Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
File: ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft (raw, json)
Hash identifier: lgXOkzPXdSXB0x9SgE3DP9sbI+AYpFIUubPuCSl9yHs=
Subject key identifier: FA:66:91:27:61:51:3D:3A:CD:9A:2C:6A:D4:AA:04:71:74:99:43:F7
Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Certificate serial: 0199FBEAA9B7BB76E088FA9955506AD862BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
Manifest number: 015A
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: Blt---jsIFQZ1r2IAxC-z0fx3gA.roa (hash: WMXyefoTuj2dAlvEBS8JjIjWNUd09eEAuE+gYKf1VT4=)
2: ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl (hash: tsKABIQtX22MOg+Ef3AMzSiK8x5YgHr7M+c7Bfw9B1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a9:b7:bb:76:e0:88:fa:99:55:50:6a:d8:62:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=fa66912761513d3acd9a2c6ad4aa0471749943f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:79:9a:af:7b:75:e3:12:23:78:25:a0:40:
a6:7d:61:a2:be:f8:9f:0e:2d:1d:c5:ba:cb:2e:ed:
a6:58:fd:52:79:c3:eb:8d:cc:bc:ce:59:43:a8:61:
7b:a1:91:a5:fb:db:da:10:77:8d:a1:cd:1e:95:e3:
8a:69:7c:9f:87:15:c5:c4:26:50:cd:54:7a:56:41:
73:c3:44:40:bd:21:d1:6c:33:b2:c7:29:a2:3f:0e:
89:85:32:68:a7:b1:1e:be:fd:c9:0d:a8:6d:e2:59:
73:eb:32:d8:05:72:5d:26:e2:ee:2d:7b:51:c3:55:
47:2a:55:5e:8f:43:7e:bd:cd:d2:0a:67:c2:0c:9d:
da:50:7a:c1:de:bf:82:dd:ab:93:1e:b1:1b:b6:65:
4e:dd:aa:02:d2:5e:10:2d:16:c1:4b:c7:67:2e:ab:
57:59:59:e6:c8:8a:bd:2b:dd:24:89:aa:d7:85:35:
5e:19:24:20:02:bd:ff:7b:40:fb:64:ce:0f:68:28:
08:91:ee:7b:30:ea:67:7d:b5:8f:40:50:b7:37:9c:
9d:0a:50:5e:e8:66:83:a7:76:c7:26:e7:ca:66:db:
43:ef:a6:5a:f6:e3:42:bf:f0:df:bd:b9:01:ea:13:
a5:2e:d1:17:8d:0e:81:c6:b7:15:7b:6d:cc:1e:75:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:66:91:27:61:51:3D:3A:CD:9A:2C:6A:D4:AA:04:71:74:99:43:F7
X509v3 Authority Key Identifier:
keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:20:2c:06:32:5e:e2:13:07:0a:77:cb:76:30:22:d5:70:dd:
aa:1f:92:f4:c7:05:75:7e:80:65:f1:b4:39:f9:32:2d:66:1c:
fe:04:60:bf:34:38:bf:32:11:05:15:31:36:09:26:59:4d:6b:
bd:a3:5d:0e:dd:df:87:d2:ae:d7:68:4c:21:3c:f5:30:82:b2:
8d:ef:7b:08:e8:9f:b0:c1:4d:76:41:b6:46:3c:e7:ed:06:6e:
50:35:82:58:4d:31:01:70:b2:0b:cd:f9:ed:6f:06:68:c1:f2:
ea:5a:ca:e1:85:80:18:f3:cd:e3:4e:5c:96:cf:31:91:76:eb:
8a:17:59:0e:56:84:5b:a0:8f:e8:a5:d0:10:1e:86:39:cd:23:
3b:ec:43:41:1c:3e:14:70:c2:f2:ae:14:a3:67:51:b0:21:37:
47:a9:6a:f7:c1:5d:b9:a3:8d:b6:6b:9b:ad:0d:a6:c0:be:78:
56:0a:f0:28:2b:03:08:9f:d4:55:08:d4:7f:3d:17:fb:bd:8b:
cc:fd:df:97:d0:1c:30:e6:4f:28:67:c5:e7:bb:d0:12:6e:fe:
ba:67:b1:ca:c3:4f:df:15:a9:a0:e4:ca:e2:d9:c5:06:5e:4c:
fd:36:4c:67:71:1b:7d:65:d1:d8:df:20:74:9c:dc:df:65:d0:
1c:7d:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:01 2025 by rpki-client