Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
File: ymFHjk1lm-zoIDxei6jo-C8EcNc.mft (raw, json)
Hash identifier: Pvy9iay36pc0Vzj68MkAe1X70dl4XsOeLEw3hQp0jT0=
Subject key identifier: E2:02:5F:41:85:27:2E:C2:09:66:1E:62:27:8F:6F:FA:A4:C6:19:FE
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 01991809A9A4C353492CF8283C119BA8A5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
Manifest number: 8B
Signing time: Fri 05 Sep 2025 04:01:50 +0000
Manifest this update: Fri 05 Sep 2025 04:01:50 +0000
Manifest next update: Sat 06 Sep 2025 04:01:50 +0000
Files and hashes: 1: fCuPbMo0pVUEastYIaxWIKHqyhE.roa (hash: MtQRGK51nzIdwlaDSu7nsdbdWy4IiVoIFcct1roF0UA=)
2: ymFHjk1lm-zoIDxei6jo-C8EcNc.crl (hash: 07Q4LL2/nUSgGyoYDsh/FnIWho0UtfUEFGXD4pRCdhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:a9:a4:c3:53:49:2c:f8:28:3c:11:9b:a8:a5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: Sep 5 04:01:50 2025 GMT
Not After : Sep 6 04:01:50 2025 GMT
Subject: CN=e2025f4185272ec209661e62278f6ffaa4c619fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:13:b2:e4:c9:fa:59:d2:64:db:c4:ac:eb:f8:
86:59:1e:f2:96:de:59:57:f7:48:c0:d0:c0:a0:fc:
e9:bb:19:b0:a8:bf:94:71:81:01:38:78:fb:6f:9b:
c7:67:c3:66:68:9e:50:84:bd:4b:3c:3f:79:51:8c:
98:c0:7e:bc:b0:7b:90:3b:1c:37:9e:f9:9f:6f:9f:
f6:24:77:6c:16:f8:2d:9d:c9:2e:2a:0e:64:7b:b2:
4b:bd:4f:f9:ea:35:eb:0a:8e:ce:9f:36:a7:4c:c4:
7a:b1:b5:9d:04:5a:9e:38:64:90:97:b0:ae:5e:ad:
95:b8:39:49:8d:d6:fe:a4:6b:20:d5:80:27:75:ec:
64:1c:62:fd:a8:23:7a:ed:bb:49:ff:dd:70:ed:64:
c9:7c:e3:b3:72:4d:07:fa:0c:e0:12:73:87:e7:5b:
be:6f:4f:2a:71:ca:dc:b6:32:04:4a:ce:36:d4:be:
62:5a:32:06:93:4e:0f:d9:0d:ba:61:10:c4:07:ba:
4a:f2:fd:30:94:85:32:30:3f:20:cc:1d:42:0a:21:
9e:58:02:56:d8:fd:cb:3a:2b:57:d8:23:1b:7d:24:
7d:1c:dc:f6:b6:0f:ad:09:c6:93:ff:ea:9f:dd:08:
a4:46:51:89:ed:01:dc:74:35:fb:69:1d:0d:96:c9:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:02:5F:41:85:27:2E:C2:09:66:1E:62:27:8F:6F:FA:A4:C6:19:FE
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f9:c7:f8:e6:27:82:ea:49:00:cc:83:7d:7c:fb:8f:4c:e0:
13:f0:0a:6c:cf:2f:26:c6:d6:7d:24:e2:e0:d9:ae:44:ab:e0:
29:58:d8:96:f6:e4:3b:aa:f7:0e:62:ab:a3:b4:6b:f3:61:72:
6a:1e:9e:b2:56:84:3a:46:d8:78:7a:6a:37:c4:0c:4e:90:db:
86:aa:f4:cf:00:49:10:1e:72:cf:c9:da:52:58:1e:ba:d5:fc:
4e:b3:a4:cf:62:b4:f7:72:5d:2e:d2:2b:94:e4:6a:d6:99:6b:
1e:ba:6b:b2:16:09:c8:54:57:76:0e:e5:e6:9a:cb:6f:a6:62:
92:67:49:0a:bb:fc:c4:68:36:c0:6b:16:41:5b:5b:4b:22:91:
82:b2:ba:8e:8e:c7:83:8c:c4:72:bb:18:a3:6b:9d:a1:55:76:
e8:83:1b:f0:ab:5d:40:9d:7d:c5:6b:b9:9f:d5:7e:15:bb:9f:
e8:7b:a5:58:07:85:1c:1a:88:5d:71:02:59:b6:fa:73:34:f4:
81:64:1e:54:e9:36:a9:8f:c6:39:ae:6a:a2:16:2a:e8:51:d3:
d1:bb:2d:fc:85:dc:59:3b:82:38:f2:aa:39:20:54:90:7c:ff:
fe:5b:93:a6:3d:a0:f7:42:03:12:28:1b:12:a4:74:70:70:65:
3d:59:7a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:39 2025 by rpki-client