Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: 7fiSIuUOjCIowrJ8YwrjJDaElDVjxo7ImSIvaiPxReE=
Subject key identifier: 94:D2:A6:07:0C:74:46:2A:65:F3:A2:03:5E:6A:40:2E:B0:45:92:AB
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 0199C5A049B5D7174D9505C74B5ACB6D3F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0A59
Signing time: Wed 08 Oct 2025 21:00:40 +0000
Manifest this update: Wed 08 Oct 2025 21:00:40 +0000
Manifest next update: Thu 09 Oct 2025 21:00:40 +0000
Files and hashes: 1: 9-Jf83x4olz8Hfew1s_UNi3V90k.roa (hash: IKeSXJFCHy882FUnOTCs1ATh13Yeq7epWPgTRQh0CZE=)
2: ECPnWkDMI2_nTmbCZhDYVWDmDx4.roa (hash: Lpl7m/eZhYRN7DnJNG4Sw0QJsO8hvbMn/hQYBg/ViaI=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: ZikY4C7tOE4K6xdG+UvztIoJnaAoJCctM3wdDCqvp3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:a0:49:b5:d7:17:4d:95:05:c7:4b:5a:cb:6d:3f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Oct 8 21:00:40 2025 GMT
Not After : Oct 9 21:00:40 2025 GMT
Subject: CN=94d2a6070c74462a65f3a2035e6a402eb04592ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:d4:b6:68:df:28:b2:d0:a8:48:57:76:50:
6b:85:19:34:b6:c6:c0:ea:1b:f4:4e:5b:cc:c4:4a:
0c:45:ab:ec:bd:94:80:64:4c:2f:c7:57:d3:11:a8:
7a:d6:a2:02:ee:16:8a:c9:03:69:0f:ba:c1:2d:e7:
8b:35:ae:30:ee:94:af:8e:56:92:de:57:bd:d5:37:
b0:f0:50:16:8a:d9:34:b0:e3:bd:8f:2c:10:b4:b2:
1b:df:84:dd:63:0b:87:a2:c5:bb:4f:2b:81:e0:98:
60:fa:3d:c7:77:ae:3a:28:9c:22:37:81:d9:cf:c7:
6f:b8:be:f3:e2:85:ef:8e:21:a5:50:f6:d7:37:04:
d0:52:56:57:90:4c:10:1f:07:9f:cb:b5:14:e1:4f:
80:4c:cf:1c:d1:e7:50:a4:99:38:cd:74:ae:89:83:
f2:f8:2f:da:58:53:c1:f6:42:b0:d8:ee:87:d7:2b:
0d:32:75:b7:fd:ff:59:74:8c:0d:51:a2:6c:bb:4e:
c4:7c:12:3f:4e:09:a6:34:0a:8c:fb:f8:8d:bf:7c:
f2:6e:8f:54:24:e4:19:48:da:a1:d8:ad:8e:1a:76:
41:42:bb:9a:3f:d0:61:be:04:1c:d0:e1:d8:39:c7:
52:de:da:cb:06:bb:ab:ad:a0:16:27:5a:d9:ba:6f:
22:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:A6:07:0C:74:46:2A:65:F3:A2:03:5E:6A:40:2E:B0:45:92:AB
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bb:20:7b:62:00:17:81:d5:a9:fd:12:82:5c:99:a8:72:a2:
7a:73:8e:ea:44:05:90:f6:17:2a:80:51:1b:81:b5:13:6f:22:
f5:3d:94:d6:c9:14:80:c6:27:42:d5:c6:52:bd:73:7a:0b:21:
f2:45:a7:12:f4:87:18:dd:5f:d6:6b:08:eb:2c:2e:12:09:6b:
36:4c:08:71:8e:11:f2:0c:64:53:19:d5:07:d0:32:41:ea:89:
95:7e:77:6b:3b:76:5f:3e:9e:bc:2c:4a:42:9b:0b:64:78:26:
2e:28:d6:ca:56:bb:cc:ce:d1:63:f7:50:4a:7b:54:ed:60:87:
39:62:15:97:ba:9f:33:92:76:1f:dc:53:cb:9d:a8:98:67:dd:
55:20:79:23:9d:fa:96:02:3e:8c:bf:a1:16:36:61:1d:e5:d0:
a3:08:61:ff:c3:b2:03:33:b7:a8:a2:fd:12:48:95:a8:6c:57:
59:db:e6:df:6e:44:ac:2c:09:f5:aa:51:d6:5a:f6:45:b2:25:
1a:c4:87:6b:8d:d0:2d:ef:ab:50:fc:5b:8b:5e:6d:71:4b:b2:
10:7c:e5:8e:5d:26:90:cb:e0:a9:7e:83:e2:6b:d4:6a:76:eb:
94:22:0a:cd:fd:54:30:81:52:9c:ea:fe:98:f6:79:e5:f7:7f:
00:c3:37:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:14 2025 by rpki-client