Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: Owo9m3EU47I7fUI/7mZXwH+iLb9bKIHvNu1skBDAfiM=
Subject key identifier: 9F:11:03:84:06:61:C0:B5:DC:FF:90:2C:68:61:D7:AF:B1:7C:B8:26
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 01991C1C41C8259E55764D0CE40DED6E9D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 05F2
Signing time: Fri 05 Sep 2025 23:00:37 +0000
Manifest this update: Fri 05 Sep 2025 23:00:37 +0000
Manifest next update: Sat 06 Sep 2025 23:00:37 +0000
Files and hashes: 1: 0-0QU-mcwsSjRhq471-gtd5ufh0.roa (hash: VGJkz0Kb+B/ZQAVYufjsQPwByA4ZPAxHr/hG7qTqtp4=)
2: 1iyiGCCaZCOIy-3SK8-ztkCORB0.roa (hash: 4+8lvNVy48rfdEy8LO/Fif5vr+YXhPfmQva+BSbThYY=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: mNXsQs38GyimFdGYABwN/g5YjXkfzi1lUSZOStd8ujg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:1c:41:c8:25:9e:55:76:4d:0c:e4:0d:ed:6e:9d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Sep 5 23:00:37 2025 GMT
Not After : Sep 6 23:00:37 2025 GMT
Subject: CN=9f1103840661c0b5dcff902c6861d7afb17cb826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:93:4b:c3:95:c0:96:00:ed:33:3f:59:d9:
65:dd:7f:af:19:77:69:4f:97:a5:e0:a2:68:8d:2e:
46:02:34:0d:71:d6:f3:09:61:58:ff:3d:58:73:78:
b3:4e:46:23:4d:d6:08:bd:71:00:54:a6:8b:bf:dc:
a3:37:e3:59:fd:9b:b8:52:ff:60:87:e1:d8:86:99:
d7:71:16:98:4b:e0:cc:58:36:12:dd:31:5f:a0:ce:
06:e4:87:b3:62:34:80:66:92:5a:fb:fe:74:c6:90:
4b:b1:b9:65:99:21:d1:13:a0:83:10:02:ae:e2:cf:
70:57:d5:1d:41:0c:3f:21:a7:df:75:ab:56:e6:3d:
45:2f:39:bd:8c:eb:13:e1:f3:00:34:f7:26:95:c3:
cb:94:ce:93:a7:ad:e9:ee:51:31:f7:50:6d:70:98:
09:bf:45:d3:c4:b1:d9:13:05:d7:97:b8:2e:95:49:
84:a0:e2:64:b1:11:b1:62:74:c2:1e:96:2e:39:04:
07:7e:74:b2:4a:50:45:59:af:72:b2:45:e0:6a:bb:
15:bd:71:3f:3e:1f:af:98:56:c0:d5:c4:b9:29:d3:
01:ea:c7:f6:cf:93:ba:81:24:a1:7c:a0:6b:ae:0c:
36:46:53:be:5c:90:c0:bc:98:06:aa:13:60:06:e5:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:11:03:84:06:61:C0:B5:DC:FF:90:2C:68:61:D7:AF:B1:7C:B8:26
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:97:a5:51:56:db:c3:af:44:90:dd:17:66:2a:e9:8d:82:7f:
f5:18:70:4c:95:47:7b:31:91:a1:aa:70:ec:fd:6e:12:de:a7:
a6:49:cc:f7:18:b7:a4:ce:5e:ea:e0:b6:24:1b:e7:d4:ad:5f:
4f:d2:05:e2:8d:52:18:10:97:da:b6:20:90:a5:4c:44:da:84:
2d:29:4f:29:a8:09:54:95:d6:30:21:34:81:53:d3:5c:21:d3:
e1:7c:ef:b8:8f:9a:0d:4b:8e:17:17:ad:ba:89:90:85:af:51:
1e:a3:ec:4b:eb:0a:28:d1:68:24:cd:57:5a:17:25:53:1a:6f:
da:4b:b0:78:9b:52:11:d7:90:d7:c4:89:dc:c7:fe:a7:1f:36:
89:b7:12:4e:1a:a0:bb:6c:8e:36:ff:96:72:50:40:3d:81:e9:
d8:45:33:f1:56:29:65:ac:e8:4b:0b:b2:8b:27:45:a2:ce:e6:
0f:5b:17:ed:8f:6c:64:2a:a8:81:8e:d5:ad:69:13:fb:9e:f8:
25:90:2f:01:45:80:e3:8f:7a:cc:3e:df:a1:9d:36:ec:05:0c:
67:55:6e:bf:51:fa:2b:8d:b5:c7:21:05:fc:f7:22:ef:2c:a6:
06:83:a6:63:99:87:b1:2b:3e:93:da:76:35:d2:3e:63:96:d1:
4b:e3:f4:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkcHEHIJZ5Vdk0M5A3tbp2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2M4YmRhMGM2M2U3ZDJkNjVjMTllZDcwNDNiNWEyZDc5
MWMxZjEwHhcNMjUwOTA1MjMwMDM3WhcNMjUwOTA2MjMwMDM3WjAzMTEwLwYDVQQD
Eyg5ZjExMDM4NDA2NjFjMGI1ZGNmZjkwMmM2ODYxZDdhZmIxN2NiODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWaTS8OVwJYA7TM/Wdll3X+vGXdp
T5el4KJojS5GAjQNcdbzCWFY/z1Yc3izTkYjTdYIvXEAVKaLv9yjN+NZ/Zu4Uv9g
h+HYhpnXcRaYS+DMWDYS3TFfoM4G5IezYjSAZpJa+/50xpBLsbllmSHRE6CDEAKu
4s9wV9UdQQw/IaffdatW5j1FLzm9jOsT4fMANPcmlcPLlM6Tp63p7lEx91BtcJgJ
v0XTxLHZEwXXl7gulUmEoOJksRGxYnTCHpYuOQQHfnSySlBFWa9yskXgarsVvXE/
Ph+vmFbA1cS5KdMB6sf2z5O6gSShfKBrrgw2RlO+XJDAvJgGqhNgBuVM0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8RA4QGYcC13P+QLGhh16+xfLgmMB8GA1UdIwQY
MBaAFMjMi9oMY+fS1lwZ7XBDtaLXkcHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQt
ZTMwMzg3YjNmMjExLzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQtZTMwMzg3YjNmMjEx
LzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5elUVbb
w69EkN0XZirpjYJ/9RhwTJVHezGRoapw7P1uEt6npknM9xi3pM5e6uC2JBvn1K1f
T9IF4o1SGBCX2rYgkKVMRNqELSlPKagJVJXWMCE0gVPTXCHT4XzvuI+aDUuOFxet
uomQha9RHqPsS+sKKNFoJM1XWhclUxpv2kuweJtSEdeQ18SJ3Mf+px82ibcSThqg
u2yONv+WclBAPYHp2EUz8VYpZazoSwuyiydFos7mD1sX7Y9sZCqogY7VrWkT+574
JZAvAUWA4496zD7foZ027AUMZ1Vuv1H6K421xyEF/Pci7yymBoOmY5mHsSs+k9p2
NdI+Y5bRS+P0ww==
-----END CERTIFICATE-----
Generated at Sat Sep 6 07:56:22 2025 by rpki-client