Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: GhTwFepR3ToiPlU9q/qn7CMEgshZ+SdpA3yvKkKxoXk=
Subject key identifier: E5:5F:85:93:E3:BD:4F:AC:9C:59:A7:31:BA:E2:FE:EE:CA:35:AA:AE
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 01993502159800A8B96A426930336BCC08B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 088C
Signing time: Wed 10 Sep 2025 19:02:32 +0000
Manifest this update: Wed 10 Sep 2025 19:02:32 +0000
Manifest next update: Thu 11 Sep 2025 19:02:32 +0000
Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: rDSg2ggYC/swtdFGdiXPnDTu/OBQ8Zf0frsFvqnBj/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:15:98:00:a8:b9:6a:42:69:30:33:6b:cc:08:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Sep 10 19:02:32 2025 GMT
Not After : Sep 11 19:02:32 2025 GMT
Subject: CN=e55f8593e3bd4fac9c59a731bae2feeeca35aaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:0c:39:01:19:69:1b:58:4c:52:a9:a2:e4:
01:74:cb:35:c7:3b:65:84:1a:de:99:26:77:9a:ae:
2e:0b:c2:75:93:85:8e:27:76:d6:76:e5:d5:9b:68:
d7:79:40:58:f6:7d:c4:ab:a1:30:48:21:59:19:cf:
b5:d4:85:c2:ac:e2:e9:d3:38:93:20:17:32:3c:28:
7d:57:ce:86:26:21:f8:13:7d:d8:ec:03:5c:4c:a9:
ba:a3:f5:9d:cb:7e:4f:fd:41:9a:df:22:49:b9:8d:
d6:d9:08:ed:4a:ca:cd:f2:69:dd:ed:06:d5:1c:c8:
14:1f:12:5d:e0:4d:4c:57:9a:01:b3:5d:97:81:3d:
62:ec:23:f1:73:d3:d7:21:ea:57:9a:b7:a0:6c:23:
b2:83:0b:f3:13:c6:39:e1:e8:15:15:5f:6e:08:e6:
a1:0f:84:ab:af:c2:3c:47:f8:5c:d5:71:f3:b2:6f:
8b:ee:d8:fb:75:d2:2a:e0:c1:f8:e9:02:98:c1:d2:
7c:f1:21:e0:0d:89:7b:3c:40:4a:69:f0:b2:c5:d0:
16:d4:26:00:1a:79:b6:f8:82:93:be:ba:d5:57:a9:
43:59:f6:8b:2e:53:39:61:53:c2:a1:df:ab:0e:d9:
8c:21:e7:f2:7f:23:46:ac:94:66:85:6e:e6:a9:0e:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:85:93:E3:BD:4F:AC:9C:59:A7:31:BA:E2:FE:EE:CA:35:AA:AE
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f2:a5:b9:1c:02:df:09:8a:ac:ec:ea:6f:b1:d2:15:0a:bb:
59:ed:f2:0e:1a:cb:58:a0:9d:ef:81:05:bb:e2:1b:8c:29:c2:
23:1f:cd:98:cd:70:83:bf:d3:24:5a:3f:b2:9e:3e:54:c8:17:
d2:4b:e3:a3:50:f6:1d:6f:a2:73:5c:63:c6:f0:19:58:97:69:
00:60:c1:19:e1:d5:b5:33:42:5e:bb:dc:d5:5f:01:96:80:79:
7a:06:50:fa:af:58:6f:de:94:dc:53:e6:1f:25:f1:68:d9:17:
d6:3e:25:a8:a2:c1:8c:e0:f7:55:5a:11:d2:f0:e3:7a:17:4a:
91:b8:4c:88:8d:52:31:29:a4:ec:f2:bf:f4:ed:0f:01:c5:33:
68:29:68:30:2c:80:b3:23:d3:64:04:0e:7d:35:10:a2:00:70:
da:ce:89:ca:4a:7d:a0:ac:d6:dd:2e:bb:c6:e9:75:32:71:02:
2c:72:0f:2a:71:d4:d6:26:f9:b3:e5:11:fd:0b:8a:73:b9:24:
77:6d:77:43:70:51:dc:35:b6:75:04:a7:30:77:b3:64:ea:a3:
32:b2:5d:e8:2c:e2:7e:59:ba:a5:da:19:06:1e:fe:23:31:d6:
df:ab:73:12:33:de:a3:39:a5:a0:c6:d9:43:7d:8d:60:8b:7d:
3e:65:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:18:27 2025 by rpki-client