Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier: GaLKbZFFHgXDE3D+q3+jd1qV5PzrXQzcOXge5kIAVoQ=
Subject key identifier: 20:C4:68:57:52:45:76:A4:84:32:23:9F:C3:96:4F:F2:F3:AC:BC:E8
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 019871BC6ABCDEC16C0F62F1574D5C32ED5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number: 161A
Signing time: Sun 03 Aug 2025 21:00:30 +0000
Manifest this update: Sun 03 Aug 2025 21:00:30 +0000
Manifest next update: Mon 04 Aug 2025 21:00:30 +0000
Files and hashes: 1: 12cWFr32i6PF2CeFM1PO-xgXt6A.roa (hash: kaGn4iTJ9yXgrBEjfOG5dUlsL+x0SJaJYPyNDbIcR54=)
2: PnEzUVbrYhXZNNLfCN-Xtl0-Pzk.roa (hash: lXzPnJfE3bH0euvEvGwi8aTfi10gIwh0zvOckFmaQMI=)
3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: gwReYlpWoUv/Ht7DYphBfpA77xGJQt7sn3WiDW3GMcU=)
4: jsd32GyUcOABxL3lbaYKa1U9QxQ.roa (hash: iIGtz/WTQ1JA6imPxlRGSNb4RKMQ3XrYAPCJJH9Foiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:71:bc:6a:bc:de:c1:6c:0f:62:f1:57:4d:5c:32:ed:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Aug 3 21:00:30 2025 GMT
Not After : Aug 4 21:00:30 2025 GMT
Subject: CN=20c46857524576a48432239fc3964ff2f3acbce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:d3:f1:27:f5:91:3c:e2:74:46:11:a6:cf:
fa:cd:ed:4c:0d:8b:eb:d0:aa:2b:99:81:40:e8:b0:
7b:21:64:f4:38:d9:a6:1e:8c:0b:b6:24:39:a2:58:
4a:e1:0d:ed:82:3e:a6:6f:51:a4:9f:3f:ac:d1:bf:
ae:cc:87:84:fc:a7:45:1b:7f:08:7f:4a:7f:21:00:
7d:0e:f6:45:48:d9:75:a5:42:c3:78:de:bd:5c:b9:
82:0f:3f:64:68:fb:3e:da:ed:40:c7:9b:79:f6:d4:
97:88:84:ad:64:b5:00:b9:71:2c:ad:c8:28:c5:f4:
b0:87:f1:68:20:32:61:c2:3a:92:99:79:13:4b:fc:
49:f4:96:b6:06:67:85:82:ad:ae:24:34:af:80:36:
6f:f9:b4:14:a2:be:c7:ea:59:53:e0:28:7c:4f:34:
3a:6b:c4:bc:58:ae:e0:68:16:2f:93:4b:de:e1:eb:
45:3c:4f:e7:9a:ea:54:b6:4b:79:67:e8:ca:02:0b:
d3:b5:d9:fb:e0:ab:d5:e1:fc:d2:ad:e0:82:95:96:
ac:46:12:79:8b:e2:7c:59:4d:5e:ba:8f:cd:72:ce:
1a:9b:6c:60:04:fd:34:61:09:88:cc:87:38:e0:12:
b3:41:ff:5d:71:f5:de:d4:80:6e:c0:bc:6f:75:03:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C4:68:57:52:45:76:A4:84:32:23:9F:C3:96:4F:F2:F3:AC:BC:E8
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e9:21:7c:df:d2:90:c9:44:42:98:de:a3:36:74:34:77:9a:
d5:a6:6e:c0:c6:01:50:49:5b:d6:57:9c:65:87:e4:21:83:fe:
90:7d:94:af:66:76:51:fc:7c:c0:52:7e:84:82:12:58:c5:12:
7a:4c:6f:9f:7b:93:65:0a:7d:75:ac:eb:98:11:ab:1c:72:c0:
0c:fa:1c:68:39:98:f1:53:c7:16:0f:0e:55:d8:6a:a5:6c:c7:
da:e0:11:47:b3:20:d1:7a:54:8a:b0:fe:5d:87:9d:81:f9:a2:
92:ae:f1:0f:71:34:f4:24:52:f6:68:77:6c:66:72:af:ff:87:
61:85:bd:91:bd:54:c0:16:16:82:aa:f7:2c:f9:b8:2e:4d:91:
a9:12:a8:30:46:14:3d:e6:53:92:08:79:1e:47:3c:44:bb:39:
dc:c0:e2:02:60:1b:6b:c8:da:9a:2b:86:ee:a1:50:85:d6:51:
74:ad:87:0d:f7:1c:e2:0f:c9:3c:0b:d4:3d:d1:f2:7d:39:d5:
34:7f:42:03:42:e3:8d:8f:d6:7b:2c:24:a3:a8:9a:62:66:99:
6b:9d:e6:a7:3a:de:32:fc:4c:7b:fe:dc:76:ee:0a:97:cd:b4:
cc:d4:cd:ff:2f:1d:90:31:a5:93:0c:9e:db:57:91:26:ac:53:
41:de:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 03:32:16 2025 by rpki-client