Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: 14BGSDIz4R0g4owwEk+hPZCrYZrl6TrpW7gJczQXcIo=
Subject key identifier: B5:5B:00:84:40:C2:8D:4C:C8:91:78:9E:D4:9C:11:98:29:AC:08:C9
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 0198A272762A6D1D6ACB1381409CAC47BDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 03D5
Signing time: Wed 13 Aug 2025 08:01:06 +0000
Manifest this update: Wed 13 Aug 2025 08:01:06 +0000
Manifest next update: Thu 14 Aug 2025 08:01:06 +0000
Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: iEU1Xx6J/GyFfzkrSB4ED5l50nk+9wd2hcccSGrBZT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:72:76:2a:6d:1d:6a:cb:13:81:40:9c:ac:47:bd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: Aug 13 08:01:06 2025 GMT
Not After : Aug 14 08:01:06 2025 GMT
Subject: CN=b55b008440c28d4cc891789ed49c119829ac08c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:c8:64:03:fe:2e:13:5a:22:73:e6:81:0e:
15:3a:cd:30:89:c4:1d:20:c8:76:57:73:08:57:3d:
30:df:28:0c:65:5d:d1:aa:6b:c7:66:63:43:3d:6a:
e4:6e:3a:5d:79:ef:2c:ad:5f:c1:2c:42:62:79:a3:
a9:74:f8:35:dc:0c:ac:dc:37:fb:b8:e0:4e:4a:d9:
30:83:b6:62:f1:f0:7a:f6:97:db:25:6d:44:1b:54:
01:79:fc:cb:58:fa:21:f1:06:6c:00:20:68:be:83:
d1:e3:e6:a0:5b:7b:1c:f0:a2:b9:96:85:63:cc:58:
53:27:0f:48:05:39:1e:be:92:ac:f0:92:61:93:e5:
f5:2a:52:a6:ad:a2:80:78:0f:6f:6b:a7:5f:18:c2:
16:84:ae:a8:4d:6a:ee:e1:a5:1e:06:65:05:65:4f:
3c:f3:dd:82:3b:b7:fa:3c:3d:01:37:c3:ce:1e:5e:
77:7d:e3:18:ca:71:91:cf:69:38:5a:f4:94:f5:6b:
92:86:08:1c:11:24:a6:34:28:ef:4c:f9:f8:d0:e7:
1d:b6:88:1d:a5:52:d3:82:16:c4:e6:43:99:04:84:
54:d3:a3:71:f8:77:3a:f5:5f:1f:38:df:25:d5:d7:
ac:31:fd:c5:ec:19:36:1b:a2:8f:2a:b4:5c:d0:c6:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5B:00:84:40:C2:8D:4C:C8:91:78:9E:D4:9C:11:98:29:AC:08:C9
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:65:b2:fc:31:4d:5c:7c:61:c9:cc:01:aa:bc:1d:d5:8c:ba:
7a:d8:e4:ea:b0:99:fb:6e:c1:c7:74:ca:79:b1:b0:19:05:dd:
f6:a5:6a:b2:85:b0:f6:6e:ee:ea:3e:8e:05:27:88:f7:9c:29:
f6:0d:5f:d9:8d:53:66:76:fe:44:35:98:ff:a3:ba:e4:1f:d5:
61:c1:1c:62:b8:38:b1:0f:f1:ce:91:4b:2a:c4:84:d8:34:89:
ee:e7:f2:b8:60:ce:c8:73:ed:97:ff:ff:28:92:25:ce:fd:74:
5b:f2:a8:28:3b:cc:bc:e1:f9:cd:ef:01:fe:c1:00:a0:08:d8:
30:0d:80:a6:0f:2e:d0:de:4d:57:d2:32:12:7b:4b:68:93:e5:
9e:14:f5:55:0e:12:d7:63:a6:09:d8:f6:7e:f9:5d:7f:b5:d9:
14:5a:65:dc:12:0e:bc:fc:9e:c5:04:7c:88:a5:d6:0d:f0:45:
ac:51:a0:08:25:68:49:94:16:b2:d0:d1:78:7e:44:d3:46:fd:
75:9d:ac:23:41:81:e3:cc:b3:cd:30:e6:8f:20:01:91:57:8e:
1e:2c:ed:fe:87:64:03:3b:b6:91:af:24:6e:10:02:ca:9b:55:
f8:57:11:da:4f:3a:cd:86:0f:c1:c6:2e:33:ef:e9:7a:c5:bf:
f4:15:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:46:31 2025 by rpki-client