Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: A8iC1EuXKDhjYx0EhiQn1F8hsBI01iwsmlpV5TWJjx4=
Subject key identifier: 10:F1:C8:5A:69:07:5B:E8:D7:0D:53:24:17:EC:74:34:37:8E:C8:95
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 019858DA030FF4EA38523B980A48D6213887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 0414
Signing time: Wed 30 Jul 2025 01:02:19 +0000
Manifest this update: Wed 30 Jul 2025 01:02:19 +0000
Manifest next update: Thu 31 Jul 2025 01:02:19 +0000
Files and hashes: 1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: P8XbVxtnqjFjFmw6SUloFhgZ+1SEIKMuA6damCddYs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:da:03:0f:f4:ea:38:52:3b:98:0a:48:d6:21:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Jul 30 01:02:19 2025 GMT
Not After : Jul 31 01:02:19 2025 GMT
Subject: CN=10f1c85a69075be8d70d532417ec7434378ec895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:b3:fa:36:3f:ea:aa:cb:3e:88:9e:af:62:
5d:31:fe:ce:ec:1e:c9:ac:cb:69:12:51:32:77:37:
26:e4:03:b8:77:51:ab:7f:90:fa:4e:ed:94:80:9f:
c9:c6:d5:77:81:18:ba:6a:5b:3c:94:e6:cf:7d:03:
18:0c:9c:9d:0a:dd:ba:4d:7e:8b:94:54:2c:ce:71:
90:3d:43:72:e1:6a:4b:19:1c:88:01:22:ab:20:64:
a6:81:fe:4b:cf:0a:7f:5e:c0:d6:f8:dd:cd:88:5f:
d8:03:eb:62:f3:18:81:37:52:af:cf:56:1e:2f:2e:
1d:e3:2c:bd:66:f4:26:51:d1:2c:18:45:a7:39:49:
a5:4b:31:ea:bd:65:e1:ed:de:4c:fc:41:02:91:ee:
7a:d0:34:8a:8f:2d:29:cc:01:6e:6b:f4:0b:cb:bd:
1f:b1:d2:f9:b3:5d:dc:12:26:c3:81:e6:ad:72:19:
17:e1:f0:32:40:af:bc:66:34:a5:32:a1:5a:fd:76:
08:0c:35:d4:f3:1f:c0:07:b0:18:5b:62:3f:82:ef:
62:fd:4b:fa:8a:26:ba:29:ad:63:2f:65:46:fc:d2:
8a:10:c1:d5:ff:f1:e9:93:39:58:96:f0:32:bf:9f:
17:8c:dd:3d:55:47:19:92:36:8b:75:10:c1:c7:d5:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:C8:5A:69:07:5B:E8:D7:0D:53:24:17:EC:74:34:37:8E:C8:95
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dc:c4:68:b3:7b:7e:0c:81:9e:bd:b5:fa:c8:d9:c5:54:7d:
b1:6a:64:e4:86:db:1c:04:f6:fe:17:3b:ca:5c:37:4c:a2:0c:
68:1b:25:63:8a:1c:ec:52:52:ae:0b:3c:64:e1:8f:36:35:8f:
8b:2b:32:6a:79:fa:91:77:0c:15:4f:b4:c9:62:25:dc:9f:29:
89:1e:0f:32:a7:c7:40:34:9b:0b:b4:88:1b:19:60:ac:23:64:
d4:25:d5:8d:56:c0:23:ae:b6:4c:d8:4a:e5:02:1a:09:97:c0:
fd:ed:03:51:de:e1:74:d3:6a:fb:76:e5:6e:5f:9a:c9:e4:f5:
d0:45:f1:a5:f8:8a:f5:1c:bf:7c:5f:c5:51:ad:bf:60:d5:3a:
9e:32:97:18:b8:31:1c:b9:65:2c:09:3d:0a:be:3a:07:fc:f5:
c1:82:b7:10:d8:df:8c:b4:96:8d:95:45:ae:83:dc:bd:f1:31:
9d:54:b4:bc:6b:7e:2f:27:ef:57:3f:20:dd:4f:42:72:36:51:
92:92:ad:8f:65:f7:fc:3f:af:84:41:f6:71:7e:76:aa:60:79:
30:5f:b2:10:16:c1:76:76:f4:0e:1b:8b:76:45:ca:5e:c1:db:
2a:ce:92:c1:35:25:bc:3c:5d:d0:9b:e0:a2:29:4c:26:2c:79:
39:ce:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:19:56 2025 by rpki-client