Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: OZ/n/noW8Jl+IaA8GSeAzUxr52YvAvHis2je75bv1wg=
Subject key identifier: 56:13:74:B5:F1:08:E6:D2:50:20:40:AF:A7:75:9B:96:59:98:5A:C0
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 0198D73B6587801FF8D8E8CEF8479884F9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 03A5
Signing time: Sat 23 Aug 2025 14:00:50 +0000
Manifest this update: Sat 23 Aug 2025 14:00:50 +0000
Manifest next update: Sun 24 Aug 2025 14:00:50 +0000
Files and hashes: 1: luS_MUgmzdMuGS76ZPW7jEugNFA.roa (hash: zmYIzq2i+Cnfy8rt1xmt5c6X8SNFIcSJe0+Xd9kMxgE=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: Xj9aUpxfR2z1j/Y0/qDbYNHxBbMFdX84CUkofVmN6LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:65:87:80:1f:f8:d8:e8:ce:f8:47:98:84:f9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Aug 23 14:00:50 2025 GMT
Not After : Aug 24 14:00:50 2025 GMT
Subject: CN=561374b5f108e6d2502040afa7759b9659985ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:55:62:41:44:5a:1a:b5:2f:2b:53:76:cf:
fb:88:c4:c7:81:1b:eb:e5:6b:b0:d9:d2:f6:b1:68:
e9:de:fe:52:c3:45:53:14:df:36:de:18:65:ef:4b:
77:04:af:60:fa:c5:3b:1f:ad:cb:cf:de:7d:75:2e:
5e:6c:5a:67:c0:4a:17:35:30:20:55:3e:83:76:b1:
ea:e5:2a:7e:9e:42:d4:3e:e8:a5:e7:73:45:a6:df:
61:84:b7:b2:14:07:84:a5:37:1c:15:28:66:39:4e:
13:f7:6a:00:50:c5:60:3b:5b:b2:b2:70:4c:99:61:
df:cb:64:f2:46:5f:d0:ff:19:f4:c1:b3:96:7f:84:
12:79:fe:80:46:78:6c:07:36:28:31:0e:4b:76:b1:
5e:f2:88:c6:74:69:7a:f9:cd:0e:80:de:2a:21:80:
48:c3:96:9f:2a:7a:09:8b:d4:12:a2:2f:55:95:6e:
42:ca:72:14:f5:e0:85:f2:34:c6:ff:93:48:4e:22:
ba:ee:8c:2f:c7:b2:2e:10:cd:d4:4a:f4:2f:c4:49:
34:79:14:85:70:09:d9:c6:72:63:c2:d9:e6:1f:f8:
16:aa:e1:47:88:56:b4:22:08:90:1e:2c:2c:aa:27:
74:07:4b:51:e6:13:3d:ab:51:8e:e0:c8:96:62:a5:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:13:74:B5:F1:08:E6:D2:50:20:40:AF:A7:75:9B:96:59:98:5A:C0
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:03:61:a3:f0:e2:c0:88:29:64:41:81:51:fa:1f:c7:3f:d1:
90:d0:04:be:07:03:df:74:60:e0:d8:aa:f3:35:8f:86:e6:22:
9a:14:ff:07:fa:11:82:b6:51:37:0b:45:55:69:05:9b:a1:31:
84:f8:64:fd:c8:37:90:9a:45:3e:e0:1a:44:7b:27:a0:b0:9c:
89:c7:44:6d:a8:bf:74:d0:e2:dc:ea:4e:a5:21:f9:ea:b5:ef:
92:4f:d4:1a:54:4f:df:7b:f8:1a:e1:1e:a8:e2:a8:b0:25:82:
18:51:0a:32:2b:a0:a0:76:d1:18:3b:10:a7:ea:f2:83:c5:8b:
bb:e0:1f:c4:85:27:29:6e:2d:a6:2a:de:b5:6b:dd:8f:b7:db:
eb:58:52:a4:64:e0:53:10:77:0f:20:3e:d3:12:24:c4:b5:64:
e3:18:e0:14:dd:17:3f:3b:de:a6:89:9b:81:88:88:5a:36:a2:
18:3e:71:94:a2:a1:ca:cc:43:65:c4:d9:b2:43:ed:77:a8:ea:
68:6c:8e:bb:74:a0:b0:44:3e:98:70:65:dd:31:44:0f:b6:eb:
d6:1d:76:28:19:73:24:cb:09:41:70:79:9c:e9:3e:5f:d4:67:
70:44:9c:cc:4b:2d:99:93:48:b0:74:46:d8:30:91:be:07:fa:
49:6c:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:11:04 2025 by rpki-client