Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: xFTXSRpoUlr971LZvuojt0JzY/Lj/TiUPswYHc4fvLg=
Subject key identifier: 00:99:8D:0A:37:43:61:0B:5E:42:D2:68:4E:D7:FA:9F:61:60:4B:AE
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 019921E7E687B57D4939CA818969C2082D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 0417
Signing time: Sun 07 Sep 2025 02:01:09 +0000
Manifest this update: Sun 07 Sep 2025 02:01:09 +0000
Manifest next update: Mon 08 Sep 2025 02:01:09 +0000
Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: kMDwwKEr4CBgmuS4zSAQfRWgP458A8YoHyebYTneUz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e6:87:b5:7d:49:39:ca:81:89:69:c2:08:2d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: Sep 7 02:01:09 2025 GMT
Not After : Sep 8 02:01:09 2025 GMT
Subject: CN=00998d0a3743610b5e42d2684ed7fa9f61604bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:c2:ed:c8:69:60:7f:86:39:24:21:ac:1d:
ee:72:47:b2:a0:fd:40:57:41:ef:48:d1:a9:02:6e:
3c:8a:a8:27:1f:c1:1e:41:19:42:67:f7:f8:1c:d8:
f3:e3:1d:70:79:fe:1a:29:8b:6e:e1:9b:e9:2d:13:
13:90:b3:cf:d5:19:ef:64:04:37:f2:fc:19:4e:1a:
41:73:1b:1e:f4:01:3f:49:89:b0:7e:95:53:83:41:
7a:bc:d6:fe:85:7a:40:05:2a:7c:58:c2:d8:94:33:
b1:c1:aa:b0:de:14:03:48:e7:f9:be:55:c2:e3:ce:
71:87:9e:ab:d3:71:3a:62:d0:54:db:04:d1:d2:b3:
77:b8:a9:8e:e4:71:68:23:8e:d3:f7:3e:22:cb:b4:
e8:af:d4:2c:2f:3e:5e:ed:d2:56:66:73:7f:2d:82:
1a:88:c8:82:79:dc:b9:b6:74:56:e2:ed:39:75:ce:
84:20:37:dd:2b:99:63:20:b5:88:a5:f4:0f:89:2e:
dd:0f:17:d1:be:45:a6:46:bb:ce:34:ee:f1:83:77:
f5:e6:bc:9a:ee:0e:a6:fa:1a:b8:5c:01:e6:12:00:
ed:06:fb:68:93:02:ab:f6:0c:31:85:5f:ef:42:21:
96:86:2b:9d:62:1d:ab:1c:1d:d2:fa:09:51:9e:27:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:99:8D:0A:37:43:61:0B:5E:42:D2:68:4E:D7:FA:9F:61:60:4B:AE
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f8:fd:84:f5:27:f8:df:d7:a7:fe:64:59:76:8b:bd:12:c5:
8d:46:7c:56:96:dd:68:6b:4b:dd:da:f8:73:4a:e4:aa:01:49:
cb:bd:21:1a:29:a9:3d:54:8a:42:92:c0:e9:f6:45:f2:43:94:
24:e4:3b:e2:c9:d5:c1:13:31:10:b8:e7:04:4b:37:13:e1:b6:
bc:68:49:71:ea:02:6a:47:72:30:f9:da:b1:c5:7e:41:07:d8:
a6:6b:3a:28:98:61:76:44:c7:83:f8:5c:34:ff:16:e4:18:ab:
26:78:9a:e4:59:3b:d2:3a:06:82:56:65:ca:a4:55:26:48:27:
6a:27:97:dd:90:be:03:f5:fd:da:4d:2a:e6:2d:f1:59:4f:ff:
be:96:9e:1e:48:ce:71:ef:9a:9c:be:1f:50:2c:33:a3:31:7c:
99:5d:92:0f:fb:ae:d7:9a:85:3d:3c:49:04:dc:98:97:5e:57:
2b:52:5b:fd:fa:55:fb:f9:7b:56:48:7a:1c:d4:bf:5f:04:47:
12:d1:fe:81:0d:2d:35:9e:a0:35:d4:ed:6d:86:49:39:47:f7:
f3:f6:50:a1:d8:42:0e:c1:36:b8:12:91:ea:4c:a0:0d:98:fd:
f4:27:72:58:f2:e8:4f:08:0b:0d:bb:42:05:df:41:e4:f0:a9:
33:85:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:00 2025 by rpki-client