Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
File: _MymLL50MyhVVIOoV-Uhhj-VO0E.mft (raw, json)
Hash identifier: Gs7idv/gyabAG/IzR9rWxvOi2QycDB/gE/7bQCVjdHo=
Subject key identifier: BD:3E:7E:32:97:5A:D4:14:DD:CB:14:AE:36:44:EC:BD:96:CD:74:C0
Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
Certificate issuer: /CN=fccca62cbe743328555483a857e521863f953b41
Certificate serial: 019933EE76FF96422D0811A964DD2CB5137A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
Manifest number: 1680
Signing time: Wed 10 Sep 2025 14:01:29 +0000
Manifest this update: Wed 10 Sep 2025 14:01:29 +0000
Manifest next update: Thu 11 Sep 2025 14:01:29 +0000
Files and hashes: 1: SQnsB4pgBnmpIi4TRKO7zpVO0eA.roa (hash: WWdVpcd3MWSz2a/cTGWg0pR5ff1Hobu49xdGhZEZSxE=)
2: _MymLL50MyhVVIOoV-Uhhj-VO0E.crl (hash: JFHhLMnBB8lu+6WEKX598yfJJZUhYiNnVohmbjlOV6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:76:ff:96:42:2d:08:11:a9:64:dd:2c:b5:13:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccca62cbe743328555483a857e521863f953b41
Validity
Not Before: Sep 10 14:01:29 2025 GMT
Not After : Sep 11 14:01:29 2025 GMT
Subject: CN=bd3e7e32975ad414ddcb14ae3644ecbd96cd74c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:ae:97:0d:d6:4f:f9:48:71:29:9a:5d:99:
f0:9e:c5:2f:1c:94:16:60:35:3a:0d:80:88:50:53:
6b:45:30:4f:fe:e2:91:b9:d2:d9:f3:db:8d:9c:9d:
44:03:c0:6b:18:36:01:d1:f1:0a:2f:ac:b8:92:a7:
5e:c1:7b:9f:0c:96:bd:a9:ee:a6:cb:99:ca:9e:66:
e5:3e:d2:8a:60:5f:e9:b2:9b:8e:02:5d:25:18:62:
c2:5b:7b:d8:41:0b:68:01:a9:d8:af:85:09:61:ce:
0c:95:da:ff:e3:91:ef:da:76:18:7a:db:d3:4c:0d:
3f:4c:0b:2b:25:24:92:b8:0b:27:84:39:c8:d1:75:
97:40:7f:80:68:7f:25:a5:03:0e:0d:4f:f5:4e:3d:
d2:be:c6:11:9e:53:51:3f:b2:30:90:9e:1b:08:b4:
16:e9:99:a7:bf:33:16:ea:ce:07:cb:63:97:28:4a:
b5:6b:c8:f8:c8:9e:b6:bf:88:82:e5:38:ae:ba:c9:
c7:b1:59:16:14:20:24:11:de:62:54:4b:f8:9a:30:
19:32:2b:d2:55:0a:7c:10:2c:d9:96:dc:53:1f:63:
c1:6d:32:9a:17:a7:0d:76:fd:3a:86:ae:72:17:b0:
fc:0b:ac:b2:62:03:ff:57:f6:24:2a:c3:51:15:c9:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3E:7E:32:97:5A:D4:14:DD:CB:14:AE:36:44:EC:BD:96:CD:74:C0
X509v3 Authority Key Identifier:
keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c8:27:fe:7c:d4:04:9b:a9:d2:d6:82:04:b2:65:12:d0:a4:
5d:cb:d6:62:22:11:ca:0b:45:d1:bb:d4:59:95:17:1d:2d:82:
9d:c9:53:a6:1d:f9:24:02:ba:33:20:bc:c9:45:f6:71:17:61:
c6:43:00:cd:f9:53:7f:c1:6c:40:27:19:56:91:df:00:a6:9f:
6d:9e:ef:aa:cf:2d:75:fc:05:29:0c:b2:2c:3e:b7:95:06:29:
85:ee:c3:f5:68:5b:a4:89:0a:a1:06:7e:48:4e:1a:2e:0a:2b:
7c:10:d2:69:5d:14:67:42:8c:aa:38:4b:26:04:b8:03:70:bc:
80:8e:10:bc:bb:7b:32:e9:35:de:a9:1f:a5:c9:98:6c:48:02:
a3:78:32:d3:b8:17:aa:2f:74:9d:93:53:98:8a:37:ec:56:0d:
6e:b6:52:a2:cf:ab:ff:28:85:6f:cc:d9:60:53:a1:76:c8:db:
62:c2:ee:d1:d3:e6:67:a6:53:fb:9a:ba:67:b8:47:f5:97:f8:
c1:a3:d4:af:f6:df:83:d7:bc:70:78:65:19:de:24:38:d0:f1:
e1:3b:76:4b:dc:90:ce:40:c1:40:23:24:a2:a0:8c:ec:49:cf:
97:e0:14:42:5b:1a:fe:25:ac:20:b9:6f:24:0f:8f:ca:9d:94:
3c:11:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:54:31 2025 by rpki-client