Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: 5IigOTwWUbUBx6AAQyoAMu3Otc5piUMNBZFckL4uOsA=
Subject key identifier: 1F:B3:10:42:E0:C5:C9:25:CD:2A:3A:AD:2B:E3:87:83:32:F3:9E:8F
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 01987B9B896F3C6A57AB90070C5B42FAE82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 1511
Signing time: Tue 05 Aug 2025 19:00:47 +0000
Manifest this update: Tue 05 Aug 2025 19:00:47 +0000
Manifest next update: Wed 06 Aug 2025 19:00:47 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: Rt3rHfSm+bwO5rZI1w83LxtfmfpPLX7LlGlvrjtYygQ=)
2: cEfVPR5BCH6wIIt0Scz-CewioBQ.roa (hash: uAMhXs6DpT0RTpQCmLK6tpFYd7c3BBCguRMW7ETBwj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:89:6f:3c:6a:57:ab:90:07:0c:5b:42:fa:e8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Aug 5 19:00:47 2025 GMT
Not After : Aug 6 19:00:47 2025 GMT
Subject: CN=1fb31042e0c5c925cd2a3aad2be3878332f39e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5d:1d:55:47:22:93:67:a6:fe:3f:f7:e9:a7:
37:11:c5:44:16:bf:10:49:fa:f6:3f:6f:0c:43:78:
8b:30:c9:a5:48:87:0b:5b:71:c1:17:8f:43:00:3c:
d1:96:ce:a5:bc:29:ea:93:80:5e:1b:e8:6e:66:31:
9b:15:01:58:ea:38:e2:c8:48:b7:35:5c:a0:6f:61:
09:f7:d5:e5:be:c7:02:d1:ac:32:54:c8:44:a8:b2:
3d:67:d4:57:bf:b9:fe:fc:6c:3a:3a:cd:d5:4f:2e:
a1:ca:76:78:4a:fd:21:6f:e0:04:59:97:8b:fe:1b:
b8:df:e3:24:69:71:2e:05:50:b4:88:56:ce:71:4f:
5c:61:b0:cd:5c:5f:12:b5:2b:2a:5a:d0:49:f1:30:
e8:e4:a4:75:8e:58:da:1c:4a:ce:20:fc:55:22:ea:
e3:3b:8e:37:95:c2:19:61:6c:06:21:10:74:bb:a1:
f2:51:bb:c7:9e:3d:33:86:d7:04:12:99:41:40:a3:
c4:55:4b:7a:50:37:35:a4:ec:30:88:95:7e:99:40:
8a:4d:26:01:b2:90:a5:cb:0d:4d:da:15:0f:01:58:
83:22:62:c2:eb:46:e5:78:0c:9a:ee:39:76:02:3b:
72:52:6b:e4:84:00:02:6c:31:0f:5d:ec:90:bc:84:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B3:10:42:E0:C5:C9:25:CD:2A:3A:AD:2B:E3:87:83:32:F3:9E:8F
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cf:0d:bd:28:0d:77:58:f4:71:84:f6:6a:68:37:ec:2c:84:
70:31:9b:50:b8:79:32:83:32:d0:37:27:c6:7c:f9:11:1d:07:
4b:39:3d:1b:5d:b8:84:03:bd:15:e0:05:59:3a:df:8c:70:74:
43:e1:63:98:62:85:f4:20:84:5b:2b:64:18:3c:df:e9:cd:1d:
16:82:b3:ca:b4:f2:70:13:77:57:b7:ae:3f:d2:8e:8c:34:a0:
de:45:6d:cc:d8:7b:c9:97:64:d2:3e:d0:88:18:d6:7d:69:93:
11:6a:a9:a3:c5:09:95:bd:9d:78:0d:4b:8a:0b:b4:ab:74:0e:
14:83:dd:8e:e7:51:9f:c2:8a:87:18:01:69:67:24:33:72:0e:
40:a7:ea:dc:99:8d:a5:e5:f1:ea:8f:a6:cb:56:c5:5c:6c:a8:
cf:c9:26:4b:9e:e5:02:56:ed:82:fc:3d:c1:e4:28:8d:02:04:
8c:75:32:ce:ae:69:3b:e2:01:4d:4d:3a:d4:a5:16:68:18:01:
bf:cb:88:ee:d1:d4:ee:53:21:df:7c:96:46:b3:33:d8:3f:ee:
71:c2:d6:cc:77:f5:10:74:c7:e1:3d:30:95:94:ab:ed:a2:a9:
fc:10:41:d4:68:f3:7a:62:3c:86:69:b9:8f:4d:0a:1b:c0:5c:
32:fb:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:58:21 2025 by rpki-client