Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: xbk514X2mX0olw6jhlD+D3ximdfCw4pdlhdaIleYwiE=
Subject key identifier: 3A:1A:3E:D4:FA:C0:4C:FE:A2:3A:DB:5D:FC:D3:D6:D1:E6:F9:89:85
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 01987C09A7032B89CAFB7A4685FB1EBC1369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 21:01:04 +0000
Manifest this update: Tue 05 Aug 2025 21:01:04 +0000
Manifest next update: Wed 06 Aug 2025 21:01:04 +0000
Files and hashes: 1: EwMUoWYW4dc0tRkkx15ciptmQak.roa (hash: IxyoruIJ2PWmvP6nW1K1qsmgYgo96Vwp6Gm5YCkQlWE=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: EEl/5bHPtFpbyZ1UKlhT3RDfo+74ei81wdo0KyoyYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:a7:03:2b:89:ca:fb:7a:46:85:fb:1e:bc:13:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Aug 5 21:01:04 2025 GMT
Not After : Aug 6 21:01:04 2025 GMT
Subject: CN=3a1a3ed4fac04cfea23adb5dfcd3d6d1e6f98985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:7d:f2:0a:c0:64:7e:3f:ef:84:f3:f4:cb:
c9:53:86:2f:64:fa:ba:a9:85:3c:63:15:43:94:f4:
90:b8:77:8d:91:07:87:95:2a:8e:d3:2c:e9:ec:ba:
62:75:ba:c0:b7:a8:f7:77:20:27:15:19:d8:28:49:
b4:ce:61:47:6e:16:9d:0f:b3:c9:f6:37:7b:3b:fc:
02:4c:fa:52:97:33:e8:7d:7e:2b:3d:ca:42:e8:1e:
6f:db:6a:cb:85:75:2d:6d:b3:69:f5:9d:99:cc:4d:
d2:da:c7:70:d5:a2:50:9a:c9:a4:25:65:a2:ef:4a:
51:3d:26:7c:39:6a:5b:f9:af:44:93:81:81:d5:6c:
cc:3b:30:bc:82:57:87:7a:5f:08:7e:04:11:28:b0:
80:b6:bb:54:a4:84:82:ff:f8:79:0c:2b:ae:8a:9c:
71:fb:51:de:4c:41:73:27:a3:4b:4e:ff:0c:0d:5c:
45:4c:a1:44:d4:09:bd:c6:68:e9:eb:b7:03:da:59:
27:e1:1e:26:4c:0c:38:01:a0:1a:4a:2f:fb:29:cd:
5c:59:93:6a:ff:9a:6e:c2:33:fc:05:76:f2:dd:25:
e5:8e:b0:95:97:6e:c1:5d:1d:99:ac:e5:35:0c:1c:
37:7d:ad:eb:02:b2:95:7e:c4:ff:87:b4:de:4f:d6:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:3E:D4:FA:C0:4C:FE:A2:3A:DB:5D:FC:D3:D6:D1:E6:F9:89:85
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8d:89:7c:79:c6:1a:1e:a2:55:2f:80:5f:a7:83:c9:fd:50:
b7:09:73:5c:55:f5:b4:9c:8a:54:13:b3:31:b4:eb:07:3e:81:
c3:ab:f7:ff:3a:bd:0a:c3:5d:77:a3:2a:34:cd:cb:fd:20:cd:
ef:2e:5a:75:60:95:23:00:50:55:1e:07:97:5f:e7:ac:1c:8c:
26:55:d9:21:bc:2d:03:2e:e3:47:97:5d:e4:75:22:d0:0c:28:
b4:a5:ec:83:f6:89:2a:04:d9:e5:19:06:e0:c4:50:8a:a9:37:
4b:3c:33:d2:cf:16:fb:17:8d:08:ad:fa:be:2f:f1:68:d1:ff:
63:f4:af:7c:93:d0:e5:fc:c2:44:03:24:80:5f:f9:90:49:ca:
7c:7f:62:eb:2b:b9:c9:71:0b:03:a5:f9:1a:9c:81:86:74:66:
d9:2b:1d:49:1d:6b:1e:bd:e2:ec:71:06:e7:b1:48:f0:91:6a:
49:37:73:96:f3:24:86:46:28:30:06:37:c2:f3:9c:44:4b:6f:
3c:30:ce:83:5c:e6:91:5e:2f:64:6e:fb:a4:d0:52:33:fe:b8:
8d:f0:41:65:df:11:c2:91:01:d0:0b:b4:34:11:4f:44:45:36:
92:33:88:5e:c3:6e:63:01:4c:a1:00:48:16:a4:11:9f:81:c1:
5a:5e:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:07:21 2025 by rpki-client