Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier: 6xAbWyf1nXU23fVkuzuHUqxP5YR+KrBrW8VzR/cW/7I=
Subject key identifier: 25:99:83:3D:4B:F5:3B:9C:3F:8D:91:AC:42:E9:1C:56:F8:8B:68:E6
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 01987D8A9157F8CAF017C470DA96F9A4A914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 04:01:29 +0000
Manifest this update: Wed 06 Aug 2025 04:01:29 +0000
Manifest next update: Thu 07 Aug 2025 04:01:29 +0000
Files and hashes: 1: mcCnj0YcjKVWKNRUEHJJ9oCILI8.roa (hash: QCD+FHuTsYXCE9fg4S64GzeBQUQDK650c6oIs3Pqi/Y=)
2: qnmXcL8dUJj7rdFkLv5IIJUwDDY.roa (hash: SbXai8opNHzQzJTVhIMV1eYK9jsCmNmT7MYPyjYeprw=)
3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: RCeGLZSVXbsFSuJqBtYYKQ+Jd/wn41xw6doTmFBst8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:91:57:f8:ca:f0:17:c4:70:da:96:f9:a4:a9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: Aug 6 04:01:29 2025 GMT
Not After : Aug 7 04:01:29 2025 GMT
Subject: CN=2599833d4bf53b9c3f8d91ac42e91c56f88b68e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:6f:96:32:75:41:d4:f8:8b:e1:2e:d0:33:
90:b2:5e:a5:05:c4:85:24:37:0f:46:73:32:70:e7:
99:b4:55:27:78:31:9b:f3:b3:32:07:b9:18:f9:cb:
11:c0:64:6a:74:25:f8:9b:64:e9:e9:1a:87:b5:6d:
6f:f7:2c:7b:95:98:b3:eb:b9:36:19:45:66:c6:b1:
91:f5:a6:a5:2d:31:01:57:ae:86:e1:5a:6d:10:9a:
a0:85:2a:40:15:a6:45:8d:2c:12:19:86:8b:e8:66:
7b:82:61:26:6d:c5:c3:28:50:fc:26:35:eb:a2:1c:
23:ea:38:97:96:62:d0:e4:67:87:44:44:1c:52:c1:
bd:07:84:dc:e8:03:59:cd:c7:93:14:f8:97:c0:32:
bf:51:d5:4e:f2:9b:15:ff:e4:6d:6f:c6:d9:5e:fd:
a0:fc:57:3b:f3:81:55:0f:da:75:1a:f7:c9:b5:55:
ff:48:a5:27:3a:b7:76:f2:e5:20:ce:ca:7d:0c:b4:
6b:b7:50:89:62:94:55:40:5e:2f:4a:bb:4a:58:0c:
fc:da:57:b3:8f:e5:1f:88:b3:d7:cb:cf:03:55:15:
85:90:79:bf:5c:2e:0a:56:64:31:16:1d:e3:70:01:
cf:7a:8d:0f:1b:18:c6:4d:99:9f:3c:ce:5d:ac:9d:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:99:83:3D:4B:F5:3B:9C:3F:8D:91:AC:42:E9:1C:56:F8:8B:68:E6
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:32:26:41:e6:f2:6d:d4:41:68:68:a0:2e:2a:4e:53:b3:86:
c5:11:51:8c:bb:51:28:a6:0a:3a:07:f5:81:44:52:df:7f:93:
70:9c:27:7d:a6:ee:cf:c8:b1:c6:0d:27:91:12:aa:76:81:ee:
75:ea:27:40:ae:8d:9f:60:4d:49:7f:75:d8:64:63:ad:ee:27:
47:bc:91:cc:fa:f2:31:69:fd:09:6f:4e:d5:85:7f:68:75:41:
6d:16:1e:35:74:c1:28:d7:cd:73:54:5a:d7:9f:95:70:35:75:
c6:d1:60:e0:9d:6d:f5:a9:4b:9a:ee:1c:38:27:d1:99:c5:ba:
35:99:69:38:4f:ba:fd:3e:9e:96:0d:a4:bd:40:75:0c:df:61:
55:e9:6a:33:26:00:f7:aa:ee:0e:e7:15:24:b5:52:0e:18:1b:
c7:94:b5:e2:d5:09:6f:ab:cc:d7:87:e6:06:7d:a5:db:8b:af:
76:92:b2:b4:c0:39:e7:fc:93:46:ff:b1:57:eb:c2:e8:29:c6:
09:40:d5:2a:0b:d1:3a:9b:74:f0:c7:99:3c:bc:5c:14:b2:80:
a9:0b:fe:ab:48:68:8d:7c:4d:ee:ff:d2:02:17:58:bc:9d:43:
60:7d:33:2c:1b:ae:f5:04:04:d8:36:ad:1e:27:b9:7e:5b:ec:
3a:88:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:52 2025 by rpki-client