Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier: F0GM5SNCsizRNBBy9eJQyDOqvHppQgefiRYsPDbOahA=
Subject key identifier: 5C:09:BE:B6:4C:8C:91:AA:7D:28:96:F9:EA:35:1A:22:23:FF:80:73
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial: 0199FD3426624B8F37F6347DC2A793DDA56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number: 02E6
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=)
2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: VOxkMDmhD27hbdymw1VCUNLNsACQsdguCdoYaN1nK9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:26:62:4b:8f:37:f6:34:7d:c2:a7:93:dd:a5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=5c09beb64c8c91aa7d2896f9ea351a2223ff8073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:a8:8a:94:ab:39:3c:d9:cc:ae:e7:1d:4f:
ea:34:71:04:56:b7:53:77:9f:32:eb:1e:d5:c6:3d:
4d:9d:8c:e3:f7:24:ce:ca:c5:f5:1d:e8:b7:6d:f7:
5a:22:70:13:cc:49:46:d0:e3:43:ba:8c:96:d3:a8:
77:f0:8b:ca:08:fb:f5:d9:7b:5c:3d:df:a8:2d:d1:
36:d4:ac:e3:40:5d:f5:f5:86:d8:c2:c8:5c:35:ba:
ef:77:28:84:59:bd:bd:6f:8c:ae:3e:b3:3f:a4:52:
ff:42:83:77:9c:2e:9d:d1:15:ab:e7:32:d4:58:2f:
ba:9e:14:30:e9:cd:a8:8e:dd:d8:63:c4:98:09:75:
aa:91:28:03:fe:15:fc:8c:1e:f3:ac:0d:9b:a8:17:
b2:e4:60:7c:b2:4a:1e:5b:f3:31:20:96:6f:07:4d:
57:65:e1:28:1c:95:5e:c3:96:53:cf:25:96:ec:22:
ab:14:14:f1:44:25:27:dd:da:b7:c3:6b:10:7c:c9:
1c:31:e3:fe:be:f2:38:df:bf:48:59:f9:d2:85:6c:
55:1e:5d:e7:a7:f2:09:83:1d:f2:e6:d0:35:03:e9:
75:2e:41:3a:dd:6f:10:2f:62:fc:86:af:c4:66:da:
d4:2d:1d:69:b3:d2:31:a3:e4:55:05:46:d9:99:aa:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:BE:B6:4C:8C:91:AA:7D:28:96:F9:EA:35:1A:22:23:FF:80:73
X509v3 Authority Key Identifier:
keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f5:e0:92:08:ba:21:7b:e3:c8:e3:24:a1:72:88:15:83:96:
fd:5b:b0:57:18:6b:00:ad:30:a8:35:e6:19:f8:2f:fe:21:d3:
69:d2:b7:07:d5:c5:1f:e7:fc:f8:c4:60:74:09:00:64:55:04:
a0:aa:2b:8b:a8:bb:4d:2b:11:4a:f0:27:82:65:8f:e9:76:63:
a6:77:b5:48:51:11:ec:5d:95:ae:88:97:54:82:ea:49:1a:73:
ba:ed:3a:7f:97:d6:91:14:af:68:8a:9c:52:8d:78:cc:df:06:
41:b9:ac:39:95:ff:80:bf:f7:21:71:8e:74:7e:d1:3e:e9:db:
62:fe:8c:b1:0e:b8:97:1b:5f:b4:6a:9c:d3:a6:2a:04:bd:9c:
23:cc:9f:c5:21:83:32:ac:27:fb:01:a6:60:40:c6:e9:46:6b:
99:eb:0b:5c:25:f8:3c:32:1e:c6:36:f9:72:b1:32:b2:eb:f3:
b5:2c:c8:b0:84:a2:6c:e8:14:f7:ec:d7:33:19:3f:18:98:3c:
92:0f:3b:7e:db:54:cb:10:b3:87:fb:9d:dc:4f:2f:a2:07:b8:
3b:8d:98:4b:e8:90:02:06:31:91:75:19:f3:c6:2b:24:d5:66:
4b:39:57:43:9d:45:a4:9a:cb:a8:24:c3:35:b0:3c:fa:55:55:
dc:58:bb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:57 2025 by rpki-client