Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File: YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier: TvH1ptYtO2fMyUwSLrsV45sF0UHvxTaW1CgolezRWyI=
Subject key identifier: 40:22:D2:5F:49:93:1C:1C:45:2B:19:C4:81:E2:87:63:FE:21:CE:52
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 0199FB7C9ED589F9E908A8C839DFD0373CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number: 09AE
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: PQtqUQS_s4n0kinqfMA_4YnfNNY.roa (hash: D39QZGtQwYdkCVJ23N2oD5YrqEwumLtNGePQrn18tVk=)
2: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: fdXi4KZwd9OPsOXgjqZ+2CMDN8qFRa+ULf0tKEPIGrI=)
3: pdC1KsOnjOvGFainyuUjzICPFes.roa (hash: 9PpZVEet2RmTDOe5qqgJNSaHCeSHC8NK2RueyDRCl5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9e:d5:89:f9:e9:08:a8:c8:39:df:d0:37:3c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=4022d25f49931c1c452b19c481e28763fe21ce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:50:2a:57:1e:20:b9:ce:df:f8:8f:ff:b4:
a5:86:b5:96:61:31:07:19:9a:f5:02:65:36:3f:ed:
90:c1:45:64:5c:bc:41:e0:d8:84:73:96:6d:c9:15:
0a:ae:03:08:d5:53:d9:ee:93:57:a7:86:f5:ed:9d:
b1:8e:da:60:f9:45:ab:9f:1d:06:97:43:f5:e6:45:
19:2a:b0:a5:f4:2c:a0:d5:ef:9a:b1:26:36:d8:2d:
35:ab:85:a6:46:70:9a:52:9b:d3:a5:58:66:ef:8e:
6c:6b:e2:92:e1:6c:5c:d9:45:ec:8f:ae:99:58:9b:
fa:5f:c8:40:e1:7f:90:d7:3e:2d:c7:5f:08:7a:25:
2d:31:7c:af:d1:52:c0:5b:02:3d:59:05:c1:5d:1d:
b8:05:a4:94:68:5f:32:6e:ff:6d:2a:04:c3:15:df:
d9:a7:f1:57:30:ba:d0:8c:41:7d:9d:32:c6:ed:ee:
6f:f2:13:5e:51:cb:6b:30:b7:57:c7:40:c7:54:4f:
43:90:25:e0:ff:1c:7f:d7:f5:6a:63:6a:cf:ae:5c:
97:ae:49:5e:49:1b:2e:c3:5b:b7:31:69:34:c7:5a:
62:5a:89:5b:5d:8a:ef:8e:b0:10:d7:d7:e2:ee:4d:
e3:ad:20:7a:e5:ef:24:d6:01:30:ba:50:8c:4b:84:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:D2:5F:49:93:1C:1C:45:2B:19:C4:81:E2:87:63:FE:21:CE:52
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3f:64:e4:04:dd:db:08:7f:d9:74:a8:d2:a7:80:91:50:40:
77:b8:08:56:fa:07:b0:a2:5a:fb:8f:4f:5d:4b:e2:0d:38:f8:
1e:10:62:02:ee:c8:af:a7:76:53:25:5e:45:eb:f2:d9:70:0a:
7a:74:fc:59:ef:8a:cb:0d:53:21:17:08:15:2c:30:2e:6f:a0:
14:b2:4d:83:0a:f2:aa:83:03:eb:b3:27:8e:90:99:5a:a7:4d:
4a:08:c1:29:34:f8:9f:34:2b:9e:fa:00:50:4c:14:22:0e:0d:
32:04:9a:fd:49:41:94:9b:2d:13:e2:e0:ac:6c:e6:f7:a8:88:
94:6b:d9:a1:5f:97:3c:5f:cb:26:e0:02:d6:ba:f2:2c:07:61:
08:d8:1d:8a:76:0c:b2:2b:77:bb:44:90:13:43:d4:10:04:30:
c2:dd:24:db:4a:e3:ca:35:76:d7:d0:ae:a2:e9:a1:6c:b9:73:
6c:69:4b:87:e0:c3:62:93:af:74:ba:bd:5a:23:58:1a:99:a4:
16:08:6a:a1:ed:70:24:f8:6b:46:d5:24:69:78:c1:4c:db:9a:
6f:a1:87:7a:49:b3:f1:45:8a:da:94:80:a4:f7:15:fa:bd:f5:
03:c5:75:d9:33:f1:3f:64:ef:dd:40:b7:a5:fe:46:27:54:8c:
23:e3:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:00 2025 by rpki-client