Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: 1AXfH7aQOlcuzXlCor+MPWhUP+dAhHdqwJ6mge3WSCk=
Subject key identifier: 89:78:42:B6:E4:DB:4F:F7:F0:5D:37:01:9B:D1:3A:E9:EB:89:97:2E
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 0198B1B11352D567ABF2F911222EE0A9E541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 0442
Signing time: Sat 16 Aug 2025 07:03:48 +0000
Manifest this update: Sat 16 Aug 2025 07:03:48 +0000
Manifest next update: Sun 17 Aug 2025 07:03:48 +0000
Files and hashes: 1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: gA4b8CIu6YFssaX0p9AYin40X2DMbJFVOkImFvOSe+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 Aug 2025 02:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b1:b1:13:52:d5:67:ab:f2:f9:11:22:2e:e0:a9:e5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Aug 16 07:03:48 2025 GMT
Not After : Aug 17 07:03:48 2025 GMT
Subject: CN=897842b6e4db4ff7f05d37019bd13ae9eb89972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:05:c3:24:df:94:32:1c:fe:83:45:b4:81:
d4:aa:4f:59:3d:a3:96:94:5d:d2:c9:12:9a:b0:9c:
b0:48:29:f4:01:20:00:b9:17:ff:2e:5d:0b:05:40:
3d:f0:0f:80:2f:7c:2d:62:b9:75:e8:ca:1f:3c:1d:
7b:f9:ed:3f:e4:63:6e:6a:6e:c6:05:05:32:e0:43:
7d:ef:38:00:d1:0a:96:6c:a1:a7:2d:8b:30:25:4d:
ec:76:12:73:d7:75:d1:73:f6:c6:08:74:93:a4:34:
6d:08:62:55:41:d5:56:d9:9e:0f:fe:f4:bc:b8:88:
54:d3:fc:44:f8:dd:d0:5d:50:21:83:3b:53:db:22:
27:fc:a6:fc:14:f4:87:aa:b9:f0:fa:59:65:22:d0:
58:ef:7d:50:d3:c0:46:86:fc:00:8d:56:b8:60:0b:
ce:71:68:ee:76:e1:84:4c:ef:8d:78:b6:11:6f:21:
1e:6e:42:0f:f9:58:2c:0f:6d:b2:f4:51:c9:06:c3:
a0:dd:8f:4f:9d:28:5b:e7:ba:d6:5e:04:91:e2:fb:
d2:7c:80:ac:d9:44:e9:cf:a7:19:3a:15:47:af:bc:
33:d8:7a:b6:e0:a5:4f:63:91:c0:42:b2:02:6b:e0:
f7:f5:a7:da:a7:59:7a:c8:3a:59:90:4c:3c:32:d6:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:42:B6:E4:DB:4F:F7:F0:5D:37:01:9B:D1:3A:E9:EB:89:97:2E
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bd:c2:2e:6d:a9:af:c9:f9:18:b9:51:44:e0:bb:e1:54:ff:
f2:b6:bf:48:c0:76:4f:9a:3a:16:83:b5:8e:03:1d:a9:ff:ac:
70:b0:b5:4f:f0:d5:4f:53:9c:50:0b:ba:1f:65:fb:75:e2:6b:
8a:8b:77:1b:7d:b6:db:50:77:ce:11:9c:0b:03:e0:3c:9e:2b:
70:e2:0d:d2:97:99:62:b4:06:44:77:c0:a3:46:ba:c4:e8:27:
ad:6c:a7:83:b7:e4:a4:1a:d7:cc:1e:fc:7e:f8:ad:5a:2c:9b:
c8:7c:c2:b1:6e:8d:b8:ae:2c:c6:9a:d4:05:f7:11:3f:73:ae:
11:ba:66:54:69:dc:01:c5:95:e1:d5:ce:21:1f:d4:8c:b7:3f:
fe:5d:dc:28:e9:71:e6:21:60:b5:fd:1f:4f:ad:42:f2:34:13:
fc:c3:38:ed:bd:d9:42:fd:09:97:cd:a5:ec:13:c4:41:dd:79:
85:fa:15:b4:5a:70:bc:bd:e9:2a:67:cb:69:4a:6a:14:9d:42:
f2:eb:ac:67:0e:ee:70:c8:7d:cf:92:55:25:fe:8b:c2:8e:1e:
e0:e5:8e:f1:d7:f0:7d:dc:34:18:c6:24:ca:57:2d:b3:27:2a:
ec:30:a0:c3:b2:22:45:fa:e1:00:39:7a:39:3a:f7:81:6c:8e:
a9:90:7c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 16 08:19:38 2025 by rpki-client