Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: xMJv5cgV+HPu7ZshcoX6G+Rgdc2fv9gWKwWwWiQcSaw=
Subject key identifier: 2F:A1:40:1B:2C:3D:8A:80:90:66:B9:90:DC:CB:87:F3:F7:5F:14:F5
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 0199FBB3761EE55AFC3AF26E2AC3B539174B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 04ED
Signing time: Sun 19 Oct 2025 09:01:06 +0000
Manifest this update: Sun 19 Oct 2025 09:01:06 +0000
Manifest next update: Mon 20 Oct 2025 09:01:06 +0000
Files and hashes: 1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: mOVNJVR2roMp26fUju2h0dxRXl3HXCQyVWnvRm0dnxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:76:1e:e5:5a:fc:3a:f2:6e:2a:c3:b5:39:17:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Oct 19 09:01:06 2025 GMT
Not After : Oct 20 09:01:06 2025 GMT
Subject: CN=2fa1401b2c3d8a809066b990dccb87f3f75f14f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:1a:1f:83:95:ff:d0:8c:2f:43:b0:c9:4c:
3f:55:9f:5c:e7:6e:52:0d:1d:38:72:c2:d9:ef:4b:
52:4b:21:fc:3b:d9:93:c4:6f:22:68:1f:f6:2d:71:
a8:e7:bc:78:ae:39:3a:1d:d4:23:d0:74:e3:98:f8:
a6:fb:a7:98:c5:57:28:8a:ec:ae:3c:43:26:4a:84:
33:47:e7:81:76:f6:92:5b:72:8a:d9:ca:d0:93:7e:
0e:9b:17:f6:ec:01:0a:ef:e9:f0:c6:f0:74:0e:89:
86:9c:f7:b8:bd:c5:70:37:de:ec:f4:c1:78:43:8a:
5b:df:78:98:70:8a:16:d9:18:48:92:fc:7e:b6:2f:
d9:76:55:48:b8:4a:5b:65:e3:02:7b:a6:fe:89:aa:
9c:6e:22:4c:d4:4b:6f:7d:7d:ea:1f:45:83:37:ca:
de:0e:97:e3:71:1a:a8:27:1d:cd:88:27:7a:95:20:
4c:3e:c1:b0:b1:98:94:bc:01:f6:4e:aa:6c:d8:5f:
49:1a:f2:13:db:63:83:f6:ba:c8:67:34:12:4d:2f:
5c:08:5a:95:96:3b:26:9b:57:d3:f6:02:92:71:0b:
bc:c8:54:28:8f:a1:f3:c5:d5:37:c5:d9:c6:9a:b4:
b8:cd:7e:fe:a0:a5:f7:a2:da:cf:e0:7b:ee:4b:61:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:40:1B:2C:3D:8A:80:90:66:B9:90:DC:CB:87:F3:F7:5F:14:F5
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0b:49:aa:8e:62:b1:7b:33:7b:b7:1b:72:e4:c5:59:f6:3a:
12:ac:8b:bb:cd:90:67:7d:50:70:5e:9a:f7:ce:ab:db:45:80:
13:07:3e:32:7b:2a:b1:e5:6c:de:2c:5c:26:5c:7c:b5:aa:80:
bb:33:ff:c3:75:36:62:3c:e4:e2:ef:0e:b9:39:32:37:9e:f3:
8d:1a:3b:99:4e:55:6b:bf:56:10:81:34:90:42:8f:98:ba:97:
f6:64:8f:74:0e:0f:d7:5a:6c:ce:0a:bb:b9:3c:46:33:80:3d:
82:bb:7b:08:bb:76:52:eb:73:dc:f2:bb:2e:ee:d3:0c:88:51:
0c:1c:84:f5:29:57:63:43:ad:bc:2c:2c:fc:24:f6:c6:9c:d7:
32:6f:b9:b8:2b:45:89:46:c8:f1:69:9e:fe:b9:05:11:c5:eb:
89:b3:e8:25:e4:64:ee:a6:73:30:80:58:4c:53:c4:14:61:5b:
1a:02:83:26:6f:c9:ee:85:2f:d0:6e:e7:ac:88:b0:2f:a5:95:
1b:42:c4:91:71:bc:20:3c:1d:b6:f7:15:12:93:8d:03:c3:f4:
93:c8:07:16:8c:38:68:1f:3a:f1:e7:1c:59:2d:52:05:2b:c3:
3f:93:5d:a4:51:96:79:91:1c:1f:16:03:89:96:70:c5:c8:03:
75:45:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:54 2025 by rpki-client