Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
File: ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft (raw, json)
Hash identifier: 5RhmXleUE7yrhqxLkDfk+o43WWd3bULmEhjffYJsURE=
Subject key identifier: 3F:4A:FB:14:D2:E3:C5:A0:F4:61:94:B8:41:1D:61:52:B4:2D:88:9B
Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Certificate serial: 019A71B83CA718D096FCD3DB60F2E300752A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
Manifest number: 0197
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: Blt---jsIFQZ1r2IAxC-z0fx3gA.roa (hash: WMXyefoTuj2dAlvEBS8JjIjWNUd09eEAuE+gYKf1VT4=)
2: ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl (hash: V77byagv2ckDB7MNMeUQ5EsE3PZShAyfSHSV7d/uBZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3c:a7:18:d0:96:fc:d3:db:60:f2:e3:00:75:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=3f4afb14d2e3c5a0f46194b8411d6152b42d889b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:37:2e:40:1c:a9:b2:de:1e:7d:b1:fb:14:
1e:5c:00:1b:80:c5:d3:42:f6:c3:3b:d4:72:a1:06:
29:5e:eb:c4:ae:95:7b:57:54:d4:c3:35:cd:9e:bb:
aa:0c:a6:bf:56:95:6c:3f:bb:b1:21:d9:b1:56:0c:
98:cd:50:74:cf:fa:ae:d8:af:4e:ed:69:d5:2b:27:
6b:77:98:a2:a0:6b:20:00:63:b4:4d:78:b7:22:eb:
9e:cd:28:ca:2b:b9:68:42:c3:2a:76:30:07:34:ad:
d1:1f:16:d2:79:bf:93:2e:92:5d:01:c9:04:6f:2d:
1c:9b:2d:b4:23:8a:b8:dd:cf:20:9a:12:de:59:9e:
60:ff:46:95:13:59:4c:fd:8a:ca:52:7e:f5:b3:50:
19:63:7b:6c:9d:5e:2a:30:64:9c:1d:18:43:72:10:
85:df:92:27:60:5e:be:0e:b4:b5:a6:07:63:7f:9d:
d6:34:c2:7f:62:d6:b5:ec:c5:9c:7b:be:13:ec:53:
aa:0f:ac:f0:2b:97:0a:49:8d:f1:09:f0:4c:8d:2d:
ee:bd:13:62:f9:51:aa:ae:17:7f:ed:86:5c:a2:f4:
15:e6:38:57:ab:6e:fb:fc:7c:23:e9:bf:d4:98:b2:
73:a5:ee:ae:47:27:79:32:d3:d8:dc:fb:f4:6e:40:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4A:FB:14:D2:E3:C5:A0:F4:61:94:B8:41:1D:61:52:B4:2D:88:9B
X509v3 Authority Key Identifier:
keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:16:a2:31:01:7d:61:28:03:fe:f5:43:d0:a5:68:0a:4e:0e:
df:3f:c5:a2:04:ec:c2:b7:7d:ad:f4:28:88:07:31:11:4d:31:
4b:cd:38:dc:6a:a9:93:ef:fd:a4:0f:a1:f5:cc:a4:b3:69:e1:
ec:bd:c7:2f:32:e4:01:c1:a8:ea:bf:12:f7:3a:bc:65:9b:33:
14:33:10:2d:29:ac:55:90:2b:0b:f2:1b:ae:94:39:31:dc:98:
4d:e7:dd:14:f0:2c:91:e5:84:77:7c:9e:81:bd:5d:07:55:1f:
fd:16:b7:3d:7e:c1:81:00:fc:df:6c:eb:24:97:47:6a:ed:f3:
06:75:79:47:64:fe:c4:58:d4:b5:b0:71:b6:73:ee:ec:b2:c8:
0d:be:ab:87:f7:20:58:d5:41:e6:8e:dc:0b:41:41:01:03:c3:
23:67:6a:8b:20:99:27:75:a1:e5:f4:db:a0:5b:4f:78:54:cd:
b3:be:bf:0f:d9:8d:17:99:a3:cd:bc:22:cf:a2:c3:79:e4:61:
b1:28:21:48:a9:33:eb:7e:91:61:0e:75:3b:ca:22:c0:05:fb:
14:e0:f1:bc:98:39:38:29:c3:8e:08:ca:ef:b3:41:bf:6f:f0:
3b:99:d5:d1:c0:b6:1b:3d:44:a9:76:4f:14:c0:00:86:fd:b3:
65:0f:b7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:47 2025 by rpki-client