Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: uhdpapBn34nXaCRHjLzVCGU+GyInTRuP8TbUFgSeJLU=
Subject key identifier: 0E:8A:76:AB:F6:77:0E:7F:39:59:AE:DD:4D:AB:ED:4B:5B:3C:49:D9
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019892235153F94BFF53D10C2715F70E57C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 04:00:44 +0000
Manifest this update: Sun 10 Aug 2025 04:00:44 +0000
Manifest next update: Mon 11 Aug 2025 04:00:44 +0000
Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=)
2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: LZpiHgOYcrlmWWPPUKQtORbYmGLq4Pm0jMeWghrOOuY=)
3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:51:53:f9:4b:ff:53:d1:0c:27:15:f7:0e:57:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Aug 10 04:00:44 2025 GMT
Not After : Aug 11 04:00:44 2025 GMT
Subject: CN=0e8a76abf6770e7f3959aedd4dabed4b5b3c49d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:73:ca:20:6a:b8:fe:16:00:95:af:cf:05:
3d:bd:16:8e:1d:b1:e3:34:34:80:54:fb:be:fd:c3:
95:22:b2:b8:53:58:dd:ca:14:e8:25:be:75:f8:6a:
4f:1a:33:5a:ac:57:b2:cc:b9:1c:ec:4a:e3:b9:cb:
4d:0f:c1:98:49:ce:d9:58:28:84:d5:2d:00:1d:a4:
c7:f7:67:a7:18:d7:3b:4b:10:75:0d:87:6e:ef:4c:
31:7e:74:12:0c:15:13:eb:74:23:64:83:1e:e6:81:
fb:7b:4e:23:96:04:6e:5d:c9:6e:16:1c:8d:5f:92:
ed:e2:b0:59:f8:c3:ba:9c:b2:58:00:7a:bc:60:77:
dc:82:a2:1c:4b:79:3d:33:e2:5c:69:6f:1a:29:14:
87:d5:61:75:82:2f:87:47:8c:58:a7:99:ce:a7:85:
b8:56:39:d8:f8:64:d4:11:b2:82:11:74:d8:ca:d4:
36:c1:ca:56:9b:d1:42:f9:37:c2:db:51:aa:de:a8:
d1:c0:67:99:e8:fd:32:17:50:80:11:e4:d7:3b:f7:
36:ce:73:bd:75:9f:13:12:fc:8a:fe:23:5f:fc:d5:
f5:c9:57:0b:32:4b:fb:36:69:b2:83:b7:89:85:b4:
91:27:32:2e:3b:41:97:da:2c:05:9c:f2:b8:36:b0:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8A:76:AB:F6:77:0E:7F:39:59:AE:DD:4D:AB:ED:4B:5B:3C:49:D9
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:44:eb:b6:64:e5:23:45:53:a6:02:93:ad:bc:ad:ae:f6:ac:
46:93:d8:e0:e4:fa:60:cc:cd:b3:2a:e3:12:7e:f4:d3:f7:e0:
13:8a:6f:62:7b:e4:b4:2d:0c:2e:26:98:85:01:e6:da:95:4a:
39:3f:b4:ce:a0:b0:43:20:c6:75:78:d6:29:e6:d1:63:a9:a9:
54:be:50:95:c1:e5:7d:df:da:a7:38:74:ca:1c:ee:14:fd:b8:
16:4f:01:12:da:40:bf:3d:be:f0:8c:ab:f3:2d:ab:f8:3d:52:
12:96:44:0e:f7:64:30:8b:17:a2:97:2b:d4:76:e2:6e:b0:ff:
14:3e:ef:b0:ac:d1:2c:14:a4:e5:b0:4d:fe:4c:5c:28:f7:c4:
c3:2d:14:31:8e:85:66:01:43:e9:52:6c:e3:db:d5:63:bc:92:
e5:80:1f:48:81:73:d1:e4:9b:70:d4:c5:6e:72:43:cd:78:96:
00:0e:1b:43:06:64:69:89:a2:14:cc:d2:6f:b0:18:f4:66:12:
18:d9:30:33:ca:e5:e3:63:0b:1c:b1:0c:ed:ce:83:ec:c3:45:
3b:58:3e:c1:b4:87:4a:ee:cf:c4:1f:44:6c:fc:eb:a3:4f:a2:
e6:2c:39:01:9c:50:cd:4b:b2:5b:89:48:ba:0f:3f:d5:bc:ec:
d5:cf:57:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:36 2025 by rpki-client