Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier: WaFM/yV1Kvl/sZiqD+UaztV4AFI9iKLuEqRnEMpwIUc=
Subject key identifier: 0D:C5:A7:AB:58:BE:12:7E:06:4F:04:EC:B6:21:81:13:5D:04:E7:F2
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019923A0951A1E5D1EDD2887166BF104C3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number: 0FEC
Signing time: Sun 07 Sep 2025 10:02:30 +0000
Manifest this update: Sun 07 Sep 2025 10:02:30 +0000
Manifest next update: Mon 08 Sep 2025 10:02:30 +0000
Files and hashes: 1: 1-Q0Fpm13AkA52n8l5k0ctr3-0Uw.roa (hash: ImmrJcgcy8CHYkqIH5BT8/9I+/F0fh7xK4lUIvl0rVw=)
2: 1-ZL92pBvmLmsFkFwjoPraYV-lmk.roa (hash: 8GeHeU/ZbqCG3e/9dpSkHP1UnCP8xK4IoGXKHOFjl60=)
3: 6rkR-BBPpjGCoeX_YAqv5KrJW6Y.roa (hash: semgquQlEGADPqa3w63dRwF4Un/PAwUCdRww4JGKAZ8=)
4: Ht_HptBql6mw1xzUkgumDZRCGTs.roa (hash: fAFJkBZjVK/h9A5uSjcq4pIcQpbiAe3EL49qs0G3t0k=)
5: N1KahuaH4ywVDh5vnQRZfE-0JBo.roa (hash: Wu4yHucu0ZzzchZ+LFYsPLlBMoJ/1TTM1l51egvuWFs=)
6: RB-kmvtWIZxfX4s_GWqpUMWBav8.roa (hash: mz77dGj7KT4Y12imMMdj/cXmV+eNEz+qEQ+Q1rCDxAw=)
7: Xs2LqzeWMw_BEeWsETVp2PibTQg.roa (hash: wPUJOwbwYIu3P5PGi8O5gCoo6gVEJbXntzahzJLryE8=)
8: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: 0lfE5EIEIpZ++QNELKM5JH3DxragS6lF6qvv/uaWtow=)
9: l9XP7gaCaWGis4j2_HYtNslfm-c.roa (hash: onTtv8prZDY2J8tyTCAIkrUkYzKJXBwYs1TgFOfQ6IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:95:1a:1e:5d:1e:dd:28:87:16:6b:f1:04:c3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Sep 7 10:02:30 2025 GMT
Not After : Sep 8 10:02:30 2025 GMT
Subject: CN=0dc5a7ab58be127e064f04ecb62181135d04e7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:ac:3f:a4:e6:1a:53:5f:c4:04:e1:e0:94:
d6:8b:c6:a4:cf:26:e3:da:f7:b4:5b:35:de:f4:dd:
b0:ac:1b:27:ea:5e:90:1e:a4:63:45:ba:21:1a:bf:
de:94:27:82:c4:68:87:1c:ee:c1:33:fb:35:c1:70:
49:4a:0c:7b:dd:8d:e5:56:0a:d9:d5:31:b8:e5:44:
4f:90:a8:ff:c8:42:2d:96:e1:b5:cd:20:8c:03:55:
54:de:6c:0e:fb:50:27:3b:98:b0:6a:97:c6:6d:55:
e7:c2:56:15:c6:ff:cc:54:9e:09:ac:63:43:8f:e2:
4a:47:15:b6:e1:f9:1f:aa:a6:8c:45:cf:72:83:b6:
22:c7:9c:12:7f:27:51:bf:ca:12:d6:9d:83:01:d1:
1d:47:91:6b:af:5d:99:ba:11:0e:ad:7e:06:ab:20:
b4:41:0e:c6:52:69:21:73:72:7b:55:85:13:27:01:
4c:a5:97:66:2a:78:5b:f6:31:a7:50:77:ed:45:1e:
0a:41:3c:55:ae:87:8e:3d:82:61:b3:78:2f:d7:e6:
9c:a3:69:b2:3d:cf:55:62:c9:e0:27:29:65:2f:7d:
83:d8:c2:9d:9e:23:70:bb:8c:3a:e1:40:a7:e8:cb:
b6:95:b1:11:01:c5:3d:5f:77:4c:79:5b:e9:a2:ce:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C5:A7:AB:58:BE:12:7E:06:4F:04:EC:B6:21:81:13:5D:04:E7:F2
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:92:3b:de:36:5f:6c:c3:b3:6b:ce:19:c7:5f:3c:40:00:2a:
37:03:02:c2:8b:0d:b5:4b:77:14:91:e6:82:4f:a9:1c:e7:ef:
07:b5:e4:70:eb:98:e8:bb:fe:b4:52:f7:25:cf:1d:4e:54:47:
7b:16:a1:2f:55:47:d5:6f:f3:1b:d1:ab:fd:4a:25:bf:c0:e2:
25:3f:5a:58:c9:a4:20:da:b3:02:7a:9b:65:2c:3e:46:9f:b0:
32:61:11:17:dc:53:ba:40:7a:7f:6d:89:53:ed:11:55:fd:8d:
4c:11:22:7b:68:c1:57:4b:d4:f3:b4:6f:43:b5:d6:48:7d:05:
3f:39:50:d0:e3:1b:c5:9d:66:43:21:7d:53:5e:58:5a:71:33:
5c:12:7b:d0:e1:3b:fa:0a:92:c0:f1:21:c2:8d:59:ae:c9:b7:
2b:3a:c9:dc:23:d3:28:c5:a2:4e:4a:2c:16:95:2a:f5:4a:a1:
de:1e:9d:57:cd:b2:75:cd:bf:d3:c3:45:04:c0:0f:21:43:6c:
e0:9d:82:7e:a0:c0:aa:d1:ff:15:c2:c1:12:0a:5f:be:f7:a9:
33:66:a9:eb:6e:48:8d:96:b3:d9:7f:a6:97:44:6b:18:0a:b3:
90:72:ea:be:63:fa:1b:d1:1c:10:68:60:e1:c2:34:98:92:0d:
c2:79:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:55 2025 by rpki-client