
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: ijjmNvh3OQq42vc7lwud5Cl3fmOnjrwdmgMTcC9qhxg=
Subject key identifier: 87:95:59:BA:5A:EA:65:C8:CB:AB:4F:95:B4:4A:F7:46:0C:B8:4B:95
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 01987A894851CCD0AAA1D96F92F545E45148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 14:01:13 +0000
Manifest this update: Tue 05 Aug 2025 14:01:13 +0000
Manifest next update: Wed 06 Aug 2025 14:01:13 +0000
Files and hashes: 1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: vTu5HrGBkSqb42+8q5YKUDCtieVxaYaYg53fSBMvq8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:48:51:cc:d0:aa:a1:d9:6f:92:f5:45:e4:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Aug 5 14:01:13 2025 GMT
Not After : Aug 6 14:01:13 2025 GMT
Subject: CN=879559ba5aea65c8cbab4f95b44af7460cb84b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:1e:0b:8e:8c:44:30:94:68:e1:10:bc:d2:
c8:6f:88:b8:37:1c:68:87:c5:8a:f3:0c:6e:51:d7:
04:c8:bf:af:ab:bb:3c:5f:44:71:26:3a:e5:23:a6:
e4:29:dc:5d:61:e6:90:34:03:d5:fe:27:a4:66:3d:
35:70:94:21:72:0e:da:d4:ed:53:c7:5d:36:c4:c2:
81:b5:e2:72:b2:cf:1f:13:d8:6a:23:5e:e8:3a:f5:
09:9e:66:7b:94:54:a6:c3:e7:31:1a:e5:d3:22:cb:
d4:b4:57:80:35:23:34:3a:ca:c8:19:7d:92:4a:b6:
13:65:8f:f5:24:38:cf:fb:c4:fc:0c:3d:ea:1e:52:
2f:5a:69:bb:10:f4:1d:05:37:13:94:7a:ba:c3:58:
66:e6:f6:49:28:02:78:71:a3:cd:3e:eb:e1:6f:39:
68:1f:3b:d8:35:e9:5f:ce:0b:c0:dd:7b:e1:0f:5f:
bc:1a:f5:3f:bd:82:78:b5:2e:7b:da:46:12:8f:36:
98:00:6a:ec:61:bf:82:f1:d1:64:b3:33:03:4e:69:
09:db:5d:0d:d3:43:4d:e4:88:fa:cc:ba:fb:9c:ad:
66:50:6d:e6:e9:8a:28:fb:26:55:05:60:0b:20:ac:
b7:7d:d3:b0:be:d6:44:f3:7e:82:15:3f:ef:ea:51:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:95:59:BA:5A:EA:65:C8:CB:AB:4F:95:B4:4A:F7:46:0C:B8:4B:95
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:f3:e6:c1:92:38:42:1f:22:b3:3a:01:a4:4e:44:92:46:
b9:b8:e6:00:99:9c:f4:bd:1c:fa:86:59:52:f2:eb:ca:1f:2a:
f7:69:67:5f:bb:43:44:12:d1:50:cf:e1:35:f6:12:18:55:40:
89:b1:5a:46:8b:bb:5c:e5:d9:b0:3b:68:f9:9a:d8:b9:03:a0:
39:6c:cc:11:bf:bc:0e:2d:1e:c1:62:73:dc:61:f7:29:21:88:
09:d6:63:ca:0b:a2:68:ec:77:56:03:6e:d5:40:cc:c6:81:79:
e2:bf:a7:94:20:7a:0d:01:2b:25:38:7a:b9:54:23:a7:26:14:
8f:7e:35:c6:50:24:66:3c:c8:5d:be:a6:06:db:4c:5c:bf:08:
8f:24:90:1c:47:6c:31:9f:cb:ac:f1:c4:dc:77:65:90:aa:23:
6a:87:1e:8f:f9:48:c2:ad:68:79:c8:ae:d9:d7:04:c9:79:32:
9f:12:d9:29:83:8b:81:e1:1c:90:1e:f3:6e:64:4d:d9:36:d8:
a1:ce:ba:e2:b0:36:e5:13:02:a5:a5:0a:ee:e4:95:e7:88:4a:
79:9f:aa:3d:4a:53:25:ac:c7:b3:10:27:6f:6a:3a:de:71:b6:
15:85:a1:b9:c7:c0:38:a0:9c:84:ad:3f:ad:bb:22:31:a5:b2:
64:36:40:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:21:04 2025 by rpki-client