Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: ASZAZcFYCFzzc8I3/sXTyhcMpQkkjeTu+P33bts9geE=
Subject key identifier: 0D:3A:D5:60:13:2E:B8:12:5E:F1:14:70:06:8F:B7:62:D5:A3:08:BF
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 019897127984F72D5D2DA7FF45101EFDDBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 03:00:26 +0000
Manifest this update: Mon 11 Aug 2025 03:00:26 +0000
Manifest next update: Tue 12 Aug 2025 03:00:26 +0000
Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: oco9KxJR/u8ju3zM0dmAlUz9xsrF520aQEhtlcil5og=)
2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:79:84:f7:2d:5d:2d:a7:ff:45:10:1e:fd:db:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Aug 11 03:00:26 2025 GMT
Not After : Aug 12 03:00:26 2025 GMT
Subject: CN=0d3ad560132eb8125ef11470068fb762d5a308bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:b2:3c:d3:b3:4d:58:fa:d8:a3:0e:3f:ae:
bb:c9:de:fe:85:3a:90:8e:d0:f0:8d:07:88:09:69:
8d:97:b8:ea:d6:99:92:c3:b7:f0:a0:d6:71:29:44:
42:f5:63:f3:9d:dd:7d:5d:72:d9:d0:b4:b1:ce:d0:
66:94:65:ab:65:18:e1:03:41:1b:1c:fb:ec:e1:aa:
4c:15:38:6b:5c:43:f9:06:ab:76:77:df:21:15:cc:
30:fb:27:5f:d7:48:ef:04:3c:5c:ae:27:a1:a7:00:
fe:22:11:f8:c9:ec:6e:68:cd:72:2e:3d:04:ae:0d:
f1:c1:30:1a:e5:18:79:8e:cf:9f:54:64:29:50:aa:
c1:13:07:6d:18:8f:a1:89:d8:fe:4c:5f:cb:e8:ec:
c6:7b:be:9f:d4:4e:d2:1e:28:25:04:7b:75:3e:7b:
cb:6b:ee:6d:46:c0:de:09:0e:da:14:39:ce:10:c2:
59:b1:64:50:9e:d5:f6:8c:a4:39:ae:67:be:1f:ae:
34:9f:fd:b0:6d:8a:54:9c:22:a7:90:c7:bb:c6:c0:
7b:dc:89:11:c3:2e:c3:71:c4:56:d1:59:94:6a:d6:
e8:af:29:17:67:22:3f:0f:71:59:91:8a:05:0e:69:
39:05:60:dd:63:27:10:80:79:d7:1b:33:a5:82:0a:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3A:D5:60:13:2E:B8:12:5E:F1:14:70:06:8F:B7:62:D5:A3:08:BF
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:dc:de:83:2c:38:de:c1:21:80:2a:64:99:2d:28:60:e7:e9:
69:ea:33:a1:06:e8:43:eb:1c:37:14:63:90:77:c9:30:74:bb:
d7:22:2b:78:60:28:ca:9c:2f:38:93:16:65:1a:34:68:1c:03:
09:2f:89:65:11:41:1e:d8:52:c7:91:9f:e0:a1:70:c9:a2:b0:
05:06:5b:22:7c:a8:8a:2a:6c:b4:49:b6:2b:12:65:27:e7:be:
42:ad:c1:f8:39:1e:b4:4b:db:b7:55:77:73:73:d4:fb:be:f4:
1f:6b:68:81:76:f7:99:4c:70:08:12:e5:80:1f:6e:75:4d:57:
af:e1:17:dd:09:92:33:94:48:e6:46:21:1b:a4:b4:36:55:4a:
09:6e:86:1f:53:31:31:d3:9b:7d:11:00:04:0b:84:78:35:2f:
51:5f:72:1c:69:36:31:92:d2:41:e4:0e:79:e8:d9:5f:a4:14:
3e:67:ce:d6:70:e3:ef:ea:7e:29:ea:56:34:c3:2c:be:0a:84:
85:34:46:55:7f:63:fa:07:c1:82:4c:c0:9e:43:3a:03:f1:34:
19:c8:03:26:7e:c6:80:83:44:c2:cf:e2:12:e4:f5:35:bc:5e:
22:d5:2f:ed:1f:f1:c2:56:52:b4:f1:90:72:45:1a:1c:2b:c0:
ed:25:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:57:10 2025 by rpki-client