Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
File: ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft (raw, json)
Hash identifier: r/kBt6/IA8lUe6WJZOyLfxrufb5TeGbMCWN/dCGTxeQ=
Subject key identifier: 02:25:0F:28:1D:97:BD:8A:D9:1B:39:5C:2C:3C:79:39:EC:7F:3A:BC
Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Certificate serial: 019923A0BCAEFF11F117A8C815425DEFF18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
Manifest number: EA
Signing time: Sun 07 Sep 2025 10:02:40 +0000
Manifest this update: Sun 07 Sep 2025 10:02:40 +0000
Manifest next update: Mon 08 Sep 2025 10:02:40 +0000
Files and hashes: 1: Blt---jsIFQZ1r2IAxC-z0fx3gA.roa (hash: WMXyefoTuj2dAlvEBS8JjIjWNUd09eEAuE+gYKf1VT4=)
2: ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl (hash: Vu9EW6Mm98zDW7/vtM6098H9kVYz4I7OFd14iug0hK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:bc:ae:ff:11:f1:17:a8:c8:15:42:5d:ef:f1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Validity
Not Before: Sep 7 10:02:40 2025 GMT
Not After : Sep 8 10:02:40 2025 GMT
Subject: CN=02250f281d97bd8ad91b395c2c3c7939ec7f3abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:67:27:ee:4f:e1:07:94:59:c3:42:01:d1:
a5:ba:af:51:6c:84:ad:ba:98:38:85:0e:c0:3e:49:
c1:f1:4f:91:6b:bd:1c:52:4d:cf:d7:5c:70:4a:ea:
a7:11:cc:81:d8:cd:b6:b5:1c:6f:ac:33:b0:4f:6b:
d0:37:53:17:12:75:25:67:50:9f:82:2c:2c:af:16:
cf:8d:5d:04:62:ca:06:42:3c:e3:e7:64:e2:b9:e5:
29:1f:ca:17:fa:4c:97:d9:a9:bd:b5:be:65:e0:36:
4d:6d:47:c8:ca:2f:cc:2e:f6:62:b0:c0:b2:77:de:
d9:77:18:c2:4d:e9:1e:d3:91:ec:ff:84:9d:90:70:
19:14:0a:00:66:10:91:14:fa:da:59:4f:62:19:78:
35:bc:57:b1:b3:7f:25:94:90:ef:7d:29:36:ca:fe:
cc:76:05:81:60:21:00:60:b3:64:c4:1c:e4:35:d9:
45:40:b8:9a:95:32:92:c0:57:3d:9d:7b:d0:76:03:
80:1b:4f:8e:db:b0:49:e0:64:67:6c:07:08:10:9e:
26:9b:72:11:ae:d3:52:90:53:9f:28:65:23:ff:da:
e5:4c:16:21:25:49:b6:31:83:68:9b:be:91:1c:6c:
df:cf:bf:97:71:d4:29:b8:f6:04:5a:c6:4a:c1:38:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:25:0F:28:1D:97:BD:8A:D9:1B:39:5C:2C:3C:79:39:EC:7F:3A:BC
X509v3 Authority Key Identifier:
keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ac:80:00:6f:4e:bd:54:9c:4f:14:10:63:39:e5:cd:7e:f8:
8f:ce:a8:7e:5d:9c:0d:20:3c:3b:0e:8b:09:7c:7d:0c:45:a0:
fb:dc:18:cd:9f:63:83:70:be:82:d4:d7:23:ac:34:98:d0:0a:
59:38:a2:2f:74:8f:cd:10:60:6f:ad:4f:56:91:a8:c7:b3:e6:
82:f9:bf:23:f7:3e:97:98:fb:85:ea:3f:b6:6d:3f:e3:29:47:
26:11:6b:4b:dc:58:e9:75:5c:8e:75:18:07:f7:ae:16:aa:7f:
e6:a7:56:c2:65:22:2b:1e:3d:f9:91:2e:ce:13:ca:78:91:48:
96:bb:96:0b:b9:77:ae:e1:76:9d:3d:c5:16:36:a3:5a:69:71:
16:15:c6:77:8b:d0:71:35:c4:8a:e9:7a:48:26:3d:09:15:3a:
eb:56:3e:8c:da:d1:6f:33:26:12:3a:ea:11:4c:52:5d:7f:8a:
85:b3:c0:05:15:db:c3:a2:7b:97:1d:d2:d2:f8:e5:ac:07:e2:
61:9f:28:32:23:72:e0:58:cc:b7:54:8d:93:5c:6b:d5:8d:ec:
3c:ea:1a:59:91:ae:9f:ab:f5:16:3d:81:30:5c:b8:bc:11:3a:
99:1a:21:21:4f:50:01:13:13:fd:cf:49:af:8c:ff:35:05:de:
83:95:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:21 2025 by rpki-client