Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier: jk2LSIgDm9Xq1kQgJ98ixaKjWS3DWojs88d2Cu1vi+g=
Subject key identifier: 24:4E:DF:81:35:0F:CE:1B:E0:7B:3A:F3:CF:AF:FF:D7:EF:68:D6:02
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial: 019872CF277179C1496C5C6A76ACD23517A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number: 03B9
Signing time: Mon 04 Aug 2025 02:00:35 +0000
Manifest this update: Mon 04 Aug 2025 02:00:35 +0000
Manifest next update: Tue 05 Aug 2025 02:00:35 +0000
Files and hashes: 1: 9hSS_TvQhCvC8fhsSyJYV-rq3kg.roa (hash: IKnNzHp7XVRMYKLUBlGGbOEdrSNJK7VVnYm2JR8nfXc=)
2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: NH+886vtfM4OOPIhJdG4sykZjGeh5ZMrIDODKlneZQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:27:71:79:c1:49:6c:5c:6a:76:ac:d2:35:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
Validity
Not Before: Aug 4 02:00:35 2025 GMT
Not After : Aug 5 02:00:35 2025 GMT
Subject: CN=244edf81350fce1be07b3af3cfafffd7ef68d602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:72:63:b3:36:6f:a3:f1:17:ed:ed:a6:e4:
b0:b2:f0:eb:26:ea:a0:e7:06:95:84:e0:4f:e4:53:
06:50:e6:ac:f6:bd:d8:9e:ab:72:7b:9a:d6:b6:3f:
63:9e:da:9a:e2:4b:8d:b8:65:e5:e6:eb:d7:89:a6:
7f:df:56:04:c0:be:5e:5e:64:5f:5e:be:bc:0a:00:
7c:ca:10:4f:e8:67:37:42:64:11:ab:ce:8e:2c:98:
8c:2b:cc:9f:6d:6b:0e:dd:f8:d2:9f:98:83:a9:cf:
05:21:ac:07:e5:15:2c:a5:a5:89:20:dd:a0:9d:37:
dd:8f:cf:30:c5:fa:a0:cc:1a:29:07:8b:0e:43:5b:
cd:0e:8f:c4:4e:36:31:d7:c3:26:60:45:2c:48:63:
95:09:b9:85:1a:3b:fd:2b:08:14:e3:3c:23:b6:03:
19:ce:d5:03:e0:59:d3:c4:d7:be:98:d7:87:72:6c:
9d:6e:f7:01:71:18:0e:3b:55:43:0c:36:c8:03:27:
e9:3f:1b:83:34:08:ce:28:e5:4f:39:50:36:b3:76:
2a:5c:1c:3f:f8:02:39:00:6a:e9:0d:b9:eb:c0:f9:
ec:60:96:a2:98:c8:ee:1f:c0:44:75:66:04:32:4a:
8a:96:8d:b8:9f:b6:aa:e9:da:4e:0d:d1:18:90:90:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4E:DF:81:35:0F:CE:1B:E0:7B:3A:F3:CF:AF:FF:D7:EF:68:D6:02
X509v3 Authority Key Identifier:
keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:18:bc:75:f0:a0:68:e1:a6:9a:3e:83:89:ff:18:2b:b8:4b:
c8:b9:3b:c8:58:23:04:d8:e7:c5:fd:72:6f:37:61:ad:e8:cc:
8e:cd:be:41:a9:07:c8:32:34:ac:e7:c9:8d:cb:cd:ec:3b:0b:
f9:82:56:48:55:50:8c:2f:af:78:31:dc:e4:02:1a:45:46:5b:
39:a9:ea:25:be:59:21:e4:b0:27:01:38:55:fe:cb:0e:7f:1f:
13:9c:f1:9e:5a:9e:f5:f2:12:f6:1e:9d:03:d4:03:64:85:23:
f6:0f:8c:8d:28:a2:f4:98:9f:a3:ef:00:e8:65:1d:f7:2e:e9:
e8:2e:13:32:99:02:71:0d:ef:27:1d:b9:6b:22:22:14:ab:ef:
7c:10:06:c3:f2:22:ae:8d:52:8b:97:67:9a:f2:3b:7c:84:69:
90:72:bc:aa:55:e8:f2:f9:0b:9f:25:f2:03:09:b6:38:8f:b2:
96:8d:9d:f8:5b:61:77:6b:4f:d0:34:95:89:00:bf:1e:a7:c4:
b7:86:d5:9b:61:a4:f0:12:9e:00:fc:e2:97:b7:05:d2:93:53:
d5:f9:06:d4:6c:9b:11:85:7b:09:35:4c:e7:51:e9:3c:52:04:
ef:19:2f:b9:5d:ec:0b:03:b6:6d:9f:5f:dc:b3:fd:a9:7c:ab:
9b:e2:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:30 2025 by rpki-client