Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: ySpv8IfnYjfg79+wESsrSyJLo9P1ZW3L7UHRMKSy8h4=
Subject key identifier: 95:12:58:EB:B1:62:76:34:6C:B8:83:E6:13:2F:F2:AD:77:D9:02:CF
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 01988166A3A89DB7CE6D169C7B7741FD7263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 22:00:44 +0000
Manifest this update: Wed 06 Aug 2025 22:00:44 +0000
Manifest next update: Thu 07 Aug 2025 22:00:44 +0000
Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=)
2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=)
3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: kg2a83ZlgqTm6Td9JtGqQMS5NO73j+TpP6n+5HqJRmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:a3:a8:9d:b7:ce:6d:16:9c:7b:77:41:fd:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Aug 6 22:00:44 2025 GMT
Not After : Aug 7 22:00:44 2025 GMT
Subject: CN=951258ebb16276346cb883e6132ff2ad77d902cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:4c:71:5e:25:57:3f:d0:72:29:89:c9:19:
b6:55:2b:2e:57:54:32:bd:36:3d:26:b8:4c:23:28:
5c:2e:6d:19:63:92:cc:37:e8:22:e7:85:4b:9f:4d:
65:6f:a3:30:82:11:ad:ca:1e:ef:13:e3:b5:bc:cf:
a0:fd:4c:d1:f3:d8:f5:82:46:cf:eb:48:de:75:51:
d3:5d:a0:d2:6d:ab:79:15:ca:4b:55:18:fd:6f:db:
89:9f:94:d3:d3:29:b9:94:a8:68:8e:02:da:d4:fc:
a1:23:a4:0a:7d:05:44:33:83:27:47:b8:2f:61:e9:
30:10:8c:2c:7a:6a:bd:df:a3:f9:d6:c8:69:b1:18:
ed:d2:e8:b4:84:87:35:a7:94:36:d3:28:08:09:db:
71:e6:04:4b:b3:12:40:3d:ff:03:17:71:8e:b0:dc:
67:7a:ca:51:dc:cd:92:1c:7c:62:83:15:5e:99:71:
df:76:8a:ee:bb:11:fb:ec:dd:aa:14:22:2a:bd:3a:
13:25:63:e3:a5:c5:05:88:77:38:6d:22:e1:e6:42:
b0:5f:2e:1c:a8:4a:19:c6:47:db:bd:99:c5:06:43:
f4:e7:9a:e9:4f:f4:cc:e9:61:08:d6:94:06:f2:9b:
3c:b9:55:7e:9e:e4:5b:1c:89:aa:99:4c:36:60:58:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:58:EB:B1:62:76:34:6C:B8:83:E6:13:2F:F2:AD:77:D9:02:CF
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b0:b5:ab:5e:9b:7e:a9:f4:03:7a:d3:d1:a3:a9:3b:14:7e:
54:79:3e:2d:8c:f8:9a:41:11:4b:97:4b:23:9d:d1:e6:f2:2d:
17:48:fb:9c:97:77:66:26:bc:3f:f9:6d:50:5f:09:f8:b3:b2:
f6:ef:a7:03:71:69:b4:46:69:3f:40:e9:ab:ce:d6:54:52:19:
f7:b9:26:4d:f0:c4:cd:50:27:6a:41:4e:07:84:0c:95:1e:c3:
35:e4:18:47:fa:d5:7b:b8:aa:a2:1c:20:1d:a4:2b:e9:af:69:
de:54:0a:7f:a0:36:37:7e:22:bc:ab:62:05:06:6b:17:74:63:
c1:12:ca:9b:31:5e:ac:ad:78:68:c5:6b:96:1c:3a:b0:bc:80:
bb:07:99:67:0a:dc:32:6c:e6:e6:5b:00:45:9e:40:08:64:40:
44:97:13:81:0f:91:0b:98:60:7e:ac:f1:f6:09:60:c9:83:f5:
bb:9e:25:44:82:10:63:07:bb:c2:78:e3:86:0f:4e:c9:1b:d8:
5d:7c:df:d4:cc:8f:21:32:f4:f9:b7:d2:a4:5a:8e:7f:f2:f6:
50:f3:92:2b:87:8f:73:99:f5:ab:50:08:de:c8:03:ef:6f:81:
48:fc:53:2f:5d:3b:6c:ab:da:3e:b9:9a:85:1c:ab:c2:8c:6c:
a1:50:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:10:55 2025 by rpki-client