
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier: uWlsDQXKB9LAGuKNUn+KcGozwJU4A07aV2h0wWBFuRY=
Subject key identifier: 1B:41:5A:31:84:2F:37:6C:1F:A4:AA:8A:56:02:ED:12:1E:BE:A4:BD
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial: 019873E3F8F00B2A050E0140533EEAEB505C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 07:02:56 +0000
Manifest this update: Mon 04 Aug 2025 07:02:56 +0000
Manifest next update: Tue 05 Aug 2025 07:02:56 +0000
Files and hashes: 1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=)
2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: qYULFkL4nRFKjuN7lAbEVazuZUG3u8Sv9MmY+kuREns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:f8:f0:0b:2a:05:0e:01:40:53:3e:ea:eb:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Validity
Not Before: Aug 4 07:02:56 2025 GMT
Not After : Aug 5 07:02:56 2025 GMT
Subject: CN=1b415a31842f376c1fa4aa8a5602ed121ebea4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:3d:0b:99:e5:3e:91:47:4c:d6:8d:88:81:
cc:4a:45:56:73:77:ff:bf:eb:ff:ad:1e:be:14:f3:
26:ed:a2:09:5d:31:31:0c:6d:33:37:c4:cf:38:46:
6f:13:6b:c8:ef:90:3f:66:bf:b8:59:a9:20:6f:c9:
5c:f9:9a:29:5b:6d:cb:65:e3:36:f9:de:dd:90:1e:
46:9d:27:23:c7:80:d7:96:6f:0e:b6:4b:12:99:74:
3c:91:a0:94:3c:8f:44:62:af:5b:50:e4:27:88:e2:
bd:99:ba:ae:18:77:ae:6e:e6:85:dc:da:a5:49:12:
d2:28:b9:89:51:5e:64:f0:33:4e:d8:20:04:fe:c8:
4a:84:3e:4e:5c:56:ee:68:6d:71:54:b2:70:09:f5:
ac:3a:d7:af:8d:09:12:09:9f:3c:9f:48:fa:e6:98:
b4:72:7a:1e:aa:7d:3c:df:21:2e:ab:76:c7:fb:23:
f3:06:98:a9:ff:16:7b:a9:fb:0d:9f:2a:d4:8f:bf:
55:d8:98:c4:e4:86:c4:78:35:1e:77:da:8e:ce:df:
53:3f:3b:95:62:75:38:8c:13:f5:33:e0:fb:7a:10:
af:72:0e:03:93:2c:0c:8e:06:31:9d:16:0c:62:84:
54:e8:f0:4e:b7:a9:7f:59:90:43:dd:11:91:09:b3:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:5A:31:84:2F:37:6C:1F:A4:AA:8A:56:02:ED:12:1E:BE:A4:BD
X509v3 Authority Key Identifier:
keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:86:8a:64:36:c4:fd:f5:14:b4:e1:04:9f:ef:0c:5a:98:1d:
02:19:f6:34:b8:d1:8d:07:c3:28:3c:f8:31:af:13:1d:7a:31:
70:e0:f4:09:a9:68:f7:00:b2:1d:d8:16:3f:71:09:1c:cf:32:
79:bf:e8:73:eb:c6:ee:8e:4a:b7:56:df:f4:1c:a9:44:74:50:
48:ee:69:49:40:a3:75:19:3b:13:8f:fa:19:81:12:a0:21:56:
84:da:46:08:aa:90:08:66:05:b7:5f:4e:0c:e1:a4:ad:c5:2f:
5f:da:79:db:b9:29:d4:0f:92:19:b3:57:86:d4:89:74:df:19:
4f:e9:fb:ca:2a:59:14:05:91:e5:27:df:8f:30:dc:b1:70:5b:
4f:0b:3e:21:59:e8:1a:4a:da:33:3c:06:7b:57:e6:c8:87:d7:
6b:93:f0:bb:41:38:4c:25:0a:2d:43:dd:1b:00:f7:34:f7:46:
4f:4b:55:b3:2b:4a:30:4b:ac:69:60:03:3e:5a:0f:00:85:86:
03:9a:41:4d:bf:42:bd:71:1e:c2:b4:73:d5:6c:9a:fc:81:ca:
ff:41:5a:f1:01:29:04:2b:8e:ef:61:14:37:96:14:26:36:0c:
7b:11:58:d8:c9:e1:55:45:de:fe:34:3d:f0:10:ed:e3:68:ac:
eb:8e:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:16 2025 by rpki-client