Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: mtZHocF7g5UFbwxPKTKi7fYvj88GT9JPP7qC5ISfM0g=
Subject key identifier: D6:F2:39:0A:82:00:2A:8D:61:AF:DE:0F:84:58:20:AD:5B:10:BA:26
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 019A5074A20CC3454292881170FB6E71697D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 12BB
Signing time: Tue 04 Nov 2025 20:00:12 +0000
Manifest this update: Tue 04 Nov 2025 20:00:12 +0000
Manifest next update: Wed 05 Nov 2025 20:00:12 +0000
Files and hashes: 1: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: ECN/SGPufrH3aNhHG9SnQm90gzMHDFU8bHWMWJUX980=)
2: shQWrGUmL_hnxXrykLqgxjUrJSo.roa (hash: WyhgYBiNi+KPH14FenrkvjOQfAHnL6lB02jl9DUrbbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a2:0c:c3:45:42:92:88:11:70:fb:6e:71:69:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Nov 4 20:00:12 2025 GMT
Not After : Nov 5 20:00:12 2025 GMT
Subject: CN=d6f2390a82002a8d61afde0f845820ad5b10ba26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:15:bb:2b:ac:f0:c6:09:de:9b:ed:d5:0e:
a8:92:27:5d:6b:47:c5:f1:98:20:00:b9:25:65:bb:
21:0d:b4:a1:d7:d7:49:a1:c7:1d:46:54:5d:36:54:
58:e0:dd:a4:fa:8e:30:18:1e:7b:16:4e:39:23:2b:
61:b1:9c:2d:b1:c5:8f:5a:aa:31:29:1c:68:a8:05:
58:be:27:2e:9a:7f:ae:8d:93:63:be:72:f2:ed:d3:
76:02:70:02:2d:65:ac:48:0f:f4:a6:84:a6:db:25:
98:d7:9a:65:b7:42:76:03:94:9e:00:fd:5d:02:aa:
23:0e:4e:7b:e8:8c:10:14:e5:6e:f5:57:a4:79:a9:
53:8c:11:24:29:cd:1a:5b:e0:64:af:40:12:45:bc:
9b:5c:e3:2e:0e:0c:7b:dd:68:d5:b2:95:51:05:b6:
8b:59:1c:72:8e:35:d1:f9:48:c9:88:80:8c:28:66:
4b:c1:18:3b:32:73:75:bf:b6:cd:e4:84:20:18:d7:
36:b1:93:04:90:52:db:3e:d2:bd:fb:fc:e4:f4:c5:
83:d7:ce:36:33:06:67:48:f3:3a:83:19:a1:95:73:
ce:75:99:8f:6a:2a:a6:41:e0:39:d3:14:1c:d6:71:
94:93:c1:73:f6:c4:da:f1:c6:d6:60:35:8a:ec:1a:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:39:0A:82:00:2A:8D:61:AF:DE:0F:84:58:20:AD:5B:10:BA:26
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c6:fa:20:ed:95:24:bd:0d:42:21:49:e2:25:6e:9a:8a:cb:
48:c5:6c:4a:2a:f2:92:ae:33:18:ec:a2:8e:d7:8c:6f:31:2b:
35:ec:0f:b0:0f:c3:de:41:de:e3:78:3e:f9:cf:88:86:90:db:
7e:b9:a9:82:30:e5:d7:40:8e:41:c8:52:9c:00:63:da:fe:5e:
39:24:45:0a:6e:ab:49:1c:82:4c:82:e8:00:4f:fe:57:c1:6a:
e7:8a:64:6c:10:90:18:61:61:2e:73:4a:8a:e6:b3:14:73:4b:
c3:ed:9f:b3:bd:a4:bf:27:63:50:8e:2c:6b:f8:e2:c1:00:e2:
98:bd:5b:ad:17:40:3a:bb:42:4e:42:e7:e0:a3:7a:73:1c:8d:
c4:13:76:0c:c4:24:43:fc:ec:3d:f4:e1:69:45:07:27:a0:07:
ae:5c:4c:fd:90:27:70:a4:e9:19:da:f9:72:c1:dd:6b:24:b4:
d2:70:83:3e:b3:ba:75:84:57:97:d8:35:8a:76:3f:d5:1a:27:
f6:31:b2:75:48:55:99:2a:6b:22:42:b3:14:28:f6:30:c1:69:
d7:5c:5e:fa:f6:fa:ae:3a:f6:9d:48:90:61:ef:a4:52:98:a3:
c4:63:94:6a:8f:66:3f:d6:b7:9a:01:15:4c:d3:89:5d:66:84:
ab:e1:eb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:42:03 2025 by rpki-client