Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: GlCbkVhIofW9aentZcFtHXaRvIJ1GFuwWLUUghV5qf8=
Subject key identifier: A3:3B:24:00:01:BE:3F:43:0C:8B:FB:36:F8:06:7A:E9:19:15:93:D6
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019922FB11569A01FF0BDCDA54C607800854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 1682
Signing time: Sun 07 Sep 2025 07:01:43 +0000
Manifest this update: Sun 07 Sep 2025 07:01:43 +0000
Manifest next update: Mon 08 Sep 2025 07:01:43 +0000
Files and hashes: 1: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=)
2: _Xj2eknSD0ggywf9BvZfFW4ND5Y.roa (hash: lqrmQ5OQaXV1qMgJ8jG3Tq4DJQ0kTl6M/TLRe7MYJpY=)
3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: OfgkhzjDI8tHJXgwj5pLVSqTAH4Wf8XtonMv1/7GOtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fb:11:56:9a:01:ff:0b:dc:da:54:c6:07:80:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Sep 7 07:01:43 2025 GMT
Not After : Sep 8 07:01:43 2025 GMT
Subject: CN=a33b240001be3f430c8bfb36f8067ae9191593d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:26:9c:eb:cb:15:3b:d3:ad:43:59:41:f3:
a1:09:6e:de:6b:aa:2a:39:f4:11:ff:f7:e4:af:f8:
a9:19:94:73:9a:32:65:c1:d1:47:f1:d6:10:f5:c4:
0a:2a:f2:d5:b7:7f:5e:d1:9d:9d:6f:43:1b:5d:0e:
b3:b7:f2:9b:b7:ad:ce:44:81:c2:41:49:09:46:34:
1d:ed:86:62:8d:03:cc:59:74:00:aa:da:12:6e:fb:
2a:b0:34:e2:92:1d:6a:08:af:6b:2c:19:57:49:d4:
ec:01:1f:95:37:49:07:6f:9f:95:53:95:d1:e2:8a:
81:3b:ca:09:dc:e8:48:96:b3:34:19:96:f4:8e:8d:
23:a4:3f:3f:75:1c:d9:ac:d3:0b:1a:dc:17:50:62:
78:05:2e:67:42:8a:56:2a:da:81:ff:82:c4:12:0e:
36:14:d4:9b:8e:29:f2:40:24:a6:78:01:22:42:60:
3e:ab:e2:a3:96:c6:95:3b:46:9e:d5:2f:12:d6:1c:
0b:3f:08:d9:80:65:53:95:18:52:3c:80:08:ca:a9:
a4:32:d1:67:86:b3:d0:d8:69:d9:af:2b:b1:d2:25:
d2:e3:1a:d8:4a:4d:7a:94:29:68:65:f2:bf:73:2d:
00:82:f8:aa:84:7d:a6:a2:24:51:86:ca:45:89:b0:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3B:24:00:01:BE:3F:43:0C:8B:FB:36:F8:06:7A:E9:19:15:93:D6
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:06:57:ab:36:ce:56:ff:27:67:74:09:b6:61:cb:ad:a3:93:
7b:a9:8e:96:96:bf:5b:de:1f:c8:34:f4:4d:99:fc:6a:7a:74:
18:9c:f4:97:7c:f6:45:90:3f:f5:29:26:27:7c:d7:55:d8:23:
d4:cd:cd:72:86:70:dd:24:c9:b8:20:33:10:95:dd:b2:ab:ea:
fc:02:4e:f3:61:9c:b4:3c:f0:a9:25:55:6c:f7:4c:7b:2f:e8:
1e:83:c4:f3:64:26:62:25:f6:02:a9:62:d7:f7:ee:9d:6c:ab:
3a:6e:a0:6f:63:12:94:0a:18:1e:f9:ba:e7:72:99:46:ab:ab:
c9:0d:3e:9e:52:f5:5e:72:07:5f:c8:6b:e9:ec:8c:5b:13:4c:
29:c7:2a:50:57:e6:a3:43:f6:06:c8:7e:44:c1:32:42:a1:59:
46:18:df:f2:bd:96:65:25:ee:5f:5a:fa:cf:4b:30:0e:47:ee:
8f:80:24:d5:0c:0d:68:29:77:f5:7e:87:b1:5d:0d:3a:e5:ec:
c3:3e:c2:2c:5a:e3:63:53:e7:0c:f4:5c:f7:09:a8:60:c5:38:
b0:91:e5:13:15:03:e0:87:02:12:a1:8c:25:79:dc:1d:12:f4:
69:95:1d:31:3d:a1:28:7f:b4:82:e3:d0:f5:81:77:9a:13:50:
47:aa:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:01 2025 by rpki-client