Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier: uiv7vcUoiSEQH/VyXSYyh9sMO/yW61vcEaZfJZdhd20=
Subject key identifier: 90:35:D5:D2:2C:72:51:58:2B:94:AD:BA:EE:5E:66:3D:58:0D:F2:20
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 0198D5F19C2A68ADEA33210C05ACB3789AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number: 0FBD
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: 1-Q0Fpm13AkA52n8l5k0ctr3-0Uw.roa (hash: ImmrJcgcy8CHYkqIH5BT8/9I+/F0fh7xK4lUIvl0rVw=)
2: 1-ZL92pBvmLmsFkFwjoPraYV-lmk.roa (hash: 8GeHeU/ZbqCG3e/9dpSkHP1UnCP8xK4IoGXKHOFjl60=)
3: DbXBf5p8tTJG8CWaR7E8NFvBtmw.roa (hash: zvio/AkaDLR3zLqDkEE+8LoA5UKejy+HxnTsa0uQfns=)
4: Ht_HptBql6mw1xzUkgumDZRCGTs.roa (hash: fAFJkBZjVK/h9A5uSjcq4pIcQpbiAe3EL49qs0G3t0k=)
5: N1KahuaH4ywVDh5vnQRZfE-0JBo.roa (hash: Wu4yHucu0ZzzchZ+LFYsPLlBMoJ/1TTM1l51egvuWFs=)
6: RB-kmvtWIZxfX4s_GWqpUMWBav8.roa (hash: mz77dGj7KT4Y12imMMdj/cXmV+eNEz+qEQ+Q1rCDxAw=)
7: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: ljjt/NO2UaoL2gAFWiYqcI+PnZAsXXm77NlJ4aoOOVg=)
8: l9XP7gaCaWGis4j2_HYtNslfm-c.roa (hash: onTtv8prZDY2J8tyTCAIkrUkYzKJXBwYs1TgFOfQ6IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9c:2a:68:ad:ea:33:21:0c:05:ac:b3:78:9a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=9035d5d22c7251582b94adbaee5e663d580df220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:83:72:22:85:8f:79:2c:f2:e5:8a:3f:ab:
a7:c8:d6:35:25:69:21:7a:39:b4:34:96:43:54:f7:
a2:48:5f:90:4a:6d:e5:d2:e6:0e:8d:c6:7e:7d:9b:
64:0b:11:4e:e4:63:e3:91:b0:94:ce:03:e3:dc:f9:
e2:8b:b2:1e:38:ae:30:94:b2:53:2e:bc:3b:80:19:
c2:ed:4b:9e:79:3c:46:c4:fe:9a:e3:04:99:bb:de:
9b:f7:e2:0c:58:9b:57:17:5e:85:00:93:57:93:1e:
40:3e:a6:72:76:0b:3e:39:28:06:bc:d0:c4:ba:b1:
23:fa:da:34:b3:a9:a1:cc:b8:1a:60:a6:db:54:43:
d2:15:6a:9f:3b:aa:3b:3e:14:f7:b0:42:79:13:34:
d4:2d:a9:2c:29:d5:c9:80:cf:3b:54:40:da:07:e1:
07:70:bc:18:bf:4a:9f:59:9a:12:a4:4a:d1:da:70:
e9:b8:6c:43:82:ec:d3:ff:c2:89:02:31:40:a6:c5:
0f:4b:03:78:d7:9e:ff:fb:53:f7:e6:75:eb:39:d7:
61:0d:4a:e9:67:8c:54:bd:46:9a:43:f5:da:3e:8a:
f3:a1:1a:76:0f:9f:33:61:de:d7:bc:26:b3:c5:4d:
bc:27:f1:da:17:89:93:0f:9b:fe:93:e5:de:37:8a:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:35:D5:D2:2C:72:51:58:2B:94:AD:BA:EE:5E:66:3D:58:0D:F2:20
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:45:aa:9d:ac:d9:42:94:e8:02:71:a1:86:1e:01:53:f3:72:
88:f4:9c:3c:83:82:5d:ac:4f:c7:ec:01:16:7c:d7:54:59:c9:
3c:aa:e3:d8:e5:81:72:36:6f:c0:91:74:d0:bc:2c:d2:ff:3f:
e8:64:9e:26:46:d2:48:e6:13:50:36:18:ef:72:fe:c5:80:d8:
7a:f7:7f:f0:1d:c8:7c:a7:02:86:76:b4:78:67:c8:19:d0:d3:
62:e6:af:e1:87:41:e0:cf:a6:26:35:3e:c2:0e:86:e9:cf:d6:
80:6f:0e:87:f4:66:92:5e:bd:fe:c6:26:cc:25:d2:bc:3d:13:
40:e8:cd:9a:ee:88:50:62:1d:3b:f6:05:d2:b1:7f:93:77:0a:
fa:1b:dc:2c:66:8e:d8:fd:26:26:76:e0:2a:3b:be:61:6d:90:
24:ad:be:1a:0f:03:41:19:7c:59:bd:72:f2:71:65:f5:21:7d:
5d:4a:3e:98:fa:52:93:c9:00:0a:9b:e8:f3:b1:b2:1b:18:44:
8b:fb:3b:5c:71:1c:cb:d7:de:73:f0:4b:8d:35:c1:75:a0:33:
6c:1a:1a:46:2f:fd:e4:3f:e9:57:55:02:9e:be:c2:56:43:97:
5e:45:b6:93:f9:e5:47:29:13:be:ce:1c:bf:36:97:af:58:99:
59:1a:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:03 2025 by rpki-client