Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: eQJFzzl/Rnv8xh8Fd1XGFI4AH4K5oofP9kQfjeTOjPA=
Subject key identifier: 96:D2:7A:3F:38:76:CB:EC:61:DB:93:A5:63:10:8F:53:8C:18:5C:7D
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019873E2AC653AD76234662A5207B50DFE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 07:01:31 +0000
Manifest this update: Mon 04 Aug 2025 07:01:31 +0000
Manifest next update: Tue 05 Aug 2025 07:01:31 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: 7wFvUqZRHLJMmmGS22rR7ImnSrXtcu9Fe2eJcO2GPz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ac:65:3a:d7:62:34:66:2a:52:07:b5:0d:fe:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Aug 4 07:01:31 2025 GMT
Not After : Aug 5 07:01:31 2025 GMT
Subject: CN=96d27a3f3876cbec61db93a563108f538c185c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:17:d7:fa:a7:ec:8d:9e:c6:fe:ac:81:8a:
5c:98:82:9d:e5:a9:c4:ab:2e:94:73:23:e7:b0:75:
6f:24:24:74:ba:cc:55:d1:10:ce:48:74:36:19:7a:
1a:86:f5:b9:33:08:eb:f6:89:db:14:3d:96:4b:20:
98:62:4e:93:37:41:6c:2f:da:7b:a3:e4:f4:38:df:
73:cf:75:a1:c3:18:28:76:38:c7:10:78:29:f9:b8:
a8:76:88:26:d1:84:ae:2c:96:32:eb:fe:a0:84:de:
3e:d8:39:85:cc:44:8c:dd:7f:15:2c:e3:59:d6:bf:
3f:32:a9:de:98:54:a1:d4:8d:80:61:38:e9:7a:ae:
16:34:f0:07:dc:bd:28:5f:6b:bb:7c:86:80:7e:f3:
c9:36:f8:07:ca:10:40:65:06:5d:ca:9c:83:69:7c:
00:a6:98:c9:d6:fa:b2:70:77:99:e9:1b:af:b2:54:
2a:7c:8d:d4:a5:03:a1:a5:a3:93:ed:15:7c:d4:cf:
0a:c3:b6:01:6d:cb:04:f6:34:72:55:66:bd:f4:f6:
a8:18:b3:6b:69:75:c6:39:32:e4:0b:d3:98:37:00:
24:0f:37:f4:75:5c:c4:14:9a:35:9f:bb:5f:6f:36:
be:e6:ed:30:f4:4a:a0:22:58:a1:8c:53:e1:9b:a1:
78:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D2:7A:3F:38:76:CB:EC:61:DB:93:A5:63:10:8F:53:8C:18:5C:7D
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:4a:05:b7:9f:16:84:5f:53:f9:d6:59:b0:7c:2f:7f:84:
c9:06:ae:58:3d:2d:7e:70:27:a3:32:37:6e:e7:28:37:e3:c1:
11:71:c6:01:f0:fa:9d:65:e8:d7:ae:94:9f:91:07:97:02:78:
a8:ad:e8:33:87:6d:06:ae:63:46:9e:4a:cf:74:94:0b:e8:85:
07:b4:17:17:32:fb:c5:0a:8b:6e:57:da:40:86:af:95:59:a6:
e1:e8:55:ed:39:56:9d:5f:bc:10:c0:e1:ef:65:1b:22:bd:eb:
89:83:47:86:e5:9f:b6:c9:07:eb:83:db:c9:24:70:d9:ff:37:
ac:f1:56:61:06:95:c4:b6:9e:d2:1f:5b:d8:ea:1a:ae:b6:3e:
7c:39:76:c6:7b:2f:01:5b:9d:64:85:f4:cc:ea:09:fa:09:24:
1f:5a:93:61:52:92:c3:a5:a7:90:c7:6a:fd:b2:7b:bd:08:5d:
26:00:a7:8b:86:8a:b5:6a:a8:e7:b7:38:39:81:ef:64:e7:4f:
f4:65:4c:5b:eb:4a:55:ba:71:29:ad:0e:5b:ab:92:dd:bc:fc:
bf:9b:0f:db:23:c8:31:96:c4:a5:7d:b9:fe:b5:6e:99:d6:a2:
c3:c9:e8:a5:dc:6c:1b:5d:27:01:00:d4:04:29:50:24:07:3e:
88:59:ac:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:00 2025 by rpki-client