Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
File: yXKq7Icz1F96AANRAYC0ri1Lvo4.mft (raw, json)
Hash identifier: SL78AFW0Q/MEBPQlNpq+W3mzX9fObFr6yv8NMfaXG78=
Subject key identifier: 41:5D:15:26:FC:01:95:2D:D0:68:04:7E:63:EA:BD:73:02:D3:45:6F
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Certificate issuer: /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial: 0198819DEA4DBD8417A10581AA98BF87B2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 23:01:06 +0000
Manifest this update: Wed 06 Aug 2025 23:01:06 +0000
Manifest next update: Thu 07 Aug 2025 23:01:06 +0000
Files and hashes: 1: iEYRoHL_x--Q-PC_QmRkLatna0w.roa (hash: 5s1E+tOqSuT9Il26pYgrASE0LBQS+wYadwRdpb6ASa8=)
2: yXKq7Icz1F96AANRAYC0ri1Lvo4.crl (hash: GOFpR4aPd2BVd701wqLKKAKhSovV9De5fJGr9vI3bFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:ea:4d:bd:84:17:a1:05:81:aa:98:bf:87:b2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Validity
Not Before: Aug 6 23:01:06 2025 GMT
Not After : Aug 7 23:01:06 2025 GMT
Subject: CN=415d1526fc01952dd068047e63eabd7302d3456f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:1a:ef:65:bb:15:2c:5d:3f:c5:84:52:35:
aa:2a:d3:8c:97:e0:07:03:ee:29:dc:b4:be:0e:79:
de:7a:2a:ea:ce:ed:54:a9:ad:89:d3:32:4e:64:79:
b6:b2:88:47:1f:93:aa:3b:26:3d:00:61:d4:f6:b1:
58:1d:88:7a:58:99:f0:0a:20:9b:c0:c1:25:94:44:
3e:fe:e7:e1:69:68:5a:6e:43:16:fb:fd:cb:f5:49:
05:b5:19:1b:70:17:78:95:04:08:d9:3a:2e:32:01:
71:f7:10:20:69:eb:1d:0a:67:93:98:30:6a:10:f9:
cb:c7:48:30:0d:bf:f7:33:f2:7c:c3:00:bf:86:15:
47:c7:fc:ce:60:ed:a1:56:44:78:c2:49:bf:3b:5b:
96:70:04:ff:cb:2c:c3:5a:fd:ff:6b:82:14:28:73:
4e:fb:74:1e:bf:14:ab:c9:aa:a9:43:7b:56:83:c1:
73:1e:96:4d:37:f4:93:4c:98:d6:9c:48:44:62:a4:
89:d1:e9:d6:82:ef:cc:b4:ac:af:a5:da:14:86:e9:
d4:30:78:45:8f:99:ca:b8:18:f3:77:b1:be:be:b7:
44:67:c4:ac:c6:fc:f1:2b:2a:25:f2:78:e7:97:84:
c1:ee:12:ea:56:8a:63:a5:02:82:89:a9:b0:39:04:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5D:15:26:FC:01:95:2D:D0:68:04:7E:63:EA:BD:73:02:D3:45:6F
X509v3 Authority Key Identifier:
keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:01:ca:45:2c:3c:61:f4:5b:ac:c4:95:41:09:fa:d6:ed:34:
f9:df:b4:e3:89:91:7f:e4:83:7f:31:7c:a3:ef:2d:3c:7a:15:
4c:c4:cd:1f:a2:dc:17:5b:3c:5d:36:24:c3:ef:da:98:03:a4:
0b:21:95:e7:91:8b:fb:93:39:f6:08:d3:37:89:be:2c:78:94:
a6:e1:91:5c:00:7e:5a:d0:62:ad:9b:7e:f7:fa:ce:13:41:ab:
94:19:36:f6:50:e3:53:5d:8b:48:62:0a:b2:4f:80:53:dd:02:
5e:8c:16:f7:39:10:72:09:a1:ab:f9:25:47:d7:4f:7f:97:b3:
df:a5:bc:9c:d4:44:68:59:53:72:03:5f:77:24:75:a2:d8:b3:
b7:2a:ca:cc:d8:9b:93:3d:4f:9e:22:9a:38:24:7c:80:56:be:
89:55:ca:f5:8f:d0:1f:3f:e9:5f:04:93:5f:ec:a5:19:b0:68:
0c:0c:97:1f:dd:1b:08:5d:38:30:60:e1:94:3c:ea:65:c2:98:
4e:f2:28:c0:5f:0c:bc:c5:13:bc:f0:2a:78:a2:27:27:cc:4e:
0a:95:88:2d:9f:62:71:ad:91:43:8b:29:e8:af:2f:45:aa:a2:
5d:f2:b2:fb:9a:34:d5:26:07:f1:d4:cf:0a:5d:09:b3:4a:d8:
7d:32:0c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:25:55 2025 by rpki-client