Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier: 0cS6yRxnvLM1hVSV1XR1q7U/t5w0zqFf2OLXsFkbCcY=
Subject key identifier: 32:DF:C0:BC:11:C7:76:06:91:87:91:6F:F8:7A:EC:C3:FE:C2:4F:E1
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial: 0197B7EAADB1CBC61D9743EC7CBF89314376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number: 01B9
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=)
2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: GJTbkZhSZyEUrRIWpH7GelNj4vgvYlMRBjJtKdCju2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ad:b1:cb:c6:1d:97:43:ec:7c:bf:89:31:43:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=32dfc0bc11c776069187916ff87aecc3fec24fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:8e:3d:93:3c:60:9f:59:5d:e5:b4:53:34:
48:82:9a:03:12:bf:6b:b0:20:8d:68:e2:f5:f1:90:
eb:94:c3:b1:13:27:95:6f:be:ce:5e:be:32:1a:17:
b3:6c:0f:69:db:00:26:2d:25:c2:8b:17:9f:86:e4:
98:93:8f:9d:d8:f4:44:72:df:f4:81:ee:5e:31:74:
01:06:63:36:16:60:47:f1:6e:4c:e8:32:ba:98:c5:
17:b6:11:12:44:8c:8e:e8:7f:c0:9e:99:4e:41:2a:
e3:87:6e:9c:b9:83:a3:5d:1c:8b:d1:a2:57:97:7e:
bb:42:e9:ba:78:60:18:6d:ea:15:60:62:5d:ab:b0:
cf:cb:e7:1e:66:c8:c1:50:8d:f4:26:6f:90:04:83:
de:e1:4b:0d:92:98:ab:c0:93:2b:45:04:fe:e6:58:
96:1b:a1:51:45:e3:b8:f5:01:21:78:cb:bf:33:eb:
c1:a9:2a:84:3f:45:d9:f4:42:62:6c:95:46:66:96:
95:8b:92:1b:d4:aa:19:d8:5e:38:d5:39:2c:97:0d:
42:da:45:82:e6:54:32:f9:d6:30:59:25:63:2d:7a:
03:3e:06:85:39:fc:53:cb:7b:5f:4d:a8:2d:f7:50:
14:93:a5:68:4c:20:d8:98:20:07:11:a7:2e:8f:21:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DF:C0:BC:11:C7:76:06:91:87:91:6F:F8:7A:EC:C3:FE:C2:4F:E1
X509v3 Authority Key Identifier:
keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:04:dc:8c:9c:3e:7d:11:cd:11:bb:3b:4f:df:07:30:60:43:
24:b6:6d:51:3f:0e:96:c5:4b:9d:88:fa:b5:c4:9c:5f:24:81:
31:ce:4d:8e:91:fc:15:83:3e:9f:d1:40:ea:dc:c9:72:78:56:
5d:8f:aa:7e:5f:c8:c3:a6:d0:74:d5:2e:64:28:05:10:7e:61:
9b:ac:35:37:da:59:c6:b4:07:77:c4:49:bd:d1:a8:b2:6b:c7:
09:43:d1:28:24:3b:fb:f0:45:78:1d:63:49:db:93:61:0d:3d:
f9:76:71:cc:82:b7:05:a6:39:92:ae:55:dd:40:d3:aa:76:a5:
63:ca:66:67:0a:96:28:66:93:77:98:89:09:19:b1:1b:77:b8:
95:7f:e1:ec:2a:52:65:69:ac:97:7f:6c:24:e9:32:f9:cc:5c:
40:75:df:3d:21:bb:61:cd:81:ee:61:7d:b5:63:25:fa:16:ac:
cd:ef:aa:96:a9:10:7d:95:33:53:08:7d:3d:a0:ea:7f:0c:f8:
05:f7:91:96:78:54:4e:c0:04:e3:42:46:a7:3e:4b:90:6e:32:
60:bb:2f:57:3b:04:b3:06:dc:1a:47:91:23:32:72:42:57:16:
95:f4:47:1a:67:ed:7c:01:ae:f2:e3:9a:e5:b1:09:c3:ac:5b:
a7:c3:2e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:26 2025 by rpki-client