
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
File: ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft (raw, json)
Hash identifier: Rjl/5vItYdO65DFTZYJiOI3zyPuQudoUYAxmsQBlkB8=
Subject key identifier: 2C:27:A1:5F:15:42:F6:78:36:9B:BC:C2:73:1D:23:B9:F8:94:14:39
Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Certificate serial: 0198816869961C0DC42733B040149136CBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
Manifest number: 96
Signing time: Wed 06 Aug 2025 22:02:40 +0000
Manifest this update: Wed 06 Aug 2025 22:02:40 +0000
Manifest next update: Thu 07 Aug 2025 22:02:40 +0000
Files and hashes: 1: Blt---jsIFQZ1r2IAxC-z0fx3gA.roa (hash: WMXyefoTuj2dAlvEBS8JjIjWNUd09eEAuE+gYKf1VT4=)
2: ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl (hash: KSs1ZFIiByrYq8NpQzBJhqg8sTtyyYqTz/LMg+M8PnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:69:96:1c:0d:c4:27:33:b0:40:14:91:36:cb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Validity
Not Before: Aug 6 22:02:40 2025 GMT
Not After : Aug 7 22:02:40 2025 GMT
Subject: CN=2c27a15f1542f678369bbcc2731d23b9f8941439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:89:03:aa:e9:d9:19:34:b7:05:68:4c:d1:
e7:81:71:ff:28:ed:1a:9e:bb:d8:7e:c6:22:13:dc:
57:1f:42:1e:f5:fa:c6:4d:d2:97:9e:a6:df:9d:e5:
77:b2:cb:be:5e:fc:72:30:5b:0d:9f:60:bd:d7:72:
60:4c:b1:65:4a:22:ca:db:03:f6:c4:ad:55:ca:3e:
fe:50:ea:5d:f8:f7:c2:f6:f9:52:d7:b9:ab:c2:da:
1a:e7:b6:6f:a5:3f:87:03:85:7a:d9:13:d1:39:cb:
b2:95:4d:9c:b2:bb:06:4c:05:7a:44:64:5a:5f:92:
95:33:7f:84:15:1c:8b:c2:c9:68:b0:40:31:75:01:
e9:d9:7c:d7:d8:42:7f:23:c4:d1:bf:be:3e:15:be:
d2:13:95:90:b0:c3:7b:9f:5e:1e:97:c2:61:0a:3e:
1b:15:63:4b:d0:d7:33:d6:50:79:23:5e:23:95:aa:
29:ad:8f:20:27:32:be:79:10:b5:2e:00:ff:eb:dc:
41:2d:0f:32:ed:b1:bd:df:de:98:cb:0d:03:15:1e:
be:09:52:94:b7:b4:c4:06:98:5a:ad:95:c0:33:f1:
53:a5:8a:de:cd:03:15:b7:e9:a3:fe:3d:25:0c:90:
24:9b:0c:08:e8:71:4e:1c:2a:c9:62:d1:82:02:09:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:27:A1:5F:15:42:F6:78:36:9B:BC:C2:73:1D:23:B9:F8:94:14:39
X509v3 Authority Key Identifier:
keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:74:1a:29:b0:bf:3a:79:be:ef:f8:6f:39:5b:e6:7e:52:
66:36:55:0d:c3:16:de:d5:4e:2b:fc:2c:e0:ad:ec:4d:a4:a7:
f1:9a:23:b0:c4:29:0e:c7:c8:6d:0a:c2:82:74:c9:4d:52:19:
ba:26:35:0f:c7:ec:b2:87:aa:04:75:9e:00:1e:e1:f6:82:75:
c9:32:31:0d:c8:52:cd:96:21:f9:4d:7b:f5:b1:fd:d3:6f:0e:
5b:76:e8:3b:7c:31:37:98:02:60:2f:b6:bb:af:73:4f:b3:85:
72:3b:31:c2:88:7f:e3:a8:ba:3d:98:15:ff:ea:ab:80:77:f0:
39:fe:c8:bc:4a:87:39:04:38:9e:23:eb:e6:4d:97:dd:d3:e2:
f2:e3:6e:9d:b9:40:f3:14:07:c5:47:47:9d:f9:c7:e8:2a:e9:
60:ca:25:81:30:17:9e:aa:d2:a3:04:f4:a4:50:54:5d:dc:5a:
ff:5c:81:90:51:4d:4b:4d:38:4f:0a:43:d2:0a:63:50:b7:e5:
5a:22:aa:00:fe:f6:f3:1d:52:c3:c3:38:3e:56:37:65:82:23:
af:bc:56:ca:b0:b1:12:5d:bc:7d:62:d4:0e:c2:26:9a:2c:30:
ec:23:b5:4d:21:5e:1d:14:50:e2:27:8b:e3:56:6f:6d:f5:81:
c2:a9:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:43 2025 by rpki-client