Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: u7NGeO3olmHlF7agQxan5+CnXD0y7yERWUh5xU/f4Q8=
Subject key identifier: AA:9B:D9:6F:3E:E8:85:FB:A9:FE:A7:F0:CD:79:91:BA:AE:28:4C:B2
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019879E3EA4F085F32EDE1814D728E024078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 059E
Signing time: Tue 05 Aug 2025 11:00:36 +0000
Manifest this update: Tue 05 Aug 2025 11:00:36 +0000
Manifest next update: Wed 06 Aug 2025 11:00:36 +0000
Files and hashes: 1: 0-0QU-mcwsSjRhq471-gtd5ufh0.roa (hash: VGJkz0Kb+B/ZQAVYufjsQPwByA4ZPAxHr/hG7qTqtp4=)
2: 1iyiGCCaZCOIy-3SK8-ztkCORB0.roa (hash: 4+8lvNVy48rfdEy8LO/Fif5vr+YXhPfmQva+BSbThYY=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: KBiEI4NrRQuGvrTGSo9uKjcBxOsJxTPK0BVzqxRecK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e3:ea:4f:08:5f:32:ed:e1:81:4d:72:8e:02:40:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Aug 5 11:00:36 2025 GMT
Not After : Aug 6 11:00:36 2025 GMT
Subject: CN=aa9bd96f3ee885fba9fea7f0cd7991baae284cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:fd:e6:a1:52:3e:18:6f:4a:e8:06:c3:f4:
d6:47:15:7a:81:26:16:12:ea:a8:38:c9:09:db:63:
da:49:15:cf:31:00:be:55:66:b2:62:a1:bf:c8:96:
b4:70:40:88:d3:2c:45:13:1b:66:60:c5:95:1e:b6:
19:e7:e7:b6:fe:a4:59:d1:2b:3e:4a:f2:80:a6:d1:
39:5b:ca:ef:ca:f8:c6:bb:0d:22:fa:00:19:dc:b2:
ad:3b:94:96:22:cc:c9:0d:b9:be:6b:9f:cd:c0:79:
f1:14:65:6f:63:8b:91:18:cc:8f:62:ea:2d:75:72:
13:2f:b5:ec:7d:89:a6:ba:4b:0c:ac:83:e7:80:f3:
df:53:0e:19:90:9c:b0:84:54:2b:14:f9:e9:82:e0:
b2:fc:b5:05:dc:6a:50:81:da:17:42:40:60:39:ea:
34:20:eb:95:b3:1d:f6:8d:eb:d8:45:99:7a:4a:69:
45:b7:89:e3:49:39:67:3d:5a:d4:e3:8b:75:5e:04:
3f:61:e7:b9:56:8f:2e:1b:23:69:f6:1d:90:bb:3f:
10:cc:e3:78:db:5a:bc:7a:f9:c4:c1:62:d4:20:01:
63:90:c9:9c:fe:09:c8:59:16:ca:2f:42:de:b9:24:
45:0c:00:9f:f4:e4:75:2b:b4:73:c8:d3:ac:ab:6b:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9B:D9:6F:3E:E8:85:FB:A9:FE:A7:F0:CD:79:91:BA:AE:28:4C:B2
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1c:af:4b:6b:5f:05:79:f8:61:99:55:27:25:f5:39:7f:68:
40:d5:ca:be:02:16:92:61:8d:ce:1e:56:4d:49:df:df:98:d5:
5b:88:c7:8b:75:76:1d:fd:ec:94:ef:85:b7:c5:17:8e:ed:d1:
34:8e:c7:01:72:57:73:f6:95:8e:20:fd:f7:1e:5a:51:25:3c:
d6:b1:1a:a8:54:da:e2:65:df:c8:ed:39:03:1d:aa:f6:16:96:
26:0d:ec:9c:55:92:59:0a:70:c9:0a:4b:4b:71:24:34:c5:f6:
15:c2:64:da:f8:33:e5:dd:6d:d5:50:66:2b:f0:cb:6e:96:ac:
ea:a8:52:f4:02:20:4d:aa:87:06:1a:c0:20:35:69:8c:15:d1:
71:0e:c7:71:fc:f0:04:0f:40:67:2b:72:16:0e:b5:f2:eb:fa:
6f:68:b6:6e:9d:e6:8d:5c:e4:42:49:48:e3:ac:3c:34:af:37:
62:09:e9:29:f7:ab:57:bc:df:57:ac:b0:44:31:e6:32:72:20:
4d:1b:1d:13:94:00:42:07:de:3a:3a:67:fc:83:3c:8d:82:0e:
33:0d:c5:86:91:3d:1a:80:c2:5c:e6:20:3a:57:70:55:f9:4e:
63:b8:7b:d8:71:d3:fe:49:c7:27:ba:f5:92:1d:04:f3:33:a5:
18:85:73:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:18:52 2025 by rpki-client