Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: aonp4Xjw0Kvui3pormjX0jgToc675FdPuHeGr2dc5eM=
Subject key identifier: 90:99:9C:39:1D:F1:1A:FB:ED:BE:1D:FF:E6:D7:8E:BA:7A:F9:17:8B
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 01993802B6BC81B478C4700C77F413EB5E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 101C
Signing time: Thu 11 Sep 2025 09:02:05 +0000
Manifest this update: Thu 11 Sep 2025 09:02:05 +0000
Manifest next update: Fri 12 Sep 2025 09:02:05 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: Xn1geDW/CpzEvUHU5Rh1K7EYS/I/ISucQfScKbwddtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 09:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:b6:bc:81:b4:78:c4:70:0c:77:f4:13:eb:5e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Sep 11 09:02:05 2025 GMT
Not After : Sep 12 09:02:05 2025 GMT
Subject: CN=90999c391df11afbedbe1dffe6d78eba7af9178b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:46:07:6b:33:2b:1e:b9:e0:2b:11:d0:e3:c1:
4c:97:f5:64:93:10:6d:c4:62:6a:4e:30:2a:79:ea:
84:7a:f6:dc:bd:e1:fe:47:d9:3e:c0:70:4b:27:ac:
82:33:1b:11:6b:5b:9c:39:ad:11:1a:10:2e:ec:5c:
ac:ad:91:c9:e3:32:f4:5b:6e:7a:e2:fe:9f:e2:a3:
8f:a2:17:53:15:28:4e:b9:eb:05:65:83:8d:e5:ce:
1a:15:ea:00:27:20:bd:4c:ed:5c:7f:30:4b:85:44:
25:6d:6a:b3:09:58:21:ed:b0:f8:81:85:cf:eb:93:
42:2d:88:34:b0:ae:ae:84:41:a2:78:6e:ea:dc:b0:
88:35:b6:8e:7d:5a:6e:33:0e:d0:2a:a7:78:5a:f4:
20:2f:08:31:56:17:54:13:0d:28:f4:77:e5:ca:be:
01:75:e4:3e:3f:30:f9:00:ff:a6:cc:e6:47:b6:3c:
6f:4b:b3:43:de:a8:ae:6c:ea:c1:dd:28:fd:b6:99:
e8:a7:7c:9e:15:a9:ed:2a:81:5f:d5:a6:c8:62:a8:
06:11:3b:df:28:ed:c5:b1:01:6b:f1:49:3d:f6:a5:
e8:27:ad:8c:3d:47:de:4a:5f:9f:9a:50:2f:43:64:
b7:78:31:1d:70:05:49:5e:cf:ed:87:8f:66:1e:d8:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:9C:39:1D:F1:1A:FB:ED:BE:1D:FF:E6:D7:8E:BA:7A:F9:17:8B
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f3:1c:ba:8c:4a:0f:5c:54:ad:86:88:2a:d1:3d:8d:62:b6:
92:e7:d2:37:05:1c:3a:3a:ce:e5:72:9b:be:5b:87:d9:68:6f:
ba:42:91:68:b7:a0:f0:9f:f3:77:a0:c9:18:e2:84:50:ed:34:
33:d0:88:9e:58:39:1a:39:99:65:1a:0e:62:ab:53:b4:c8:5e:
9a:ad:b0:ca:a4:f0:f3:8b:f5:0e:2f:d1:b3:9c:56:d8:21:22:
8f:f4:24:17:a9:0f:2e:d1:de:8f:f1:8e:f8:18:b1:89:70:4c:
a6:51:54:31:d7:90:e8:68:3c:47:b1:45:99:ed:80:a4:59:e9:
1c:76:32:c7:2e:fb:b9:b5:40:14:e1:3d:40:6a:50:39:c1:d8:
ab:1b:a4:ce:c3:60:04:27:96:27:c1:97:c7:94:72:2f:a3:13:
7f:94:15:d9:c4:ab:4c:23:cb:d4:c2:f5:06:4c:1c:5e:c2:f5:
2d:de:6b:0d:17:a6:31:93:47:8c:1c:d9:ce:4b:0d:8b:a5:ac:
0d:99:8b:60:ac:aa:ea:fe:92:f6:96:49:6a:0b:86:60:0c:14:
8e:0d:81:b4:dc:cd:61:b3:9c:8f:03:be:97:5c:47:03:3e:bc:
ca:1c:11:9f:8d:42:9e:7f:14:5a:14:c9:9b:58:82:5f:41:2e:
3c:ee:20:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4Ara8gbR4xHAMd/QT615PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWJkNjJiZWVjYWIwZTkwM2IyOTgxMTI0MWRiMjQ0YmJm
NTJjMzkwHhcNMjUwOTExMDkwMjA1WhcNMjUwOTEyMDkwMjA1WjAzMTEwLwYDVQQD
Eyg5MDk5OWMzOTFkZjExYWZiZWRiZTFkZmZlNmQ3OGViYTdhZjkxNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEYHazMrHrngKxHQ48FMl/VkkxBt
xGJqTjAqeeqEevbcveH+R9k+wHBLJ6yCMxsRa1ucOa0RGhAu7FysrZHJ4zL0W256
4v6f4qOPohdTFShOuesFZYON5c4aFeoAJyC9TO1cfzBLhUQlbWqzCVgh7bD4gYXP
65NCLYg0sK6uhEGieG7q3LCINbaOfVpuMw7QKqd4WvQgLwgxVhdUEw0o9Hflyr4B
deQ+PzD5AP+mzOZHtjxvS7ND3qiubOrB3Sj9tpnop3yeFantKoFf1abIYqgGETvf
KO3FsQFr8Uk99qXoJ62MPUfeSl+fmlAvQ2S3eDEdcAVJXs/th49mHtiHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCZnDkd8Rr77b4d/+bXjrp6+ReLMB8GA1UdIwQY
MBaAFMsb1ivuyrDpA7KYESQdskS79Sw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYt
ZTQwMTZhZDUzY2M5LzEveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYtZTQwMTZhZDUzY2M5
LzEveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefMcuoxK
D1xUrYaIKtE9jWK2kufSNwUcOjrO5XKbvluH2WhvukKRaLeg8J/zd6DJGOKEUO00
M9CInlg5GjmZZRoOYqtTtMhemq2wyqTw84v1Di/Rs5xW2CEij/QkF6kPLtHej/GO
+BixiXBMplFUMdeQ6Gg8R7FFme2ApFnpHHYyxy77ubVAFOE9QGpQOcHYqxukzsNg
BCeWJ8GXx5RyL6MTf5QV2cSrTCPL1ML1BkwcXsL1Ld5rDRemMZNHjBzZzksNi6Ws
DZmLYKyq6v6S9pZJaguGYAwUjg2BtNzNYbOcjwO+l1xHAz68yhwRn41Cnn8UWhTJ
m1iCX0EuPO4gcQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 17:34:15 2025 by rpki-client