Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: qDJFteeonbLMUX6BdMOGIHR4u1EY2FWgyLAr4xdBnyY=
Subject key identifier: B6:61:39:DC:E3:A5:1D:A9:71:6B:82:EA:2F:A4:83:64:08:F9:21:10
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 0198D4741C3110DE82FABE42ACC05DB09342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 0454
Signing time: Sat 23 Aug 2025 01:03:55 +0000
Manifest this update: Sat 23 Aug 2025 01:03:55 +0000
Manifest next update: Sun 24 Aug 2025 01:03:55 +0000
Files and hashes: 1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: RSYRp6b/CvavLPdZcaLPwyO/zbH88Asmg9lo1Z8GS+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:1c:31:10:de:82:fa:be:42:ac:c0:5d:b0:93:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Aug 23 01:03:55 2025 GMT
Not After : Aug 24 01:03:55 2025 GMT
Subject: CN=b66139dce3a51da9716b82ea2fa4836408f92110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:4e:0a:21:a0:4f:6e:6a:0b:cd:ad:f4:bd:
10:76:9f:af:25:9c:bc:46:b9:2a:f4:c7:05:99:03:
68:68:a0:00:39:f1:6d:05:f9:2b:53:dd:2e:da:18:
92:ad:6c:11:cc:8c:a0:38:72:a0:aa:20:40:7e:6c:
a6:81:0a:64:c2:a0:77:cc:28:2e:3d:37:9b:06:48:
03:d2:11:3a:8b:49:81:e5:c9:aa:c0:0d:a0:19:92:
32:31:35:04:a3:21:6b:f9:1f:72:37:65:3b:73:52:
3a:18:6e:fd:ef:e8:85:f4:bd:a2:f1:78:70:ab:58:
32:4d:73:35:b7:2b:b3:81:cb:f9:6b:5e:b5:49:0f:
7b:fe:6b:31:50:52:01:5a:1c:2e:e1:b1:a3:51:64:
50:fd:d0:4d:6d:7b:d8:6e:08:e0:dc:9b:5e:e2:ab:
43:d3:f3:ba:ef:e8:d3:08:82:43:e2:d3:db:13:4e:
5d:58:6e:2c:c4:77:86:b5:e7:02:9d:34:87:c8:de:
aa:43:31:99:28:5e:b1:fb:1a:22:0f:bf:47:bd:c3:
5d:c3:80:58:88:f0:7d:5c:f8:b3:08:af:8d:b7:18:
23:ee:46:eb:29:65:90:9a:4c:b0:8f:b6:73:ec:28:
7c:d4:f7:ba:08:f7:fd:22:7c:06:83:26:b6:ec:6e:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:61:39:DC:E3:A5:1D:A9:71:6B:82:EA:2F:A4:83:64:08:F9:21:10
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:29:d8:50:38:2f:6c:5e:53:e5:16:94:6c:f7:f9:b4:0a:31:
32:83:96:d3:69:48:f7:37:75:8e:ea:cb:46:cc:a0:3c:92:0b:
94:b2:1a:da:a4:62:5c:b6:2f:37:e1:29:5f:98:6d:08:e3:26:
92:17:0f:4c:54:43:d3:24:ef:4c:a2:66:8d:88:8f:e7:61:f5:
32:26:ec:0a:fa:71:73:66:ee:c3:f4:e7:cd:2b:97:f9:a8:a2:
06:20:dc:4c:b7:6f:a5:fb:d1:56:21:27:28:0f:f4:fc:52:d9:
a3:bb:9a:36:4c:15:29:90:0c:4f:bb:8a:c4:02:f7:e0:21:2b:
28:07:07:be:28:5e:cc:c4:71:a8:61:58:2f:b3:82:76:10:6b:
43:c9:a1:3f:7b:44:22:e4:d9:ef:60:5f:99:8e:63:80:56:10:
0c:ea:36:41:3f:0a:b9:a4:1a:49:90:7c:35:db:15:7c:fc:15:
a5:f3:45:65:40:84:32:46:c0:e8:f4:f0:12:d9:60:4f:b6:ab:
44:c3:bf:67:16:2e:22:ab:88:d9:b4:aa:fb:08:57:db:a9:8c:
29:18:09:38:7a:c5:8e:b2:a5:a2:b5:d0:b4:5c:8c:0c:8a:4b:
43:46:a2:2b:d1:71:43:1c:b6:a1:0b:ff:39:ca:f7:d3:d1:73:
70:0f:d5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:39 2025 by rpki-client