Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
File: ypfglEx3smswKXwtScO-ausnNxE.mft (raw, json)
Hash identifier: WBuIBZrUOa+p/PGLyfOQK4z3mQORBIfBgNxnrYpByMI=
Subject key identifier: A2:6F:27:86:F5:E1:4E:BA:FC:5F:37:6A:C3:54:DD:E3:75:E9:C9:EC
Authority key identifier: CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
Certificate issuer: /CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Certificate serial: 019892C7E3F14CA4F5EDDEA4E2AF05B93AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
Manifest number: 033C
Signing time: Sun 10 Aug 2025 07:00:30 +0000
Manifest this update: Sun 10 Aug 2025 07:00:30 +0000
Manifest next update: Mon 11 Aug 2025 07:00:30 +0000
Files and hashes: 1: ypfglEx3smswKXwtScO-ausnNxE.crl (hash: q865R+0ck1Q2BCKj9XRlbSmMgr9zVL8RhBWFsp69Y/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c7:e3:f1:4c:a4:f5:ed:de:a4:e2:af:05:b9:3a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Validity
Not Before: Aug 10 07:00:30 2025 GMT
Not After : Aug 11 07:00:30 2025 GMT
Subject: CN=a26f2786f5e14ebafc5f376ac354dde375e9c9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:3a:57:e4:4b:12:7c:52:0c:c7:d7:0a:a4:
4f:d7:d7:42:6d:79:c3:66:f0:85:0f:44:6c:85:a2:
37:01:14:63:46:5c:fd:ee:4f:39:0b:7a:95:ed:3b:
b6:57:71:2a:c6:c3:87:11:1e:21:2e:2d:80:2a:99:
b8:24:cc:a9:62:9b:71:39:4a:d6:d3:09:ba:2a:02:
d9:05:a5:09:4c:63:50:34:e9:a5:7c:05:39:2d:47:
e2:dc:a8:ca:b2:ff:bd:5c:31:5e:64:e7:c4:5f:0f:
5f:81:c0:46:2c:0b:b5:c2:06:52:d9:d6:d2:85:17:
f2:f4:4b:b8:65:22:30:ea:17:fb:61:29:a4:fb:dd:
09:19:69:bd:af:71:08:2f:43:6d:36:7a:3c:6c:c6:
5a:09:98:1d:9d:49:c3:10:d8:cb:ee:9e:b8:f0:e3:
4d:54:86:ba:b8:6b:a3:bd:83:b8:9f:29:3f:fa:44:
10:04:2d:89:c0:6e:ca:80:57:d5:64:31:8d:2a:bb:
79:0a:01:90:de:bf:47:0d:b7:69:bc:86:ec:0a:2c:
e0:5a:6c:e6:c1:f4:eb:db:2a:b9:67:46:a4:86:74:
19:88:f3:c2:bf:e0:db:ce:b5:e1:d1:42:67:e1:2f:
38:44:d5:03:57:c4:bc:c5:a4:d4:d8:91:8f:14:3d:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6F:27:86:F5:E1:4E:BA:FC:5F:37:6A:C3:54:DD:E3:75:E9:C9:EC
X509v3 Authority Key Identifier:
keyid:CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:58:3f:62:ce:3e:47:77:14:72:b3:d1:ac:9c:30:7f:0a:e6:
3c:10:22:a8:6e:c4:7b:e0:b9:1d:b8:2f:08:4b:e8:dd:89:3c:
8f:1a:bc:5e:0e:97:1c:db:de:cd:db:92:43:fe:06:2b:90:b9:
cf:bf:fd:6f:60:75:72:f1:55:6e:53:cc:8c:e7:fa:fe:11:d9:
0f:93:0c:6a:f8:dc:52:72:8c:40:57:75:61:57:cb:8f:31:ec:
3c:40:a4:19:8c:c8:b5:69:d2:79:95:01:fd:3d:4b:7e:54:40:
25:ec:8a:52:a2:ea:ac:57:89:de:6a:56:ad:5e:28:3f:b8:40:
4b:5a:57:6c:84:a1:8c:b9:d8:f8:9c:67:bc:33:40:9f:b7:1b:
68:b0:c0:d9:7d:b6:a5:1b:a0:c4:ca:46:a4:fe:e3:5e:70:6f:
ef:8f:42:8a:4d:d2:ab:b2:c0:c7:eb:37:b9:60:00:a7:8d:6b:
25:46:eb:d7:50:9c:a6:f1:a9:fd:fd:60:12:12:b7:b6:fd:da:
31:0c:ec:78:8f:8f:02:30:8b:4c:fb:d4:8d:ff:70:1c:96:48:
c2:f3:6d:7b:8c:0c:cc:8b:c3:cc:f7:26:72:26:11:80:af:be:
d4:98:7f:45:4b:4c:34:d7:08:1f:16:f3:37:71:90:c2:db:0f:
99:04:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:30 2025 by rpki-client