
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: xZW8gJbe//CO3J0++y3rAW0lPsUk52+1OSC4Njnx2gg=
Subject key identifier: 58:C3:61:E8:4C:28:48:80:75:C5:93:A4:C4:F2:C8:10:68:88:A2:C5
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 0198733DA28158BD931662D2D525339FFEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 04:01:15 +0000
Manifest this update: Mon 04 Aug 2025 04:01:15 +0000
Manifest next update: Tue 05 Aug 2025 04:01:15 +0000
Files and hashes: 1: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (hash: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: tXs7OrUuy8G/X14DrBxOIzf8kM7lzIGukc1J26m0Llg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:a2:81:58:bd:93:16:62:d2:d5:25:33:9f:fe:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Aug 4 04:01:15 2025 GMT
Not After : Aug 5 04:01:15 2025 GMT
Subject: CN=58c361e84c28488075c593a4c4f2c8106888a2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:10:19:e6:ff:4f:c4:45:87:19:4a:b9:66:
a9:bf:aa:2f:c6:9d:74:72:2a:4d:fe:c7:da:73:d6:
33:71:b6:e9:56:c7:ca:b3:20:d3:9d:3d:73:35:a7:
ce:84:b4:47:3f:a1:4c:30:58:04:e2:4b:0d:66:23:
89:2f:b8:f5:8c:b1:01:ff:74:2f:d5:f1:d4:74:fb:
ef:d9:d8:eb:a2:cb:94:28:77:39:bb:fc:e0:f6:cd:
3a:ef:a4:40:c7:14:ca:bc:96:6b:94:75:28:0f:21:
b5:4e:0d:c9:e3:dc:b6:a3:5b:49:9c:d1:ce:88:e5:
76:5c:bd:f3:cf:97:b6:85:0d:53:9c:6f:18:c7:ff:
62:df:50:b3:d2:cb:0d:cb:98:b1:7d:72:3c:f6:73:
3f:90:84:e4:5b:a1:be:15:62:b5:67:95:72:cd:da:
2b:24:66:f1:6d:03:df:90:9b:a1:40:79:f4:66:ba:
e0:7a:5a:be:98:32:7a:f9:8c:ad:af:82:0a:41:eb:
fe:2f:60:65:a5:b5:ee:13:82:4d:22:e5:f5:6c:ca:
02:5c:1b:7e:0e:3c:dd:cd:82:c9:1d:52:4a:16:70:
59:2d:1e:c8:67:da:f4:7f:32:05:60:57:d4:40:ab:
b4:28:07:1c:f6:2f:f7:ff:40:31:23:4a:25:29:90:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:61:E8:4C:28:48:80:75:C5:93:A4:C4:F2:C8:10:68:88:A2:C5
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:90:ab:6e:e4:ac:0c:d7:1d:72:c9:71:bf:13:07:4f:8c:7a:
2c:96:ed:e9:ee:37:3a:58:44:0a:2e:95:dd:d8:f9:63:6d:72:
3a:1c:e5:c8:80:bd:b5:da:ad:63:9b:54:5c:a0:ee:39:87:10:
fa:a2:27:7c:69:94:1a:d8:ba:ec:bd:cb:f2:aa:28:7a:81:d3:
a2:d8:fe:91:f3:64:cd:71:11:b8:59:74:c1:d4:45:65:ce:3e:
69:7a:b5:f8:7b:cf:f1:70:a0:43:53:40:78:ba:a5:38:9b:9a:
3a:1d:08:05:c2:03:b0:25:0f:1c:30:b6:41:df:9f:ce:08:c7:
b4:8d:e3:9c:f2:80:bd:e2:d2:db:69:8f:e5:1a:82:a7:bf:b8:
70:b6:39:9e:3e:f2:cb:72:cd:ce:44:9e:9f:30:58:44:a9:d5:
a4:cc:d0:d3:d4:93:5f:6f:3a:07:f2:02:33:34:75:6a:cf:4f:
f8:56:ba:42:5f:5a:7e:a0:fe:ef:68:2e:a1:4a:f7:fc:63:87:
06:59:f3:35:55:ea:0f:6e:d1:e4:00:f3:71:d0:ae:65:f1:53:
19:84:4d:11:7d:f5:a1:d8:7c:72:54:c3:0a:81:eb:02:1e:68:
04:97:f1:80:81:53:2a:2c:2d:f1:03:f2:6c:22:49:3a:fc:9d:
51:48:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:17 2025 by rpki-client