Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: cmAoffKC5VmasNGkSVkv7iKY2cED/Kn4VE3F5aEL9GA=
Subject key identifier: 71:7B:C5:8B:22:DF:41:CD:96:9D:DB:7C:54:26:C6:BF:A2:D9:23:A2
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 01987E666737C18FB0B68B9FE51B79AA14B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 08:01:36 +0000
Manifest this update: Wed 06 Aug 2025 08:01:36 +0000
Manifest next update: Thu 07 Aug 2025 08:01:36 +0000
Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: k91BihVW32ZAbFOa4WrZjCyVLE7+7YotSE7rQC850Ho=)
2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:67:37:c1:8f:b0:b6:8b:9f:e5:1b:79:aa:14:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Aug 6 08:01:36 2025 GMT
Not After : Aug 7 08:01:36 2025 GMT
Subject: CN=717bc58b22df41cd969ddb7c5426c6bfa2d923a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:dc:a8:aa:96:6a:b9:47:5c:bc:78:c5:8b:
ee:44:a3:fa:f8:ff:fb:ab:cd:1c:4f:06:a5:13:da:
07:ec:06:1f:f4:82:52:cd:47:aa:0c:ed:a7:25:55:
63:77:3f:93:c2:d7:2a:cb:28:a6:96:71:71:e2:07:
8e:c2:45:a8:4c:eb:43:bf:61:1f:31:15:48:39:19:
21:21:fe:c4:86:cd:cb:da:8e:a6:30:bb:0d:4c:50:
31:8a:0e:c1:ed:56:57:98:59:ed:03:38:8d:2d:5a:
e3:82:fe:5d:fd:25:b1:b1:00:ed:97:ca:d6:42:9b:
9e:ac:42:11:01:da:ad:75:c6:01:f1:9a:72:eb:15:
cb:35:ca:f2:6d:99:ec:19:75:8e:db:c0:a5:f2:15:
c5:34:0e:9e:dd:7a:96:a6:b1:b8:bf:07:7a:83:cc:
42:43:88:14:3a:56:ff:75:bb:8b:9b:f6:91:fc:20:
ce:cf:6e:99:c9:3c:b2:97:b4:fd:bf:c3:92:53:69:
9d:b1:4d:36:6b:c3:fa:37:22:d1:e2:c5:ea:fd:4c:
6b:b8:c1:fe:06:e7:22:e9:16:59:10:f7:a5:8c:8f:
47:7c:28:f7:1f:f3:7d:82:3f:34:7d:cb:9d:bb:68:
c5:e8:f9:08:34:11:0a:ed:0b:9e:dd:58:7e:a3:48:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:C5:8B:22:DF:41:CD:96:9D:DB:7C:54:26:C6:BF:A2:D9:23:A2
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:46:aa:f4:00:7a:a1:39:db:62:d5:f9:e3:dd:89:a8:8b:69:
18:8b:49:ab:65:3c:09:08:1a:8b:4e:13:89:97:d7:f5:e9:07:
85:58:fc:84:e0:37:5a:06:90:73:29:af:0d:d1:b5:d9:44:2a:
fc:08:bf:22:f3:19:60:96:33:b7:57:47:9a:a6:fd:27:7a:89:
9c:21:c5:7f:f3:37:9c:f2:c6:b0:70:de:8c:d9:43:cc:db:14:
39:78:76:01:52:84:a6:97:68:54:72:b3:0b:5e:75:b3:b6:8a:
92:a1:e5:75:a6:7e:b4:7d:d3:91:19:15:cf:6b:25:4c:1b:d5:
0b:e9:3a:9f:01:05:6a:dd:b2:f5:de:2b:38:94:57:b1:78:75:
90:4c:38:4d:33:49:b9:1f:05:c9:46:3f:b7:5d:a2:64:64:52:
12:25:f7:18:b9:8c:90:b4:77:c3:51:ae:b9:34:22:bc:04:d4:
d4:a5:fd:56:91:a0:ad:63:c7:bb:42:5a:43:69:65:6c:84:66:
6a:0b:c0:04:06:c7:e5:83:3f:b4:3a:69:1f:50:93:32:67:d5:
10:5b:90:f5:2f:6b:ab:56:4c:27:6f:a1:8a:af:8e:35:e9:fd:
d1:97:04:a1:ce:33:e1:8c:5e:72:10:64:19:a2:0a:3f:81:8e:
31:a6:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:36 2025 by rpki-client