Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
File: rYY6WJMusYMjlBahz2ao_8POchU.mft (raw, json)
Hash identifier: vNWD5k1Ma8Nv6JtPtjBaZsQZ7SrnQ11XhH2Y4srSsBY=
Subject key identifier: D5:E5:0B:A9:16:01:AD:91:08:54:B0:74:D2:36:7F:7E:37:F0:A1:6F
Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
Certificate issuer: /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Certificate serial: 019916F63F624F47E9D9AD2C4039E3F52908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
Manifest number: 0D5D
Signing time: Thu 04 Sep 2025 23:01:00 +0000
Manifest this update: Thu 04 Sep 2025 23:01:00 +0000
Manifest next update: Fri 05 Sep 2025 23:01:00 +0000
Files and hashes: 1: NsCamS0MlFkmbAx5_LAOWrtBals.roa (hash: LDrv3G809jHIGwEDwg2A1Kbn0Oo37yQBk0cRSClCqYU=)
2: rYY6WJMusYMjlBahz2ao_8POchU.crl (hash: MLQHvZie90P/wxmuXWYdaKwmIjiFz9oQc9hIzpK5AX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:3f:62:4f:47:e9:d9:ad:2c:40:39:e3:f5:29:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Validity
Not Before: Sep 4 23:01:00 2025 GMT
Not After : Sep 5 23:01:00 2025 GMT
Subject: CN=d5e50ba91601ad910854b074d2367f7e37f0a16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:09:6b:b6:6c:b9:a7:b7:c1:41:31:07:08:
76:f4:4c:87:66:13:8d:4d:04:62:f3:f2:d1:4e:b4:
43:02:36:f7:77:4a:be:b5:a8:30:27:6e:b8:fc:ba:
f6:b9:f2:63:11:34:74:df:93:6c:28:13:d5:73:47:
13:83:1f:cf:f4:72:f9:4e:be:2b:e3:f0:6b:d2:5c:
a0:a9:83:66:b8:5b:15:bf:ba:09:8b:9d:af:d3:d7:
0f:d3:61:50:a2:b9:21:fc:aa:ea:cd:dd:57:4c:df:
8a:00:b1:02:99:cd:1b:4c:f1:58:84:51:c2:5d:02:
a1:be:e1:99:10:de:6b:43:82:1b:42:73:47:58:41:
76:99:47:c7:06:0d:e1:8b:6a:da:3f:07:56:be:38:
a6:c5:9d:ed:c2:62:2a:dc:57:de:8a:df:27:f8:5c:
e2:4b:cb:6d:27:4c:a2:70:63:03:f3:56:5f:9d:78:
81:eb:e0:0b:73:65:00:55:1c:30:1d:ad:76:c7:5e:
8c:76:c5:02:9b:46:5b:40:fc:1a:76:ff:ec:df:44:
42:67:dc:c9:41:61:bb:33:73:9a:67:ba:d8:f2:0a:
40:18:02:30:29:59:be:54:a5:bf:35:bf:cb:72:46:
05:ea:fd:74:cd:80:e9:ae:3a:d2:18:a9:62:ff:53:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:0B:A9:16:01:AD:91:08:54:B0:74:D2:36:7F:7E:37:F0:A1:6F
X509v3 Authority Key Identifier:
keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:7f:b0:aa:ec:43:c9:4d:aa:33:41:89:78:52:21:8d:84:
9e:d9:a1:7e:55:41:cf:5a:dd:b2:9e:30:1b:8f:76:e1:b4:eb:
b5:11:a4:fb:67:70:d9:a3:aa:5a:b7:ac:79:3a:83:14:7b:ad:
83:db:fb:51:0f:b9:be:a4:fd:4e:22:d7:ad:fa:ae:ab:e3:7c:
72:26:a0:eb:20:ef:ac:3c:e5:bc:31:f0:83:20:7f:ac:46:05:
c9:54:63:72:ee:0a:57:09:76:c5:c3:65:e0:f4:63:6a:d1:9c:
0a:b5:af:df:93:1b:db:89:c2:42:93:c1:ca:ca:24:84:9f:ed:
94:34:4a:0d:12:14:10:b1:2b:fd:09:96:ca:9b:24:ce:b1:cb:
28:ab:20:57:2e:2c:5d:f2:08:cd:ee:39:82:33:29:30:ed:0a:
59:3b:d0:79:84:1b:85:5c:1e:ff:a2:6a:7b:cb:e0:26:fa:a3:
a6:55:f7:56:77:da:02:2f:33:26:66:a6:9e:01:e1:b9:19:ca:
1d:fe:56:12:e2:27:f2:5c:d3:02:4c:8a:f3:56:a3:51:51:e0:
b8:24:f7:6d:91:8c:8e:1d:8d:9e:f6:aa:03:ff:4b:72:6b:55:
5e:72:a5:b5:41:4e:de:ec:27:89:89:00:23:4b:02:31:97:14:
a5:b7:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:44 2025 by rpki-client