea:
db:ce:41:a0:bd:d9:bd:f0:7f:a6:03:ce:b6:9f:80:66:55:cf:
8c:9b:bc:2e:42:51:38:63:a2:c6:c6:6c:f6:b7:57:06:51:b1:
71:aa:23:0e:ce:ad:85:18:03:73:a7:ff:1c:7b:20:0a:44:79:
b2:53:12:9c:f3:99:10:db:f2:4a:7e:de:75:c2:c8:ce:b8:6b:
01:08:77:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:08 2025 by rpki-client