Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: AHoglYK/DO0okqJuzwzVGsfR7nfKXcAGNHw2SWMD6tM=
Subject key identifier: 9E:83:02:01:6E:59:A1:57:BA:7E:C7:11:F4:B4:A5:42:01:0D:E6:05
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019A71EEAC6FFFA11AC07BCEE8F1D381019F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 06A3
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: 0-0QU-mcwsSjRhq471-gtd5ufh0.roa (hash: VGJkz0Kb+B/ZQAVYufjsQPwByA4ZPAxHr/hG7qTqtp4=)
2: 1iyiGCCaZCOIy-3SK8-ztkCORB0.roa (hash: 4+8lvNVy48rfdEy8LO/Fif5vr+YXhPfmQva+BSbThYY=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: vpd3JLdo8gQkpqQXoT68DrI9abUw0zLv+YdG6p/ZyHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ac:6f:ff:a1:1a:c0:7b:ce:e8:f1:d3:81:01:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=9e8302016e59a157ba7ec711f4b4a542010de605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:8e:f6:bb:b3:7a:43:44:ab:dc:c2:70:a9:
46:4a:9d:8b:3e:e3:ab:b0:61:29:64:8a:5e:38:99:
1f:88:1c:a3:b7:ae:28:a5:db:49:76:79:f9:f6:e6:
3c:8e:9f:2a:b8:2d:fd:56:f7:db:b5:bc:15:9c:a4:
69:86:14:e2:f7:89:c4:09:38:4d:31:dc:10:b3:2f:
7a:ea:03:38:e9:28:95:e2:4c:c4:aa:91:2e:f8:8e:
ab:e9:dc:1b:3d:d1:b5:9a:9f:72:eb:fd:9b:9b:5d:
24:e0:f2:f1:8d:f5:88:20:98:1f:c3:8c:49:4c:46:
a3:7d:a3:47:8c:ed:0c:c5:0a:1d:14:6e:22:2a:1f:
a8:c3:eb:30:2d:d1:59:53:8f:09:0a:ea:bf:b7:75:
bd:d9:12:48:d2:9e:b1:39:88:b6:a1:ff:59:9b:d8:
d6:d6:f4:92:58:3c:04:83:0d:29:4c:74:1b:59:a7:
16:5c:7c:d1:f2:7b:be:85:11:75:60:9d:f5:34:8c:
df:32:be:ef:33:d0:25:80:4c:46:e6:9f:77:2f:71:
31:dd:f1:6c:75:fc:01:4f:96:e7:26:f8:3f:9a:0f:
16:df:b5:b0:9f:22:48:5f:e1:b0:18:2b:f4:ce:7e:
5d:43:65:07:56:29:29:d5:ef:cf:5d:36:3a:70:81:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:83:02:01:6E:59:A1:57:BA:7E:C7:11:F4:B4:A5:42:01:0D:E6:05
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ca:22:2b:f9:0d:48:6b:88:88:a2:a7:c1:2c:89:62:02:28:
92:60:e2:d0:ba:4f:cd:14:a0:a2:53:56:d2:a2:29:9e:a8:f3:
d6:b0:e1:f5:56:60:db:9d:7e:64:a6:43:18:c4:99:5f:98:37:
ab:f2:67:49:cb:eb:a8:3a:84:d3:89:34:66:85:87:7c:59:36:
5f:cf:43:bf:4b:2a:90:79:0d:02:85:f7:95:30:75:16:0f:9a:
34:6f:be:ce:e3:a8:5e:e3:91:da:b5:1e:75:87:83:a2:64:eb:
c1:4f:82:49:d5:23:ee:e8:3a:f5:64:3f:8b:66:ed:27:36:9d:
1c:cf:7c:cc:b9:6b:66:37:82:ed:4e:86:56:94:ff:dc:b1:a6:
cd:d8:57:a2:7e:73:94:3a:f4:4e:68:3d:c0:04:44:2c:ac:7e:
ec:35:b4:fa:59:69:6a:5a:03:75:ee:ea:b3:31:9c:ad:36:ca:
9d:40:9c:ae:8e:05:ff:39:4b:43:8e:18:9c:6b:38:ec:4e:c8:
36:8d:83:d9:b5:54:9d:55:e7:ca:64:d5:c5:42:02:d0:a0:6e:
68:99:78:3b:6e:02:b4:48:2e:5e:b0:75:89:f0:9c:3c:27:04:
84:e4:4d:12:a0:14:58:f2:ec:f9:ae:ad:26:ab:bb:1b:1d:10:
2b:7b:b6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:27 2025 by rpki-client