Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json)
Hash identifier: 0y/s9WR87c1P9XgmM1TNlsCHoNyAllgaioBGiVs/e68=
Subject key identifier: E4:83:9D:23:65:61:51:A9:04:25:81:3E:9A:3B:90:C2:BA:1E:EF:7E
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 01987C774916F8DA3FD9B1EF61B467C96985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
Manifest number: 161F
Signing time: Tue 05 Aug 2025 23:00:48 +0000
Manifest this update: Tue 05 Aug 2025 23:00:48 +0000
Manifest next update: Wed 06 Aug 2025 23:00:48 +0000
Files and hashes: 1: b88Rl7W3m-ZgN433QwmekbZFP6o.roa (hash: NoA21W8ly2WxwAuP2zZWwmclSVAV10KXOOvNxpP+/rg=)
2: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: Z8R4SaXZ+e9/MX38DblTj5c6/KR0tfDgqEQd+vZ0+l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:49:16:f8:da:3f:d9:b1:ef:61:b4:67:c9:69:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Aug 5 23:00:48 2025 GMT
Not After : Aug 6 23:00:48 2025 GMT
Subject: CN=e4839d23656151a90425813e9a3b90c2ba1eef7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:e3:d6:b6:4c:71:ca:e7:88:9c:9d:cd:9f:
ce:0d:43:e0:fa:0c:12:01:42:50:93:46:e4:44:f7:
6d:72:75:a5:88:2b:b4:30:c1:24:7b:6d:cf:93:d3:
86:78:27:b7:f0:af:b4:56:3f:b4:72:3e:15:47:fc:
7b:cf:3a:4d:20:f7:a5:47:54:c9:bf:df:62:51:ed:
fe:45:8a:be:1d:20:37:98:ca:27:24:af:0b:da:71:
9d:23:c9:c8:61:bf:a4:4d:7b:d4:10:36:e1:46:c5:
7d:2c:6f:f5:57:64:68:80:cc:38:1f:34:67:ca:83:
76:8c:b6:43:6a:32:2c:9c:52:ad:7d:42:a4:40:13:
83:3d:36:35:6f:6f:6c:be:f9:9c:40:e0:67:e6:7d:
cd:90:6c:fd:af:57:25:56:7e:3c:bc:88:66:34:de:
f3:56:45:ca:b1:78:a0:d8:75:f4:a5:88:98:fe:95:
76:f3:89:9d:65:8a:58:4d:c4:d7:a0:11:cf:51:0e:
64:29:8e:34:b8:3e:a9:9a:c5:84:ae:d2:0b:a0:15:
c9:d2:8a:e4:b3:44:fd:3a:12:fe:23:cd:f1:c2:8c:
71:d2:11:7d:19:6c:2b:ef:48:b6:e5:e2:31:b9:e9:
6c:27:c5:d7:00:19:5b:47:9f:6f:51:52:ac:04:cb:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:83:9D:23:65:61:51:A9:04:25:81:3E:9A:3B:90:C2:BA:1E:EF:7E
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:6a:d4:ff:9a:cf:41:61:da:2b:55:f8:79:b0:d1:85:f6:
a5:40:23:b3:21:00:f6:ae:85:a6:ec:aa:3f:77:dc:19:7e:c4:
63:ff:1f:f7:cf:e3:85:f7:c3:ed:73:81:cf:3b:eb:f1:54:4f:
d5:27:88:54:e1:90:03:7b:04:a3:be:35:d0:9f:8c:97:0b:02:
59:de:91:88:d7:99:ae:f4:fa:e9:98:81:99:aa:ec:51:7e:51:
4f:7c:22:5f:6e:ab:3e:b4:4e:6e:81:f5:61:2f:5f:04:63:3c:
f3:d9:fe:20:fb:d8:47:2d:9f:b8:10:c8:87:8a:dc:3c:b4:24:
57:78:a0:08:94:49:a8:ee:b0:af:ab:a5:b0:49:9a:dc:9c:33:
b6:8a:f4:b4:ec:83:e0:04:78:8a:a0:b7:c1:a7:50:60:ca:85:
c6:02:e3:51:18:0d:f8:a5:20:fe:6b:b8:f3:00:df:b4:3a:c1:
47:44:a0:10:cb:e6:0f:7b:8e:69:bf:86:3b:1d:22:80:26:53:
51:5d:34:57:8c:dc:b4:16:ff:12:4c:67:a2:0e:69:d0:c6:ea:
0a:77:19:31:73:ee:c5:ec:64:de:d9:20:d4:8b:8f:da:6c:cd:
3f:38:14:61:34:88:62:ea:b2:0e:d7:ec:c0:98:61:8a:02:1b:
29:9e:df:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:22 2025 by rpki-client