Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier: PZdh1nMHA03gnNdOse5ZwBu4vtYTtyGc3xqai8gb1zs=
Subject key identifier: B4:0A:FF:5A:D7:26:B4:ED:7B:5F:8D:8B:9C:7F:73:41:5E:F4:3F:06
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019A269D01B8F5FF3D27CE1F74FB6B811A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number: 026B
Signing time: Mon 27 Oct 2025 17:00:14 +0000
Manifest this update: Mon 27 Oct 2025 17:00:14 +0000
Manifest next update: Tue 28 Oct 2025 17:00:14 +0000
Files and hashes: 1: DIvBgZwS0Tso3aVf8EICkFleMLM.roa (hash: uFxBmENfxdwwVihL06QRGFulr8RLsRLP+PeZmW4yvHM=)
2: QTI2jWOE2hcS0P8FvwS3gPaVuSY.roa (hash: ym/RyiFastWTZGcEp8UN9E30CRk6eCzYsSVGPj7ydGQ=)
3: aO_whLt90j7emxpJJj2cDf7ZJOg.roa (hash: p39kDWxY5GmkiU51YIoY0fQ+QLGvMq74UJt/qetIBDg=)
4: ciHagOHLSoKpc1FusaVxL3_Ptq8.roa (hash: qVZyRrrycJITJq8e+Oqg9n1s/m1DGfbQ92cmAOV1Z5A=)
5: hebYL6M-z610FLivX7dM3OowSRU.roa (hash: IcjCerJ7GmqoXjZHtfS/CxBpCm6nwEU8LVGTcI76v2s=)
6: mPzH1GA4mIzy3_pZzvXV4kQe-Yc.roa (hash: yzXoljoSrOILZSxkJrlaugQIVos/dTr3tT0FKrN5vnM=)
7: qxGJPGhPdavkt3fDlmKOC0R6Ufk.roa (hash: V4CR5QSqFwKQtj1zVlfNBmPaneN3PqkC+1ZuaxUJeBM=)
8: xIyXjBVQ6PY7db0-kU0MPNqfG_k.roa (hash: hoQlQ49AMRXyr8IYH6xHVURJ84d0LGLOqucCIHUfGFM=)
9: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: PhYLIZPgZRnRgfJbsQlZ61ytUyGC6Ns3+6xK3M2uP64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:01:b8:f5:ff:3d:27:ce:1f:74:fb:6b:81:1a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Oct 27 17:00:14 2025 GMT
Not After : Oct 28 17:00:14 2025 GMT
Subject: CN=b40aff5ad726b4ed7b5f8d8b9c7f73415ef43f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:66:09:64:1f:02:be:cd:cb:12:ec:e0:34:
c6:d5:08:26:03:fc:df:c3:d6:b9:ab:96:6e:af:b5:
4d:15:73:2f:e9:c8:42:b3:1c:34:10:91:04:6a:43:
46:13:42:bc:ee:cc:bb:a2:12:1f:eb:3f:a2:5b:2c:
42:4b:e8:ca:3c:46:c1:31:05:40:15:f6:93:92:6e:
1b:72:d2:6f:82:cf:5f:f2:12:9a:50:1e:16:d8:39:
2a:a6:1d:b6:0a:63:20:95:6b:05:aa:6b:5c:fe:9d:
67:65:7f:fd:7b:98:af:5d:cc:09:5d:d4:8a:30:27:
51:7c:16:42:73:2c:e2:44:77:ca:85:40:44:4e:0d:
b5:5b:39:89:44:69:a8:17:4d:f6:56:57:4a:90:cd:
2f:88:8c:78:be:f7:78:c1:56:d5:49:f3:59:81:5c:
c6:21:81:9a:64:0b:d1:b1:50:25:42:f6:eb:3e:2c:
ac:7a:a3:21:98:e6:90:f5:6b:66:33:87:d8:11:e7:
b1:b5:9f:06:f0:d5:b8:40:d6:5e:a6:b0:d1:ce:06:
d2:03:d2:1a:e7:01:c0:e5:5e:22:de:2a:b9:70:e4:
43:63:6a:28:4b:38:41:67:bf:a0:3c:9c:e9:31:30:
4b:26:b7:ba:d1:30:ba:af:79:77:28:0e:24:75:f6:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:FF:5A:D7:26:B4:ED:7B:5F:8D:8B:9C:7F:73:41:5E:F4:3F:06
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:47:ac:45:67:66:09:2e:0c:b0:41:2b:c7:a4:71:9a:0c:9b:
39:be:2d:fa:04:66:af:1a:f1:f2:75:28:af:e5:cc:2c:c9:96:
5d:2a:8a:90:e7:63:a5:bc:5d:e6:1e:f2:a3:42:64:6c:c8:b7:
ad:cd:6c:00:74:8a:04:99:23:b6:d9:a9:84:60:e3:06:f8:30:
39:1e:a4:0e:77:ab:55:c3:a5:62:50:6e:54:9f:fc:8c:50:b3:
62:b0:b2:38:8f:5e:1d:62:7b:29:19:3a:27:ff:3e:fd:6b:47:
0e:e1:25:1d:90:cf:a4:1c:a0:c9:e6:bb:4a:1b:6f:19:9c:bb:
ef:78:e4:91:40:9e:a4:ed:f0:70:01:e7:8e:4f:5f:5d:e1:65:
c2:1f:79:1c:e5:a7:01:cf:8c:14:88:2b:5f:d9:89:6c:67:d3:
e5:03:a4:bb:5d:9d:fa:84:47:7b:5e:36:68:ae:10:d2:a8:e4:
34:f2:47:a6:23:56:71:14:1f:45:e1:e4:0b:73:0c:af:2f:71:
a1:e1:28:65:f6:6a:a9:f4:9a:74:5d:1a:8b:08:57:ce:6d:6f:
02:15:50:c5:34:7e:5a:0f:4c:c8:c4:6f:54:dc:62:78:d9:20:
5b:0c:da:1f:78:cc:72:81:e3:d9:23:cd:bf:68:2c:e4:6c:cd:
29:12:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:38:29 2025 by rpki-client