Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: cbLrhLFQtM6a5lI/csgz9yrdTuLsgobvQOs4DxZGs0Q=
Subject key identifier: 6F:F3:E5:E7:66:12:B3:2B:51:63:CA:55:D2:E6:AB:08:96:1C:4B:21
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 0199356E6BB47D26060D9ED529CE80A025D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 115B
Signing time: Wed 10 Sep 2025 21:00:52 +0000
Manifest this update: Wed 10 Sep 2025 21:00:52 +0000
Manifest next update: Thu 11 Sep 2025 21:00:52 +0000
Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: Jtj9iKu2w17iLSP9u1xo2A1Rx2/Hx/18ROBIOGlhuOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:6b:b4:7d:26:06:0d:9e:d5:29:ce:80:a0:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Sep 10 21:00:52 2025 GMT
Not After : Sep 11 21:00:52 2025 GMT
Subject: CN=6ff3e5e76612b32b5163ca55d2e6ab08961c4b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:ba:00:46:34:28:a4:19:de:5a:19:a8:a6:
c4:49:1b:7b:88:01:80:1d:5a:3e:d9:19:a4:9b:65:
00:39:22:9e:29:26:c0:4c:87:72:92:01:ce:91:a7:
80:14:ab:bb:19:42:f7:98:75:23:3f:2e:42:bb:02:
05:9d:4e:82:ad:16:86:f6:62:34:e3:4b:2e:e3:8b:
65:9a:7a:a8:20:83:aa:13:4a:24:97:11:23:74:1a:
60:42:30:49:85:a3:a2:88:42:a4:46:48:bb:0a:60:
22:69:5b:b1:4c:d9:a3:a6:0d:de:cd:46:94:8f:b2:
1e:e2:3f:a4:8c:8d:d0:7a:e4:82:69:60:17:9c:41:
06:ca:af:b6:bb:58:c6:55:0d:29:c7:df:23:89:fb:
9b:23:98:ef:48:66:c7:eb:96:95:66:fa:ae:8a:67:
3f:98:9f:aa:0d:1e:1d:f0:00:fc:77:bf:78:5e:c3:
de:94:c0:65:7e:1b:42:57:e1:44:3f:93:4d:d1:97:
f0:6c:63:fd:f7:eb:31:b4:68:97:dc:a8:ba:a2:e9:
2e:7c:76:78:30:28:bc:3e:20:59:d1:85:5b:4f:f9:
40:a0:5e:80:8a:cf:f4:19:99:ca:e2:68:af:57:92:
32:88:fe:58:57:ef:50:dd:e6:71:00:2d:95:c6:60:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F3:E5:E7:66:12:B3:2B:51:63:CA:55:D2:E6:AB:08:96:1C:4B:21
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2b:3f:1a:0b:0a:4e:c2:9f:c4:17:1f:d2:79:c3:ea:43:cd:
4d:01:7b:87:b3:cc:ad:fa:e4:02:63:9c:40:47:f0:b6:dd:b0:
c3:13:d6:89:9b:9a:f7:12:e5:9e:63:98:bc:42:79:22:cb:d0:
3a:84:82:03:36:eb:a8:35:8a:92:6c:0e:fd:d4:e9:0c:5a:6b:
ec:2f:ba:0a:e3:3d:9d:0a:de:0e:b2:cb:2e:9e:79:9e:66:ab:
d6:e9:0d:e6:62:0b:dc:be:21:92:23:74:a0:8f:bb:04:4b:71:
26:5e:73:49:7a:c4:86:b7:c7:8f:28:90:ab:c7:78:5c:df:ff:
67:af:a5:53:72:d0:47:2e:14:95:d2:93:6f:e4:3a:1e:9d:e7:
b4:25:f2:c3:d8:5a:0a:e7:1c:89:b1:2c:eb:57:28:0f:71:41:
ed:23:f8:cd:bd:5e:14:e9:30:e8:7c:4e:3b:c2:f9:9b:2c:a9:
b8:95:81:96:3b:06:f8:25:f0:c7:c2:e7:5e:c9:93:33:b3:71:
d6:de:70:f4:d5:b7:0d:43:2e:0c:45:bd:b4:11:6b:58:8c:38:
54:49:7c:cb:5b:b7:2a:aa:ef:06:e2:95:70:f3:e5:79:74:03:
5d:53:86:e1:8b:72:0c:14:ef:d6:9a:75:62:d0:df:97:71:a2:
09:8a:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:02:23 2025 by rpki-client