Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier: rPZBixiV+2mScpLQDSa33B1KK7WHWYIA3/Q9s1+HBh8=
Subject key identifier: 9B:BF:16:5D:F3:4E:10:0B:68:B5:81:2D:43:6E:47:E7:27:85:93:6A
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial: 019A7112E66AAD398B24B3AF61D00988617F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number: 0322
Signing time: Tue 11 Nov 2025 04:00:55 +0000
Manifest this update: Tue 11 Nov 2025 04:00:55 +0000
Manifest next update: Wed 12 Nov 2025 04:00:55 +0000
Files and hashes: 1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=)
2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: KCzvwG/Q6N6+s8CLtZzm5zQWolUikzyIFqTAgUqJcbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e6:6a:ad:39:8b:24:b3:af:61:d0:09:88:61:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Validity
Not Before: Nov 11 04:00:55 2025 GMT
Not After : Nov 12 04:00:55 2025 GMT
Subject: CN=9bbf165df34e100b68b5812d436e47e72785936a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:b3:e9:b8:05:d4:6f:ab:16:21:35:bb:59:
c3:0b:a7:a7:f4:ac:6a:4d:e6:33:38:0a:d3:12:64:
b4:1d:f1:e1:f2:59:23:64:1a:3a:11:0f:c2:c2:87:
08:bf:63:6f:d9:33:92:f2:4b:3a:39:61:27:51:21:
9f:82:75:d9:8d:80:2c:01:08:e9:e2:61:03:49:fa:
ce:2e:40:17:25:a8:7f:dc:b5:64:5f:31:60:46:0a:
bd:c0:87:ac:e5:63:72:d3:2c:b8:f6:b8:cb:65:e9:
83:0d:e2:25:d2:34:00:6b:fb:57:36:c5:14:4f:95:
6b:dc:58:4b:0f:2d:14:26:1b:ea:e6:e2:6a:7e:ed:
8f:49:f1:29:dc:e9:c4:53:b6:cd:d1:c6:0e:72:f8:
c8:96:60:5a:d1:bd:33:14:f4:5d:cf:fa:a5:85:ef:
7c:f1:16:b3:35:6d:a2:2b:a7:13:dc:19:bd:cd:ac:
c0:71:33:79:e1:2e:2c:16:52:45:71:05:0b:1f:d6:
b5:9b:ed:9f:ab:17:e2:11:51:cc:df:34:ca:ca:26:
5c:b5:3f:c1:3c:5d:ba:46:bc:2f:da:54:8c:31:07:
5a:ab:93:e1:42:f1:52:73:90:42:76:6c:0b:ac:77:
87:38:03:8f:5d:5d:23:51:5b:be:da:ad:7b:f5:a7:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BF:16:5D:F3:4E:10:0B:68:B5:81:2D:43:6E:47:E7:27:85:93:6A
X509v3 Authority Key Identifier:
keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ff:73:7a:9e:9b:28:2e:9c:96:0b:15:cd:94:d6:d1:3f:0b:
e1:36:40:ff:a7:35:c3:d5:e3:af:89:b8:59:d7:6b:d0:0b:79:
c0:38:a0:1f:97:70:15:cc:40:14:74:10:47:16:e6:df:85:32:
16:15:60:c9:fe:dd:12:a8:7f:bb:f0:9b:ad:6b:0b:4c:eb:18:
f2:96:b3:60:55:d1:58:55:1f:9f:bb:41:08:d6:a7:ba:89:5e:
cd:80:0b:69:07:91:d9:8b:29:60:ca:84:7b:81:4a:70:f8:4f:
79:02:57:fb:bc:cc:a7:40:0d:d8:9c:61:2c:10:ac:e8:c2:fd:
b1:76:31:49:53:7c:8f:78:8d:86:f5:54:c1:49:fd:4b:ee:c9:
c9:35:50:2d:f4:43:64:ad:8e:af:8d:51:95:93:18:fe:65:90:
0e:5c:b6:2b:b1:4e:d2:8b:eb:7e:c4:fd:a8:5b:53:c9:d7:44:
87:5e:cd:42:19:74:ed:6a:34:cf:cc:18:dd:f6:ac:70:7d:b6:
96:ad:88:05:d2:56:54:5f:d5:fe:da:c1:99:ad:29:25:f5:1c:
e5:82:b5:41:fe:f5:d5:b2:08:2b:46:09:c9:1f:4e:c6:7b:cc:
fc:28:ae:fc:94:03:ef:a9:e0:d0:10:86:a1:4c:20:d1:29:8f:
e2:24:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:27 2025 by rpki-client