Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: 4IbPIVJQ/6JzppNHxjdq/XO2e4iYNkYy6coO3OGeh6E=
Subject key identifier: E4:1A:57:92:CE:C9:BC:D0:81:CF:18:D7:7E:E0:6A:7D:E0:CF:DF:1B
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 0199FD6B38E96ACC336C6734415D4CE3669E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 1685
Signing time: Sun 19 Oct 2025 17:01:26 +0000
Manifest this update: Sun 19 Oct 2025 17:01:26 +0000
Manifest next update: Mon 20 Oct 2025 17:01:26 +0000
Files and hashes: 1: Vm2xySa3TZzRcufAzxt4hRBLNss.roa (hash: O5+b4nw4CSapOt9ANvlpqmvnfoL7HE4era1klJG6PPo=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: gy2ouQ9H5UP3/LKpinhWjHGBVenDQ1dX2t6UizeAtJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:38:e9:6a:cc:33:6c:67:34:41:5d:4c:e3:66:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Oct 19 17:01:26 2025 GMT
Not After : Oct 20 17:01:26 2025 GMT
Subject: CN=e41a5792cec9bcd081cf18d77ee06a7de0cfdf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:01:a5:3a:59:9c:c3:1f:b0:95:b2:2c:38:
92:4c:2b:a2:c3:9e:45:37:a3:6b:22:da:33:91:27:
6e:d3:70:76:af:b3:d0:39:1c:f3:22:ee:31:5a:73:
1f:63:9f:49:13:d6:45:7f:15:61:6f:15:ca:24:f5:
b3:6e:bc:7c:40:2a:61:c9:af:3d:a6:a3:11:7c:45:
59:0c:fb:dc:a2:d4:3b:cd:a7:07:0e:30:06:d9:35:
d3:c4:e5:ed:ed:e4:88:38:b2:8b:6f:61:f7:1d:39:
81:a6:12:3f:cd:2b:a4:f0:b3:83:0c:2c:71:10:72:
1b:a8:5f:22:87:6b:36:3b:ee:28:dc:4f:c9:ca:b9:
59:f8:f8:af:50:0e:0c:1b:f2:6d:07:9f:f8:31:1e:
89:9c:68:19:e1:59:9d:7e:d0:f3:c6:a8:54:95:ca:
0c:3b:3d:54:ac:0b:2e:a3:8b:33:b0:cb:04:c4:5d:
fb:25:8b:b9:d2:cd:8e:64:37:2c:df:7c:46:79:d0:
67:5a:e4:fd:56:d1:d9:4f:3f:19:d0:c0:da:24:e8:
61:ff:41:1a:f1:96:28:ef:08:4c:a1:10:83:04:d7:
ca:bb:ea:31:a4:d1:13:3b:9b:d0:2f:e5:d4:76:a1:
77:4b:2e:3c:2e:26:b4:94:b4:87:92:76:32:b1:a3:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:57:92:CE:C9:BC:D0:81:CF:18:D7:7E:E0:6A:7D:E0:CF:DF:1B
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:33:b1:58:72:31:71:10:56:48:01:2a:40:a0:59:76:4f:9d:
27:cd:3b:64:07:b4:49:d9:2a:28:fb:68:c1:0e:b3:32:6c:b5:
6b:d4:99:53:5b:f5:bd:8a:7f:e6:55:41:e2:61:79:3c:50:dc:
69:cc:85:6e:94:78:b8:4f:3e:a5:2c:21:65:ff:fc:6e:70:7a:
fb:c2:a7:cd:30:b1:3d:bf:7a:6d:cb:ea:d9:41:40:26:46:9f:
5a:29:1a:86:82:a6:d3:33:d7:f4:f3:f7:0a:28:d4:23:0a:42:
6e:e5:be:72:13:fc:4b:89:17:17:39:49:b9:42:ef:4b:ec:6e:
97:7d:49:a9:97:73:d0:73:36:80:3d:0b:91:a0:0f:05:f6:2f:
12:45:fa:fe:8f:fe:9c:2a:5c:93:58:4f:d0:3b:4f:59:6e:e9:
20:80:e6:93:1e:9d:63:ef:aa:ab:9f:74:14:52:33:ba:65:31:
88:5a:ec:39:46:18:2b:1e:30:67:65:c1:c3:5a:5f:c7:f7:4c:
5b:b3:7a:a4:26:0b:fe:e0:db:9b:c9:22:c5:3d:39:26:f2:df:
d8:3b:e5:ba:01:69:18:6a:8b:de:bd:1f:ac:0b:71:e3:d8:19:
fe:46:97:78:8a:d8:8b:15:e6:7b:3c:d2:24:e1:22:95:91:f5:
03:7a:30:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:11 2025 by rpki-client