Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier: C7CiSX5OL8UXLWQ6ROVRqR9aYO7sx4BwrwpgyYjdiLI=
Subject key identifier: 28:18:89:29:54:3A:5C:81:4D:60:96:43:D6:3F:E4:A2:6A:18:8E:6F
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01987B2E0A49908FBAACD39A5E9509929DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number: 0F8E
Signing time: Tue 05 Aug 2025 17:01:11 +0000
Manifest this update: Tue 05 Aug 2025 17:01:11 +0000
Manifest next update: Wed 06 Aug 2025 17:01:11 +0000
Files and hashes: 1: 1-Q0Fpm13AkA52n8l5k0ctr3-0Uw.roa (hash: ImmrJcgcy8CHYkqIH5BT8/9I+/F0fh7xK4lUIvl0rVw=)
2: 1-ZL92pBvmLmsFkFwjoPraYV-lmk.roa (hash: 8GeHeU/ZbqCG3e/9dpSkHP1UnCP8xK4IoGXKHOFjl60=)
3: DbXBf5p8tTJG8CWaR7E8NFvBtmw.roa (hash: zvio/AkaDLR3zLqDkEE+8LoA5UKejy+HxnTsa0uQfns=)
4: Ht_HptBql6mw1xzUkgumDZRCGTs.roa (hash: fAFJkBZjVK/h9A5uSjcq4pIcQpbiAe3EL49qs0G3t0k=)
5: N1KahuaH4ywVDh5vnQRZfE-0JBo.roa (hash: Wu4yHucu0ZzzchZ+LFYsPLlBMoJ/1TTM1l51egvuWFs=)
6: RB-kmvtWIZxfX4s_GWqpUMWBav8.roa (hash: mz77dGj7KT4Y12imMMdj/cXmV+eNEz+qEQ+Q1rCDxAw=)
7: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: fPZaTcA/gaOBkwtqItgm1MJdjjn+hFFZcPaN5tQWlTU=)
8: l9XP7gaCaWGis4j2_HYtNslfm-c.roa (hash: onTtv8prZDY2J8tyTCAIkrUkYzKJXBwYs1TgFOfQ6IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2e:0a:49:90:8f:ba:ac:d3:9a:5e:95:09:92:9d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Aug 5 17:01:11 2025 GMT
Not After : Aug 6 17:01:11 2025 GMT
Subject: CN=28188929543a5c814d609643d63fe4a26a188e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:9f:34:27:51:a6:e1:f0:b5:b5:2a:d3:c4:
f2:36:d3:75:60:04:b1:fc:10:f0:f2:08:70:08:78:
9a:d0:7a:9d:ac:78:06:61:80:ff:20:7c:80:40:95:
32:ce:28:32:39:c7:ac:cc:96:be:da:95:ef:8a:0c:
7b:0f:94:84:ca:51:48:2c:41:38:d7:12:29:8d:b4:
93:7f:c7:3c:af:9b:90:be:b0:37:a2:78:0c:5f:2a:
58:d1:24:4c:7f:d7:c8:a0:e0:26:f5:d3:b6:59:11:
ac:1b:30:90:95:de:91:36:3d:3b:a2:2f:64:f6:74:
b7:4b:fe:04:b8:d0:a5:a8:c6:2b:25:b2:fe:f6:fc:
b6:c0:9e:e9:81:45:50:26:e3:83:fb:07:37:17:ef:
58:2c:b3:e3:52:1d:b7:f5:c3:4e:55:e4:aa:e8:e5:
aa:27:ae:00:e1:75:c3:ef:4d:e3:87:bf:43:09:38:
ae:d9:c9:36:e0:ed:1e:b1:bc:b1:e5:bf:0a:5b:9f:
1f:e4:e0:fa:24:a0:8a:ae:b2:5e:c4:11:51:09:d5:
a1:7e:9e:53:00:0c:4a:f7:e5:db:9a:50:66:5e:28:
02:d1:ee:71:1f:87:19:c2:aa:d3:22:a9:53:0b:eb:
2e:0e:16:ac:fd:1b:0f:64:d5:f8:43:48:31:53:a6:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:18:89:29:54:3A:5C:81:4D:60:96:43:D6:3F:E4:A2:6A:18:8E:6F
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0c:11:55:b1:e9:0e:a1:42:32:41:84:63:a7:d2:f0:fe:55:
eb:d2:11:fb:56:2b:29:1f:e3:b7:b8:88:61:ec:0c:ae:b1:4e:
c2:99:19:28:81:03:59:9d:de:47:f0:38:df:c6:20:e2:57:10:
eb:3e:33:40:39:ba:b8:d0:b5:d0:be:96:17:8f:3e:7f:78:60:
58:59:f7:94:30:48:a1:e8:b1:a3:3b:cd:d6:a5:4c:a3:6c:d4:
75:47:3e:8f:7f:65:af:b2:b7:5b:af:dc:b8:6a:03:fe:1e:88:
cc:d8:69:53:f9:ac:dc:e0:91:84:ea:ab:65:20:fe:aa:74:59:
53:70:b9:35:e4:a3:29:aa:4a:fe:94:a6:67:6c:6d:f2:a1:80:
f2:8e:10:d5:04:1d:44:3c:9d:9e:7d:70:4c:ce:6e:1c:ef:5c:
1f:1c:59:98:f4:80:24:74:0c:fd:51:f9:a5:83:94:02:17:7d:
77:63:e3:02:7d:ba:f5:6a:8a:32:ec:de:61:12:6c:76:62:6b:
d6:00:a9:1a:87:cb:f6:c6:6f:48:8a:1d:4b:1b:a4:a5:ff:c6:
c4:4b:7e:a6:e6:ee:b1:dc:5b:85:52:72:8e:b7:31:02:33:82:
2c:d8:15:6e:a7:51:ec:aa:b0:95:ca:d3:44:11:61:b9:fb:81:
e9:48:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:39:18 2025 by rpki-client