Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: XJ5Kd++NsxGP0g2qxuezysFXFGdOGNvI/ftbNRfo5hM=
Subject key identifier: 14:8F:BB:5F:D8:0D:4E:E6:70:E5:5D:B2:75:60:77:9F:1F:53:99:75
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 0198782C87A0F7B03B029D8C342979F81EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 10F9
Signing time: Tue 05 Aug 2025 03:00:40 +0000
Manifest this update: Tue 05 Aug 2025 03:00:40 +0000
Manifest next update: Wed 06 Aug 2025 03:00:40 +0000
Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: zIpakCWvWfttbJY9awjm7qsuyjJGmLwRVbk09rgnKDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:2c:87:a0:f7:b0:3b:02:9d:8c:34:29:79:f8:1e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Aug 5 03:00:40 2025 GMT
Not After : Aug 6 03:00:40 2025 GMT
Subject: CN=148fbb5fd80d4ee670e55db27560779f1f539975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:e7:69:ca:ff:29:80:55:86:bd:90:38:15:
7e:d4:eb:09:1a:e3:51:a0:8e:f2:e1:06:bf:42:60:
8f:c0:bc:a5:4a:ff:c8:30:af:bc:22:23:cd:bd:a9:
90:34:bc:db:fd:36:4d:6d:48:06:93:7c:d3:6e:57:
b5:f0:3a:00:b7:fc:00:e9:83:74:3c:89:8a:db:fe:
89:db:58:75:2f:ac:bc:69:73:46:a1:6d:75:d2:dc:
f2:b3:e0:64:bb:73:94:1d:0a:72:6c:04:7c:27:a4:
0c:cf:ca:9a:86:8d:fe:fc:77:3b:55:ca:f6:8f:6d:
b4:be:f0:c0:0a:23:a5:9f:84:7b:d9:8a:41:b8:56:
6b:1b:ec:43:27:46:34:77:d1:9a:27:24:38:2a:1d:
ed:ae:bd:38:0e:34:6d:09:ab:41:36:fd:b0:23:e8:
27:5c:3a:9e:ec:68:80:2f:0b:75:72:50:9d:2a:d5:
1a:ba:91:e5:02:14:d4:d9:88:6f:3a:16:46:af:77:
86:0e:59:fc:9f:4f:4e:d0:da:df:40:b0:13:da:cc:
11:53:c7:80:07:b0:30:6d:20:bc:76:64:6c:70:b8:
ad:a4:0b:e6:ec:1f:00:ba:b4:f1:e2:ec:31:4c:9d:
df:c3:86:50:fd:73:a5:7a:ff:37:0b:e8:1f:12:ba:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8F:BB:5F:D8:0D:4E:E6:70:E5:5D:B2:75:60:77:9F:1F:53:99:75
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ff:03:c7:68:4d:00:a0:be:f8:9c:be:3a:9d:c3:b2:85:f4:
2d:df:19:99:26:ac:3e:78:1c:84:8e:9b:ed:89:ab:bd:f2:a8:
82:0f:f3:07:7f:07:af:02:84:ec:d5:21:61:75:28:7a:2a:7a:
19:30:6b:de:ee:1a:86:b2:a1:4d:69:00:63:50:a4:09:81:a3:
fd:eb:5b:5c:eb:06:6a:65:c8:4f:cd:66:a3:7b:5f:a3:dd:87:
20:99:09:77:21:42:eb:c5:07:0a:09:cc:60:d5:da:b9:4a:54:
70:3c:28:4f:ea:75:d3:06:45:6f:a8:66:63:f1:50:6e:9d:cf:
bf:97:38:3b:c2:12:8e:c6:d2:04:a3:40:79:3f:54:52:11:d4:
a2:82:bb:22:a9:a8:8d:93:20:c6:df:dc:8f:a6:b5:de:e5:ed:
a7:7b:2b:13:9a:c6:cd:2f:f0:fc:25:6f:d0:95:f0:0b:2f:6a:
15:1e:59:43:7b:4b:8b:89:2b:a4:bc:21:63:ff:39:c0:7c:eb:
ef:ac:dc:f2:7b:57:e3:63:e2:03:17:16:71:9c:8a:a1:17:71:
5e:d4:47:35:ef:c8:5f:b8:1f:78:b3:e6:03:f2:e4:38:ce:79:
52:28:47:93:89:89:a0:d7:9a:b3:ce:29:b0:e4:55:a3:43:bb:
3f:61:d4:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh4LIeg97A7Ap2MNCl5+B7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj
OWRiNWYwHhcNMjUwODA1MDMwMDQwWhcNMjUwODA2MDMwMDQwWjAzMTEwLwYDVQQD
EygxNDhmYmI1ZmQ4MGQ0ZWU2NzBlNTVkYjI3NTYwNzc5ZjFmNTM5OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleTnacr/KYBVhr2QOBV+1OsJGuNR
oI7y4Qa/QmCPwLylSv/IMK+8IiPNvamQNLzb/TZNbUgGk3zTble18DoAt/wA6YN0
PImK2/6J21h1L6y8aXNGoW110tzys+Bku3OUHQpybAR8J6QMz8qaho3+/Hc7Vcr2
j220vvDACiOln4R72YpBuFZrG+xDJ0Y0d9GaJyQ4Kh3trr04DjRtCatBNv2wI+gn
XDqe7GiALwt1clCdKtUaupHlAhTU2YhvOhZGr3eGDln8n09O0NrfQLAT2swRU8eA
B7AwbSC8dmRscLitpAvm7B8AurTx4uwxTJ3fw4ZQ/XOlev83C+gfEroTrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSPu1/YDU7mcOVdsnVgd58fU5l1MB8GA1UdIwQY
MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt
MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri
LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz/8Dx2hN
AKC++Jy+Op3DsoX0Ld8ZmSasPngchI6b7YmrvfKogg/zB38HrwKE7NUhYXUoeip6
GTBr3u4ahrKhTWkAY1CkCYGj/etbXOsGamXIT81mo3tfo92HIJkJdyFC68UHCgnM
YNXauUpUcDwoT+p10wZFb6hmY/FQbp3Pv5c4O8ISjsbSBKNAeT9UUhHUooK7Iqmo
jZMgxt/cj6a13uXtp3srE5rGzS/w/CVv0JXwCy9qFR5ZQ3tLi4krpLwhY/85wHzr
76zc8ntX42PiAxcWcZyKoRdxXtRHNe/IX7gfeLPmA/LkOM55UihHk4mJoNeas84p
sORVo0O7P2HUlA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:11:39 2025 by rpki-client