Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: POf3sFCmYGOmK7gSYz0T0et/1+cRtBXD5nYeKKUgHjQ=
Subject key identifier: 2E:5E:F2:2F:77:67:C9:BC:0A:2C:7A:FE:A4:F3:9D:CD:C2:76:05:26
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 019A4EBD4D11DFC7DFD1C5227A070A068C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 0518
Signing time: Tue 04 Nov 2025 12:00:20 +0000
Manifest this update: Tue 04 Nov 2025 12:00:20 +0000
Manifest next update: Wed 05 Nov 2025 12:00:20 +0000
Files and hashes: 1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: xc7xEz6sWoYbBaAPaLic+cTe5+K4G8wzLdHgLqeTJd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4d:11:df:c7:df:d1:c5:22:7a:07:0a:06:8c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Nov 4 12:00:20 2025 GMT
Not After : Nov 5 12:00:20 2025 GMT
Subject: CN=2e5ef22f7767c9bc0a2c7afea4f39dcdc2760526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a9:47:5c:51:be:1b:b3:b2:d2:63:23:c4:6d:
79:f3:f6:5e:29:66:75:d5:39:8d:6c:78:cf:f7:09:
0e:3c:57:2c:bf:09:59:40:18:2e:ce:be:76:a7:d9:
8b:d1:41:4b:db:37:23:73:e8:cd:d6:7b:1c:c5:45:
2e:00:f2:3e:a2:ab:ac:72:61:05:c4:9a:7e:2f:53:
47:e1:41:45:10:3c:fd:93:c3:60:59:ec:01:72:67:
d0:52:f7:b3:4c:2f:52:d0:29:1e:ce:88:f7:ee:9d:
ee:35:a8:23:75:01:d2:13:7f:74:2e:7c:cb:0f:7b:
3a:69:30:b6:73:8e:fe:eb:01:4b:d8:c4:ec:2e:d6:
d2:91:ea:0f:0c:29:24:ff:e9:44:62:31:aa:e2:00:
1f:3b:9e:98:6d:c6:dd:24:df:26:6e:17:6d:64:c0:
9b:0b:fd:f7:3d:f3:4d:f6:a5:ef:b6:5c:39:f1:1c:
3b:5b:2e:c9:0c:7b:64:d1:95:d2:59:06:83:bb:a5:
39:97:ad:f7:9c:7e:b1:df:19:f6:94:c5:11:b7:7a:
65:86:08:93:a7:da:03:ab:ea:34:89:9c:06:12:4c:
fc:3c:c3:2a:de:69:83:38:c0:24:53:25:18:af:c3:
4b:a6:48:ff:c5:00:0d:1c:2c:d6:d6:4b:aa:aa:b2:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5E:F2:2F:77:67:C9:BC:0A:2C:7A:FE:A4:F3:9D:CD:C2:76:05:26
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:d3:99:9e:fe:78:56:94:9a:99:e1:35:3e:22:e2:ef:6f:
a3:40:5e:e9:2b:f9:7f:fd:a3:f6:cc:42:f9:b9:20:0b:a3:68:
20:a2:24:a2:65:bc:57:76:25:5b:39:7a:ea:78:8f:32:95:b2:
6f:44:a3:9b:a8:41:fc:07:16:38:16:9c:e7:fd:17:d2:2d:15:
0f:d6:ae:4e:7d:54:4a:e9:6d:9a:57:56:d2:c8:e0:25:d0:de:
08:0e:d4:c9:cc:06:46:cd:7c:14:ce:1f:36:af:19:1c:60:07:
f4:ce:f7:64:20:23:c1:05:89:3c:f7:96:17:41:9b:04:c2:0d:
eb:59:b9:3c:0f:1a:de:70:d9:b0:c0:e1:18:b9:cd:58:c6:f9:
c4:f1:84:eb:bf:e4:64:28:a3:b9:1d:7f:ed:cb:f9:ee:38:1d:
ac:db:ff:57:fc:38:41:17:3b:db:22:37:a1:b6:87:d1:00:3f:
88:10:c7:d3:c3:9b:73:a6:a8:ee:ef:c1:07:fd:e2:05:14:38:
d2:31:0b:f7:7d:99:12:bb:97:57:d6:d8:78:93:fe:ef:c4:b4:
d5:c1:51:a4:a2:85:65:a6:8b:67:b1:18:82:e6:69:86:1a:68:
91:ee:de:68:21:c6:08:70:af:6c:44:97:8c:8f:5f:25:f8:8a:
9c:15:b4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:49 2025 by rpki-client