Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: l1vAuZFw5wd4Vs7rnEVSM2oKdb5k779zNLIZ40oqw3M=
Subject key identifier: DD:E0:75:52:A8:C4:54:4C:04:63:69:3F:3D:BA:BA:CD:74:2C:75:7C
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 0199228CF9DAFE599EE20AE5481B9D600F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 03CC
Signing time: Sun 07 Sep 2025 05:01:28 +0000
Manifest this update: Sun 07 Sep 2025 05:01:28 +0000
Manifest next update: Mon 08 Sep 2025 05:01:28 +0000
Files and hashes: 1: luS_MUgmzdMuGS76ZPW7jEugNFA.roa (hash: zmYIzq2i+Cnfy8rt1xmt5c6X8SNFIcSJe0+Xd9kMxgE=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: BRyEPtC2J+ePT6n0uSWLd/HC+SqyrfeLqpqPKAAsdd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f9:da:fe:59:9e:e2:0a:e5:48:1b:9d:60:0f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Sep 7 05:01:28 2025 GMT
Not After : Sep 8 05:01:28 2025 GMT
Subject: CN=dde07552a8c4544c0463693f3dbabacd742c757c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:0e:af:a8:fa:6c:cc:7b:58:b5:4f:7a:52:
e9:2d:67:e7:c0:dd:0f:a1:2c:cc:b8:de:4d:c9:b0:
19:08:c9:c9:3e:d9:13:e8:6c:9c:8b:5c:6f:8d:af:
f1:96:12:2d:29:f4:f1:14:fd:f4:09:41:93:30:f9:
5a:4a:98:32:53:42:3d:54:c5:42:b8:c6:6f:de:90:
2c:04:60:1b:af:5b:0b:45:b9:20:70:69:15:9c:6d:
36:12:f3:ae:1e:f2:59:08:22:85:0a:2c:fd:ad:70:
20:1b:c3:97:f8:7f:d2:15:70:f4:e6:9a:a0:1e:33:
24:2e:fd:03:6d:e8:52:0e:92:87:3e:4d:eb:49:37:
29:dd:38:44:f3:bf:f5:73:c8:78:6f:c7:8c:88:21:
53:da:ac:b9:3d:78:50:07:e6:b8:00:56:c5:3b:91:
8f:6b:98:01:96:c6:0e:4d:58:aa:fe:39:68:5e:c4:
3b:31:e5:f8:07:b7:6a:57:f8:c3:a3:bb:0b:49:ec:
6f:d0:b0:89:7b:ff:80:f1:b4:c2:cf:25:5d:28:99:
40:f3:d7:e7:08:33:76:ba:0e:36:ff:95:a2:74:99:
e4:a9:17:33:ba:79:92:bb:a7:cc:67:c7:1b:ee:9b:
25:f0:9b:53:2c:e7:ce:03:75:b4:26:4a:8a:41:2b:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E0:75:52:A8:C4:54:4C:04:63:69:3F:3D:BA:BA:CD:74:2C:75:7C
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e5:59:69:49:29:df:3c:50:7d:87:19:11:23:bf:dd:31:00:
77:13:20:c3:9c:be:d7:f7:dd:7f:5e:a4:ca:77:23:a5:ed:27:
d8:d1:a4:52:66:c2:45:a8:97:b5:34:e8:c9:76:89:c1:1f:bd:
d0:d6:06:c9:1f:86:84:d6:0d:1b:aa:6f:75:3f:d3:36:79:ec:
2c:6e:07:47:e0:e8:8a:ad:5c:2b:be:ba:ad:c7:d8:29:0d:42:
f1:14:88:a3:08:dc:fb:82:9f:43:22:91:48:47:77:bd:2d:e8:
c6:10:9d:0e:c2:82:d8:3c:ab:35:3a:a7:3d:90:22:f2:c7:c1:
0b:aa:1c:c2:6e:a6:0a:0b:e6:7b:a1:37:3a:c5:fa:94:ed:48:
47:5f:87:a9:c5:80:7a:ec:91:55:bc:85:86:2e:3f:c7:36:11:
f1:64:d0:07:de:57:0e:a0:c0:eb:81:ae:78:8a:cd:bd:ff:6f:
88:dd:42:ff:da:ef:e3:a8:dd:3a:3a:99:1a:e3:cb:a7:1d:a8:
d9:0a:82:05:d2:0f:53:da:02:06:37:96:42:73:a0:e5:84:3f:
b0:d8:1a:87:0a:b3:bf:ec:4a:69:b6:9d:c3:2d:09:9b:3e:3a:
62:bf:5d:79:97:ad:b2:eb:06:3e:3f:ac:1f:ad:44:9a:73:0d:
af:6d:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:35 2025 by rpki-client