
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: eeyHOu8Z6qoGLwJ9Aai5XIOVAeDQrdcZM63PbGf+mZc=
Subject key identifier: 0A:85:F4:DC:B0:EB:E6:8D:4D:0C:09:B7:CB:0C:43:D1:3F:9B:39:18
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 01988D6B411959769E82D081489C0625702B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 106C
Signing time: Sat 09 Aug 2025 06:01:13 +0000
Manifest this update: Sat 09 Aug 2025 06:01:13 +0000
Manifest next update: Sun 10 Aug 2025 06:01:13 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: cPKCBHMr/9myYTi3ucgPVelAgWP0YtLSqxTe69bEjPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:41:19:59:76:9e:82:d0:81:48:9c:06:25:70:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Aug 9 06:01:13 2025 GMT
Not After : Aug 10 06:01:13 2025 GMT
Subject: CN=0a85f4dcb0ebe68d4d0c09b7cb0c43d13f9b3918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:92:0d:2a:32:a9:d0:c2:49:d6:f0:95:1c:36:
01:bd:9a:2c:f7:7d:3c:d9:54:b1:ad:c3:a1:a6:e3:
c4:63:36:8e:19:93:57:ff:f3:3b:27:83:ae:0f:b3:
7c:ab:f3:70:54:2f:55:ae:88:76:bc:5d:81:53:65:
69:9a:c9:03:15:f8:0f:90:f6:d0:94:b7:98:df:1b:
da:5f:c3:ea:0f:ca:aa:cb:4d:e6:cd:9d:f5:69:59:
71:0a:b0:b2:8b:fe:b8:10:9b:3f:71:7b:53:d2:b5:
69:c5:c5:11:73:5a:b1:80:1a:78:f1:6f:a7:d0:fc:
25:1c:f1:d4:45:84:ba:3d:65:8d:96:5d:16:c7:e8:
19:f7:2e:91:31:55:6c:69:89:99:93:b8:63:47:36:
08:ff:14:77:18:83:1a:fc:8b:32:8d:9a:c9:cb:f4:
c6:43:7a:8e:a2:44:b5:00:35:f3:e7:d6:cb:e7:60:
3d:c4:ef:5c:0f:25:7e:ab:9a:27:c7:a9:09:28:c8:
27:07:2a:33:01:ad:6e:df:0c:77:15:97:09:b7:a6:
d6:33:44:51:88:a3:6f:48:c1:44:44:b3:35:65:3f:
fc:47:ef:b0:ff:2e:f4:e3:e1:af:11:bb:e2:e2:59:
48:c3:7f:87:13:fe:7b:14:86:b3:19:15:f0:1f:0c:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:F4:DC:B0:EB:E6:8D:4D:0C:09:B7:CB:0C:43:D1:3F:9B:39:18
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dd:27:b7:ab:74:27:4f:4b:a7:d0:a2:3a:f4:93:a6:45:a9:
62:c8:89:a8:82:e3:e1:a5:ed:7a:03:2d:01:ec:2a:16:cf:4d:
52:d7:30:a4:be:e1:d2:94:1c:1d:66:30:87:da:27:36:e9:d7:
1b:5c:64:d2:3e:54:5f:cc:86:d7:aa:5f:09:f1:02:a2:f8:9a:
67:af:1b:1b:5c:27:75:93:8c:03:5b:2b:50:27:f4:ad:8e:62:
9a:c0:3e:05:f8:59:8b:d2:48:41:94:77:3e:b2:f2:61:17:87:
c4:45:eb:a9:19:29:37:d8:eb:99:fa:5f:94:30:40:d9:86:b0:
3a:6f:3d:c4:b8:f4:3d:3b:5b:a4:8a:49:6a:ba:d2:d3:25:36:
7b:dc:69:ed:1e:43:39:7b:61:4c:4a:bb:5e:37:64:ac:0c:66:
c4:68:0d:d8:11:40:25:d6:43:e8:d2:53:07:e5:0d:d8:1c:0a:
ff:c6:4e:ed:4b:17:14:5a:53:d2:ea:d0:d8:cd:55:81:31:94:
63:20:62:64:57:2f:12:d2:49:be:d1:4f:e6:45:28:dd:cd:78:
2c:f2:7b:8c:a5:7d:35:b1:6a:e8:78:51:28:b4:b7:1e:38:30:
02:a8:45:0d:76:a7:bb:07:d0:c6:d0:6b:67:11:67:95:0b:1e:
1d:0d:17:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:51 2025 by rpki-client