Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: n1jZY8knCktaRO1qQ6lbRmYxMp3bjfE4H3L3/n57h4w=
Subject key identifier: 96:BA:B9:5F:6F:09:59:D1:E1:40:C3:74:9F:AF:AE:C5:98:CA:2A:70
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 019A7180A015B1707A7B4BD6FC623A0C22EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 052A
Signing time: Tue 11 Nov 2025 06:00:46 +0000
Manifest this update: Tue 11 Nov 2025 06:00:46 +0000
Manifest next update: Wed 12 Nov 2025 06:00:46 +0000
Files and hashes: 1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: QKinoLpggtwRQaFtgn/KrHyBhUqOHdK+8sEQ2iPTT/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:a0:15:b1:70:7a:7b:4b:d6:fc:62:3a:0c:22:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Nov 11 06:00:46 2025 GMT
Not After : Nov 12 06:00:46 2025 GMT
Subject: CN=96bab95f6f0959d1e140c3749fafaec598ca2a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:75:94:69:01:d7:cd:dc:9e:0a:fa:07:a7:
d4:7b:7d:0b:45:0a:22:16:3d:f2:76:94:d8:ef:13:
74:97:97:e6:ce:48:65:d0:d6:1e:8d:58:27:8f:f6:
ba:fd:09:1f:e1:d9:ad:93:aa:d6:6b:22:c9:28:91:
5c:83:6d:26:8b:da:9a:37:f0:c6:10:a0:b6:95:b7:
ac:62:b8:d0:57:07:15:71:3f:a3:99:f3:8e:d9:7c:
a8:a3:a2:08:6b:d8:75:5d:bc:b2:64:2a:f9:86:10:
e0:ec:46:b8:5d:ba:21:f6:21:97:34:5d:33:f1:4a:
17:94:f8:9b:a8:29:c3:76:60:95:d2:55:c1:87:6e:
e8:fc:1d:a9:b7:3f:b4:81:79:7e:94:52:fe:a0:c3:
4d:e6:26:1b:61:48:b2:75:91:91:a5:32:16:8f:27:
ad:ba:b1:45:d7:22:a7:35:40:c0:65:fd:a6:35:cb:
f7:9e:38:a5:ec:43:24:7a:06:24:46:46:92:55:da:
97:93:c3:aa:2c:8d:a0:07:3f:ad:be:27:b8:32:c2:
a2:06:c2:2f:b7:d8:2c:ee:52:2a:bf:ba:81:82:30:
96:d6:c7:2f:df:e3:9f:1a:28:ea:8e:9d:00:7a:d8:
77:b8:d9:90:37:b6:fb:81:2e:26:17:ec:63:bf:4e:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BA:B9:5F:6F:09:59:D1:E1:40:C3:74:9F:AF:AE:C5:98:CA:2A:70
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5d:cf:d8:d7:cb:53:97:58:a1:2d:f8:c9:45:ad:c2:3e:fd:
38:e3:22:56:6c:63:03:3d:8d:3b:8d:7d:fd:a8:4f:1c:6c:a6:
2d:52:57:6d:de:49:15:25:9e:b3:ec:64:a1:42:f0:c4:db:36:
7f:93:7a:c1:4c:fb:4e:81:d0:73:7c:1a:f2:9d:f2:b4:b0:b3:
49:81:73:34:99:d0:8b:8b:78:6b:9d:b3:1c:3b:d1:39:18:1e:
3d:e5:fc:60:56:aa:6c:1e:1a:32:d5:d0:1c:87:31:51:7c:b7:
7b:f0:09:b8:fb:26:34:11:84:4e:b4:f8:6c:64:f0:15:25:44:
b3:c8:44:9c:4b:1f:88:98:c1:9a:c7:2c:9d:46:5c:cc:a2:e6:
f8:c3:1a:68:08:b2:f6:19:f0:4f:ea:68:71:52:d8:7d:70:2f:
85:aa:8f:4c:32:ef:cc:c3:5b:26:bf:d2:33:05:76:32:00:d2:
e4:d7:da:6e:5d:04:f3:23:23:ea:da:61:cf:73:c2:00:50:15:
a8:be:b1:13:c2:38:7d:0a:58:0d:51:54:b5:52:2e:c7:86:d8:
19:1f:18:e7:b6:5a:6c:99:9b:50:f3:c3:c2:8c:5e:20:5d:b7:
c3:92:12:7c:0c:b9:97:6a:b0:0f:ab:fb:90:b3:aa:9b:31:34:
f0:bc:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:59 2025 by rpki-client