Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: djH3pwihxwxHERx1UpjxhrWQCgKm08dQqaNwkQb1Mzc=
Subject key identifier: 5E:64:B4:1E:22:A1:A1:2E:68:D8:30:F0:FB:B6:43:0D:C3:12:EA:7F
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 01987F4148A5EA7A609413CE02A90DCAD7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 12:00:41 +0000
Manifest this update: Wed 06 Aug 2025 12:00:41 +0000
Manifest next update: Thu 07 Aug 2025 12:00:41 +0000
Files and hashes: 1: XCar8SNrGHj7mUVHaBXEnUvq1KY.roa (hash: p4pcecBBeg+02FW19VP+ZJ5O31/pLj9QyP3szv9c6Sg=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: qedJ2JbCcoofBe5lVhKvk4q+PZSnitG+viuZsbB1IW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:41:48:a5:ea:7a:60:94:13:ce:02:a9:0d:ca:d7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Aug 6 12:00:41 2025 GMT
Not After : Aug 7 12:00:41 2025 GMT
Subject: CN=5e64b41e22a1a12e68d830f0fbb6430dc312ea7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:48:fd:b8:6a:ec:26:15:d9:27:ad:00:f4:
45:f5:b6:46:e4:38:45:56:80:91:53:b3:c4:55:12:
8f:22:bd:40:c3:12:24:5a:66:57:3c:64:2a:24:65:
5c:bb:f4:b7:04:70:71:1f:8f:05:22:d3:d9:82:99:
c9:6a:f7:fb:d8:63:d4:3c:17:d5:49:0a:59:b9:28:
d7:54:d5:d6:aa:1b:f7:d0:bf:04:30:3f:bc:0e:eb:
16:f5:26:e9:26:88:bd:9a:7c:16:1d:d7:95:63:4f:
a5:29:65:f5:bf:f8:78:16:a4:a1:22:e2:7e:aa:22:
d7:96:ca:4a:cf:1f:b9:81:26:7f:10:28:a7:5e:90:
62:ea:41:e9:be:2f:7c:8e:18:a6:c5:80:12:f5:f1:
ce:05:95:2d:53:de:53:05:96:d8:52:6a:6f:68:f5:
3e:54:98:91:89:81:4d:78:fd:1c:fb:31:b1:37:a1:
42:8c:c7:74:b1:6e:c8:a4:62:44:fa:c7:fd:d8:b1:
ed:1e:cb:82:b4:ae:58:2c:b4:a1:22:8d:f3:60:b5:
16:11:f5:05:9a:b9:7f:01:21:6a:b6:89:7f:2b:57:
13:71:5f:d8:21:70:e3:98:dc:8d:3d:b9:82:63:2b:
97:be:fa:ce:03:3e:63:1b:b9:c5:da:ad:49:95:83:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:64:B4:1E:22:A1:A1:2E:68:D8:30:F0:FB:B6:43:0D:C3:12:EA:7F
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f4:52:7e:3c:f0:39:13:fd:71:eb:dc:38:62:4e:67:06:81:
94:fa:b9:89:6b:11:68:27:29:a8:e0:e9:75:57:47:e9:b3:50:
ff:cf:03:8d:c1:85:c3:6f:1e:8f:00:90:4a:f1:b6:ac:02:9f:
a0:52:6d:37:c8:2c:7a:7e:e7:48:88:fc:27:ec:f6:1d:b1:9b:
b1:ea:ac:84:52:78:35:e3:da:97:76:84:b8:06:c6:ed:81:f0:
5f:16:d4:87:57:e6:cd:1a:0f:7d:06:c5:ac:6f:ba:1d:52:9c:
96:f2:91:e4:65:0b:f8:51:e1:63:cc:f3:70:93:19:bf:73:a2:
8e:a7:9b:73:3a:bb:32:18:3f:f9:75:ea:a2:7b:91:be:32:89:
46:b8:99:cd:9d:a9:4e:4d:d6:77:c3:6c:ef:a0:ad:54:53:89:
69:cc:2b:c0:74:cc:aa:55:50:95:79:c9:8a:e8:e1:1d:51:3a:
98:3f:31:e0:d9:eb:c3:5a:35:fd:55:5d:98:b7:42:2b:1f:78:
92:cb:f5:76:86:7f:be:c6:47:21:20:b8:3f:ba:63:b8:a8:9e:
ec:a1:4b:44:85:b5:6e:62:09:64:61:49:ef:29:b7:57:21:b7:
cc:7f:97:fb:55:dd:48:79:e3:84:66:3a:0d:4a:e0:cf:6f:5f:
87:a5:b4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:08 2025 by rpki-client