
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: 4nzbKAwpgnKQ54rwlALQAYqLdOvN/hzJqTSmvmxV2Ew=
Subject key identifier: 0A:11:55:4E:97:84:10:A6:3A:B2:F7:DC:CD:C0:0B:AF:8A:AA:91:57
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 01988957363DC816812343A13F941A7EC7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 162D
Signing time: Fri 08 Aug 2025 11:00:50 +0000
Manifest this update: Fri 08 Aug 2025 11:00:50 +0000
Manifest next update: Sat 09 Aug 2025 11:00:50 +0000
Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=)
2: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=)
3: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=)
4: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=)
5: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=)
6: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=)
7: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=)
8: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: zmbg+8UeAxTDAU8W1BMyQm8ggPyWZ46q9mN8FfPh/yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:36:3d:c8:16:81:23:43:a1:3f:94:1a:7e:c7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Aug 8 11:00:50 2025 GMT
Not After : Aug 9 11:00:50 2025 GMT
Subject: CN=0a11554e978410a63ab2f7dccdc00baf8aaa9157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9d:35:60:94:2d:22:2e:0c:46:6c:11:71:c1:
a3:46:d1:4e:f5:88:cd:3b:27:00:ce:d3:e5:57:9d:
a4:15:69:ed:61:11:2a:c1:79:58:4e:fb:c7:f6:bc:
8d:ea:bb:58:32:77:c4:c2:ba:05:fe:92:55:7d:e7:
5c:01:44:4d:6d:75:87:a2:85:5a:ed:1e:4d:f0:09:
6c:6d:4e:45:57:16:32:85:12:2f:46:d5:14:0c:13:
64:5c:fc:b2:1f:82:ac:70:53:92:61:82:b2:c1:fd:
9d:e2:1c:07:09:e5:25:b3:95:1e:dd:a8:69:62:4b:
4b:2a:fc:d9:3e:0c:20:21:da:01:8b:95:a7:26:9b:
ce:e8:38:b4:d7:2c:c8:08:69:ee:65:10:50:72:4b:
8a:9d:ab:ac:67:cc:23:7c:f9:ee:5f:f8:98:a3:40:
40:68:b2:47:19:20:83:04:76:02:33:f0:8f:06:b0:
fb:ab:2b:35:5c:e6:63:25:88:a3:2d:84:cc:9f:8e:
98:b2:ba:56:10:35:96:bc:a7:3f:03:af:cf:de:ba:
34:eb:73:48:9c:09:f7:99:6d:93:ed:20:2d:4c:3e:
f3:4a:fd:70:e8:18:2c:c8:aa:ff:73:65:9f:da:cd:
43:1a:ae:bd:7d:9a:58:d8:69:99:79:23:8a:3f:64:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:11:55:4E:97:84:10:A6:3A:B2:F7:DC:CD:C0:0B:AF:8A:AA:91:57
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:74:af:14:87:ab:36:97:92:b9:6c:b6:6d:6f:0f:27:90:
da:cd:d9:b6:08:99:3b:03:f9:29:da:fe:30:f7:6d:f8:f3:f3:
15:54:bf:47:3d:24:ca:90:bf:94:f9:c2:71:95:05:3c:c3:b0:
c6:d1:c6:e8:00:45:be:cf:1b:1a:93:e6:36:75:81:5d:a2:da:
af:8c:5f:ba:2c:43:c2:b6:44:bc:26:5f:39:ff:65:1d:dd:0c:
fa:66:f2:bc:a3:6e:f5:6a:90:59:f5:5f:b3:e0:0b:0d:09:e2:
7e:da:1d:2f:84:c0:2c:03:a5:db:6b:2f:d4:59:cc:93:9d:64:
48:42:d3:69:f4:a5:c0:37:ba:af:11:a3:bd:8d:2f:ca:8d:96:
eb:79:30:33:79:da:6f:8f:71:55:f9:52:8b:0e:86:a3:4d:24:
41:c8:1b:a1:57:1b:4b:b2:df:10:83:6f:65:dd:75:b1:93:aa:
7b:3b:21:d0:5b:ec:13:c3:eb:f7:f0:91:43:a9:ec:2d:a9:75:
7d:3d:b6:a0:9f:b8:40:32:5c:29:c2:9c:b4:38:c0:0e:ce:2b:
b3:a3:73:38:09:7d:ec:89:e3:89:33:9b:d5:83:80:72:ac:c7:
9c:1f:25:f5:22:e8:7f:6f:4e:32:4b:85:41:ad:31:d4:66:c4:
f0:37:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:32 2025 by rpki-client