Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: cG9Dcl7jJmRNRu3s41KToJNI25OBx6yDEFVEG4MqwCA=
Subject key identifier: 48:15:E3:44:2D:5A:78:2C:6F:84:8E:E2:4E:EB:6E:3F:FF:81:4D:FE
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 0199FE10114F7DBBA792C791AC45A649FA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 0667
Signing time: Sun 19 Oct 2025 20:01:29 +0000
Manifest this update: Sun 19 Oct 2025 20:01:29 +0000
Manifest next update: Mon 20 Oct 2025 20:01:29 +0000
Files and hashes: 1: 0-0QU-mcwsSjRhq471-gtd5ufh0.roa (hash: VGJkz0Kb+B/ZQAVYufjsQPwByA4ZPAxHr/hG7qTqtp4=)
2: 1iyiGCCaZCOIy-3SK8-ztkCORB0.roa (hash: 4+8lvNVy48rfdEy8LO/Fif5vr+YXhPfmQva+BSbThYY=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: qebno552HHjYpJHdqiUpi4aR1qAa4ab+c+JvFSDfKJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:11:4f:7d:bb:a7:92:c7:91:ac:45:a6:49:fa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Oct 19 20:01:29 2025 GMT
Not After : Oct 20 20:01:29 2025 GMT
Subject: CN=4815e3442d5a782c6f848ee24eeb6e3fff814dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:37:ab:54:54:47:9d:42:c5:80:6f:f6:b2:82:
c9:2a:c7:2c:35:2e:43:41:a0:90:c1:70:3d:b8:b0:
1f:0c:83:1a:fa:80:02:26:89:e8:4b:4d:c1:ee:c6:
c7:b6:a5:d4:30:66:60:91:ec:45:4e:52:56:78:77:
9b:97:7c:74:50:4a:df:f4:6d:47:78:56:0a:fe:3e:
4e:53:2d:f8:1f:35:44:e0:30:64:4f:0e:db:1a:f4:
41:ec:4d:ff:33:b2:1e:27:c4:e7:47:e8:3c:bd:50:
4b:22:c1:cf:20:88:c3:4a:9d:97:ba:b4:94:a5:e7:
77:37:16:86:93:ec:d4:c1:68:1b:69:6e:f0:14:0a:
42:cb:d5:2d:6b:e5:1f:49:20:5e:60:ac:55:bd:a6:
17:4c:c3:a5:5f:5d:65:53:80:db:b5:ef:ac:ec:60:
94:1f:fd:38:6a:ab:b0:96:ab:7a:c7:67:a0:ad:67:
6e:60:03:ab:e4:ef:7e:2c:78:99:37:2c:53:f6:98:
36:a5:e4:c6:de:35:98:b0:88:a3:50:97:92:32:4f:
d6:9e:92:67:03:e6:12:a2:bf:10:94:a7:ad:11:55:
7f:f6:8d:7e:ce:d5:ec:65:6f:63:86:1e:74:0d:32:
7d:85:35:eb:a4:85:eb:cc:52:45:61:f1:dc:f5:6b:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:E3:44:2D:5A:78:2C:6F:84:8E:E2:4E:EB:6E:3F:FF:81:4D:FE
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:60:fd:af:fc:d1:31:39:07:7e:90:0c:34:1b:6e:46:a8:64:
72:e2:79:b3:cc:ae:11:42:73:de:6a:97:89:a0:4e:ef:8f:ae:
7e:72:ea:15:b3:68:dd:cf:79:27:e4:20:24:b2:cd:c9:cd:82:
aa:8b:15:56:3a:4a:35:37:4a:d8:14:ba:a8:fb:d0:ff:f8:69:
36:bf:4a:8b:cd:37:e9:19:94:6e:bd:46:89:4d:30:c3:60:76:
5c:53:fb:5f:33:81:f5:fd:e9:3e:33:b4:f1:b6:00:bc:5e:12:
11:13:7c:47:d4:b1:47:a2:8f:e9:fa:26:6c:e3:51:ad:87:fd:
d8:aa:b0:5e:eb:6e:6a:02:a6:26:98:e9:dd:22:5d:d7:c7:a8:
f6:40:f6:0f:b2:67:3e:bd:8a:07:7b:f4:cf:06:ca:ba:be:3a:
a6:18:05:fa:be:03:1a:d2:11:d3:72:c7:ba:41:1c:2b:20:d6:
5d:d4:10:0a:52:8e:83:21:b3:8b:8c:ea:fb:73:2d:1b:3e:3c:
ba:1e:a8:ad:d5:48:49:dd:30:9d:69:21:2a:7b:ef:65:10:0e:
c6:f8:eb:84:dc:5d:0b:d1:43:c4:d1:0c:48:43:a4:50:d5:27:
23:6d:58:af:10:8e:6e:7b:ae:de:e1:6c:59:b0:93:ea:86:9f:
d2:9a:59:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:58 2025 by rpki-client