Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: /LiKXrALMlFw7BUDH40W6u23pvy7CdE/x2FkucK38QM=
Subject key identifier: C0:09:5C:29:83:7F:9D:B2:9E:07:0F:9A:44:A3:1F:D3:66:08:03:1A
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 0198D4E0F45B9526252D78A8E051BEE1A669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 1129
Signing time: Sat 23 Aug 2025 03:02:49 +0000
Manifest this update: Sat 23 Aug 2025 03:02:49 +0000
Manifest next update: Sun 24 Aug 2025 03:02:49 +0000
Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: teEruqGVx/JGfdpTjqrCeD6jUdoqtCE7UN/rfGX/Rw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:f4:5b:95:26:25:2d:78:a8:e0:51:be:e1:a6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Aug 23 03:02:49 2025 GMT
Not After : Aug 24 03:02:49 2025 GMT
Subject: CN=c0095c29837f9db29e070f9a44a31fd36608031a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:09:4a:f5:c4:ac:06:83:3b:b1:2c:5a:4f:
7a:e5:87:78:0c:59:99:91:df:87:7d:d3:c5:73:13:
1b:2c:7a:92:c3:ff:fd:59:0d:1a:0d:46:52:77:6b:
f1:eb:1d:93:07:cf:45:19:eb:8c:c6:9c:04:79:0b:
77:f9:d5:5c:db:72:2e:6b:ab:7d:68:85:13:d2:34:
c0:55:f2:f9:06:fe:00:62:46:bd:41:a0:b4:dc:c3:
a2:12:d6:7b:bf:3c:be:ab:fd:4c:55:0c:9b:a3:82:
69:f1:73:90:2a:cc:0d:60:af:f8:75:ea:26:c6:df:
ed:2e:7f:c2:2e:fb:8e:c4:34:37:43:34:dc:58:f7:
3c:dc:06:a3:35:95:20:e5:9c:6a:df:44:c0:16:cc:
98:48:a8:ee:59:4a:49:91:f4:da:9f:07:2e:60:98:
73:12:96:4a:87:86:0f:40:0c:d3:a3:ae:16:de:d3:
e7:a2:68:94:37:62:26:92:d6:39:36:7a:ff:35:72:
6b:bb:bb:8c:58:ed:65:81:29:4b:e0:a8:38:a6:6e:
53:6a:3f:9b:1e:d8:29:0d:77:42:76:31:d1:92:f4:
56:51:d0:e3:5b:4e:76:d5:24:2e:f2:6d:06:1d:17:
2d:0c:2b:c9:bf:7e:2e:b6:10:be:46:ba:00:e4:07:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:09:5C:29:83:7F:9D:B2:9E:07:0F:9A:44:A3:1F:D3:66:08:03:1A
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:fd:d3:bc:9f:6b:cb:89:f4:67:5f:27:46:e3:61:25:2e:
d2:b0:8b:d7:ca:db:f8:ff:7c:40:30:ff:68:25:6a:c5:08:65:
65:a4:5f:fa:2f:c5:6c:93:ca:02:cf:6e:39:93:27:5f:b9:6b:
de:9a:76:31:1a:7a:ce:3d:d6:88:fa:d5:bd:7e:46:5c:fa:77:
99:ae:66:05:7b:bf:0f:14:a9:9b:34:94:06:5d:ce:2c:dd:35:
00:18:d7:17:da:ae:54:04:2f:6a:97:f5:37:5b:62:42:70:36:
cf:ca:4f:07:3b:62:d4:f7:ed:d0:18:e9:8e:eb:bf:46:89:cf:
17:5f:55:87:c7:1c:6a:64:f4:91:e3:01:29:a0:e4:b6:32:94:
62:74:72:25:ec:f7:22:4e:1b:f2:fa:a6:f9:9c:b4:fd:9a:df:
a8:1c:32:0a:e9:06:76:c6:09:e7:64:74:c5:32:3b:11:f1:c0:
95:f1:c0:97:df:af:d3:09:1f:5f:7c:b4:82:6c:e2:76:d6:35:
ee:f7:f9:7e:38:e2:0b:03:55:66:a0:c1:d3:c7:bc:7c:8a:9c:
b9:80:56:f0:ac:f8:d5:54:72:4c:7c:33:fb:a7:f7:27:56:4a:
27:6f:5d:ce:e4:0f:2f:2f:1c:18:94:6c:a2:ba:46:a6:c3:ad:
ee:8b:39:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4PRblSYlLXio4FG+4aZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj
OWRiNWYwHhcNMjUwODIzMDMwMjQ5WhcNMjUwODI0MDMwMjQ5WjAzMTEwLwYDVQQD
EyhjMDA5NWMyOTgzN2Y5ZGIyOWUwNzBmOWE0NGEzMWZkMzY2MDgwMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn0JSvXErAaDO7EsWk965Yd4DFmZ
kd+HfdPFcxMbLHqSw//9WQ0aDUZSd2vx6x2TB89FGeuMxpwEeQt3+dVc23Iua6t9
aIUT0jTAVfL5Bv4AYka9QaC03MOiEtZ7vzy+q/1MVQybo4Jp8XOQKswNYK/4deom
xt/tLn/CLvuOxDQ3QzTcWPc83AajNZUg5Zxq30TAFsyYSKjuWUpJkfTanwcuYJhz
EpZKh4YPQAzTo64W3tPnomiUN2ImktY5Nnr/NXJru7uMWO1lgSlL4Kg4pm5Taj+b
HtgpDXdCdjHRkvRWUdDjW0521SQu8m0GHRctDCvJv34uthC+RroA5ActswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAJXCmDf52yngcPmkSjH9NmCAMaMB8GA1UdIwQY
MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt
MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri
LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblj907yf
a8uJ9GdfJ0bjYSUu0rCL18rb+P98QDD/aCVqxQhlZaRf+i/FbJPKAs9uOZMnX7lr
3pp2MRp6zj3WiPrVvX5GXPp3ma5mBXu/DxSpmzSUBl3OLN01ABjXF9quVAQvapf1
N1tiQnA2z8pPBzti1Pft0Bjpjuu/RonPF19Vh8ccamT0keMBKaDktjKUYnRyJez3
Ik4b8vqm+Zy0/ZrfqBwyCukGdsYJ52R0xTI7EfHAlfHAl9+v0wkfX3y0gmzidtY1
7vf5fjjiCwNVZqDB08e8fIqcuYBW8Kz41VRyTHwz+6f3J1ZKJ29dzuQPLy8cGJRs
orpGpsOt7os5xQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:14 2025 by rpki-client