Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier: NUrSW1BD+jXi4akohg8xrQ3tkiNy8n0E6+QmhK7rn18=
Subject key identifier: 33:9F:43:B0:AC:9C:D3:2F:54:07:EE:C8:8F:8E:B1:BC:B5:7C:AD:DF
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial: 019922FAEB8D480D1D90758AEC7F05D566B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number: 0275
Signing time: Sun 07 Sep 2025 07:01:33 +0000
Manifest this update: Sun 07 Sep 2025 07:01:33 +0000
Manifest next update: Mon 08 Sep 2025 07:01:33 +0000
Files and hashes: 1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=)
2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: ruwxEOoBXt+0rq8OneeDfWylg46CQkULQ7+ajuwvkYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:eb:8d:48:0d:1d:90:75:8a:ec:7f:05:d5:66:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Validity
Not Before: Sep 7 07:01:33 2025 GMT
Not After : Sep 8 07:01:33 2025 GMT
Subject: CN=339f43b0ac9cd32f5407eec88f8eb1bcb57caddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:47:64:85:7d:eb:9e:8a:e4:5d:10:4a:5a:
3a:ab:cd:14:d1:57:9e:c4:ed:c9:92:ed:1b:44:1d:
2f:e8:db:93:49:42:ec:be:b0:77:20:59:d0:ae:45:
9a:ca:69:4d:fd:5b:f1:c9:90:f3:22:a1:89:d5:49:
92:4b:de:84:7e:8c:8c:2a:57:d1:85:dd:25:83:e3:
0d:5b:76:76:a7:64:b7:06:f9:ef:17:fd:31:0c:29:
9a:a6:c4:72:9c:c4:b7:d8:45:de:a0:3d:f8:e7:18:
45:3c:4c:7c:64:64:7b:13:0e:7b:d5:fb:c6:85:a6:
d0:84:09:e0:c0:94:f4:7d:d6:d6:61:d2:b2:99:54:
8b:8d:46:c1:56:18:a2:66:65:84:59:9b:d2:03:aa:
eb:e3:93:60:da:35:cc:d0:68:8d:2c:aa:7a:83:fb:
cb:18:3f:31:24:7c:e5:0f:ab:24:bd:1a:d0:aa:dd:
95:10:d3:f2:39:53:63:4f:36:f1:a1:7c:ab:a5:37:
62:22:fa:74:e3:03:13:0d:9f:b4:77:ef:ba:17:ed:
53:84:3a:b1:38:1c:4c:24:38:35:74:e7:4b:a9:a1:
44:09:25:b4:9b:b3:7b:43:03:44:48:4a:31:68:34:
ec:fa:92:40:7b:a1:56:de:45:3e:72:65:b7:d9:22:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9F:43:B0:AC:9C:D3:2F:54:07:EE:C8:8F:8E:B1:BC:B5:7C:AD:DF
X509v3 Authority Key Identifier:
keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d1:8e:dd:73:73:f3:45:dd:b6:35:65:66:69:31:f0:fa:fb:
c6:36:81:ae:97:0a:af:5e:f0:75:19:9d:0c:39:64:a0:9f:27:
6f:28:93:dc:e6:20:18:2c:3c:1d:59:36:60:38:7a:d2:f5:2d:
b9:9f:e0:77:b0:e2:95:d4:e3:19:62:8d:ac:b9:3a:58:52:87:
73:12:28:13:30:a0:ce:79:a7:fb:d9:df:1f:c0:13:99:41:70:
f8:58:0c:02:dc:71:b6:0f:75:f7:6f:25:a6:9d:d7:98:08:1b:
4b:91:3a:7b:6c:0d:24:c8:6f:14:1d:cb:5c:9e:ea:a3:1a:a4:
83:3b:cd:12:8c:48:ce:d7:71:b2:43:92:e6:68:a4:99:89:2d:
80:96:31:f1:e6:c6:77:5a:52:75:5a:27:3d:e6:3f:37:61:d3:
39:fd:05:ba:d6:ca:fa:34:83:8b:34:30:ce:05:0b:ad:17:ed:
6f:c5:f6:c0:0e:12:0e:1d:34:7f:ca:7b:09:86:51:f1:c9:e1:
2c:20:ff:26:4d:e5:80:b7:dc:97:72:99:94:49:ac:7a:9d:c5:
7f:2c:86:6e:25:5f:9a:35:d3:0f:17:af:76:df:34:f9:86:bf:
ae:f8:5f:1b:33:72:ca:4b:ec:37:2c:c9:8f:73:7f:db:f8:2b:
55:56:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:27 2025 by rpki-client