Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: lQoVIycfQJ5MkENLuqsAdCvGPDyEh8kmiu4GtA7Znmk=
Subject key identifier: 0D:36:37:68:35:3A:41:BA:D1:3F:81:4F:E0:32:75:DA:E3:C2:F3:ED
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 019921B265CB4513CBB9882A12DE3B8E764B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 05C0
Signing time: Sun 07 Sep 2025 01:02:43 +0000
Manifest this update: Sun 07 Sep 2025 01:02:43 +0000
Manifest next update: Mon 08 Sep 2025 01:02:43 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: 0h/8X8+xGhOn2Y+pHxK+mxu771RGfTYBe9VRXcsDB90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:65:cb:45:13:cb:b9:88:2a:12:de:3b:8e:76:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Sep 7 01:02:43 2025 GMT
Not After : Sep 8 01:02:43 2025 GMT
Subject: CN=0d363768353a41bad13f814fe03275dae3c2f3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:b3:8a:54:cb:69:07:8a:bd:21:2d:7e:ef:
b6:95:50:86:c0:8f:7a:48:11:ad:b3:1c:de:d8:f2:
31:0f:0a:1d:6b:da:eb:ae:40:a1:bd:b5:7f:d8:2d:
3b:e0:9a:43:b7:cb:bb:05:f1:e8:c9:70:aa:94:8d:
76:60:54:e9:8a:b1:d1:30:7d:7b:86:d2:2c:1b:aa:
c3:71:90:66:52:7e:9a:47:ce:b7:55:2b:6b:29:93:
4d:9a:04:a1:ce:82:bc:14:cd:94:44:8b:d5:eb:95:
7d:91:15:5f:0f:26:d3:58:c1:ca:4a:68:85:ae:d8:
a0:68:66:92:91:27:2a:83:22:c1:12:70:ef:d0:20:
7f:26:33:d0:98:22:5a:50:54:44:26:80:6b:13:dd:
2d:ba:33:7b:26:8a:33:7a:be:f4:3d:e3:c9:b3:dc:
13:dd:07:3e:31:e2:85:98:c9:70:cd:73:6b:19:da:
03:05:a6:4d:bf:1a:f7:36:6d:d7:90:12:3b:d5:bd:
6e:c0:e8:4a:13:59:44:13:14:a2:43:f9:c7:98:aa:
69:d3:40:8d:65:5c:36:49:b7:29:99:29:8c:a3:67:
13:b0:72:1b:e6:3e:a7:76:a0:13:34:d2:42:b7:81:
7a:36:02:48:11:08:d5:fc:bc:9f:cb:0c:e9:26:3a:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:36:37:68:35:3A:41:BA:D1:3F:81:4F:E0:32:75:DA:E3:C2:F3:ED
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:94:1c:1c:bc:39:ab:49:d5:fd:2c:e0:44:5d:4e:91:8a:8f:
ba:35:2e:cd:49:09:2c:e6:0d:a6:33:9a:7b:15:93:f3:1d:7c:
c2:2b:71:d9:a0:16:83:54:d9:72:95:6b:1c:d5:44:80:51:d0:
91:37:76:0b:59:eb:3b:d1:0e:41:5b:19:12:58:94:b7:fe:0c:
02:ee:df:73:76:3a:d0:9c:40:41:16:41:b9:f6:85:56:23:e9:
cc:cc:4e:71:5b:3d:ab:e2:e2:5f:66:3f:0f:1e:3a:a3:d0:62:
ec:74:c7:67:81:7a:4b:35:1e:c2:28:42:e4:83:42:a7:f1:d1:
19:34:cd:b4:12:b4:a5:d7:c7:10:0d:2f:60:0e:fb:e7:0e:da:
99:01:a5:b2:67:56:5e:30:ed:8f:0c:2a:10:e9:4e:8c:96:3e:
8f:a1:74:70:dc:07:6b:9c:a1:26:e9:0b:6a:e7:18:27:c2:0d:
2a:d4:94:52:74:b0:a2:38:dd:51:6c:37:a2:0d:f2:1c:41:db:
38:17:9e:0d:e1:fe:2a:1f:bf:44:35:1b:25:33:21:60:2c:5f:
68:de:ed:a5:ff:bc:d9:1f:af:29:6b:0f:ec:a4:88:d8:6e:38:
24:07:4b:a5:6a:0c:56:c5:42:21:6a:31:4a:02:72:a1:94:2c:
e3:21:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:24 2025 by rpki-client