Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier: U6ABqlj08mbo9uMqUz5GvayZKl/q9KJy8PmYgHUsbr8=
Subject key identifier: 8F:3D:73:D8:4C:14:A1:CB:E1:74:E5:05:A9:9B:15:45:0F:57:D9:5F
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 01988F9012A646FEE111B51D5028801C890A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number: 162B
Signing time: Sat 09 Aug 2025 16:00:40 +0000
Manifest this update: Sat 09 Aug 2025 16:00:40 +0000
Manifest next update: Sun 10 Aug 2025 16:00:40 +0000
Files and hashes: 1: 1hMpXEk-3MWaN_1A5D8V9EPMUFk.roa (hash: CWNT05GFaywUZSs5xqqgNA+kl89pNKE3DHnIiDI2iJE=)
2: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: Jnj5sOy/T9lztm+WGr+NP5XAoEOZ1ivWVJgBHH6LWVM=)
3: rWHh4mQ0uaKggoKTpG34xhoULNA.roa (hash: E9+8lA/ClMI1O0rcr+QMuqVLJyMAlgl6OS/N6XXdTOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:12:a6:46:fe:e1:11:b5:1d:50:28:80:1c:89:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Aug 9 16:00:40 2025 GMT
Not After : Aug 10 16:00:40 2025 GMT
Subject: CN=8f3d73d84c14a1cbe174e505a99b15450f57d95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:6e:9d:d9:a4:a0:62:c7:18:bf:ee:1d:a9:
81:28:46:f7:17:56:5e:62:28:ea:08:cd:ac:de:98:
da:6f:7d:77:f5:95:08:5e:9a:2f:6b:27:aa:71:18:
60:0e:cf:88:2d:2a:ed:46:92:12:db:fa:0f:79:db:
66:7d:65:c5:83:b5:ce:54:89:48:fa:45:49:73:fc:
97:90:9d:c7:7f:da:f8:ba:1b:83:ea:5c:4f:89:1c:
b9:ff:31:24:53:97:c2:57:2e:c1:28:82:6a:c6:62:
98:93:3f:a8:28:45:37:d6:2a:36:f9:06:2f:f3:2e:
39:8a:a0:4d:a1:5d:41:6b:42:ec:33:db:9e:bf:13:
ce:99:03:6b:20:d5:02:ef:6f:91:25:73:09:57:5f:
50:48:ff:98:c0:9c:77:82:73:39:97:b8:78:0b:99:
94:bb:97:e7:c7:34:b9:da:13:9b:b7:e0:aa:74:5a:
17:91:5d:29:8e:eb:c4:c5:5d:83:58:53:39:07:08:
06:f0:fa:70:4f:70:3a:c7:7f:29:f0:02:8d:d1:30:
49:92:fa:d0:0f:a0:bd:bf:d3:de:e7:ab:13:76:4d:
03:8d:ae:4e:ba:ee:56:0c:01:3a:06:b8:38:b0:40:
94:c3:ef:f7:ea:8f:fa:c3:d4:8d:d3:fb:ea:4c:18:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3D:73:D8:4C:14:A1:CB:E1:74:E5:05:A9:9B:15:45:0F:57:D9:5F
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cd:a2:94:d3:86:a1:b9:5c:9b:92:3f:2e:d2:0e:43:c3:4a:
95:b2:51:d8:f8:38:f4:84:da:3e:00:5f:44:ba:a1:32:4f:4b:
3d:fc:d4:bb:ca:ae:a3:04:14:f9:aa:80:8e:c4:f5:24:7e:7c:
8b:a0:34:32:b8:24:c5:18:a3:f7:44:c6:bf:b2:e8:96:64:af:
22:2f:73:06:73:eb:b6:1a:11:fb:61:45:b2:98:a3:39:6a:b8:
fd:06:c3:7c:71:8e:6c:8b:a8:d0:99:f8:2e:4e:07:93:fb:4f:
59:c6:0a:a8:60:cd:34:1c:47:e4:8c:c6:22:2d:b1:26:c5:7f:
59:74:a6:c1:a4:79:b0:40:5d:3b:54:86:3e:36:6c:80:d0:98:
1e:2c:04:74:9d:23:73:17:d3:59:24:5c:6d:f2:d0:77:04:78:
cf:18:fc:0e:20:8d:07:20:44:0c:40:bd:65:29:33:9f:23:31:
c9:8c:d9:c8:75:ae:36:e4:99:a2:42:a2:8e:61:7b:a2:5b:91:
1c:64:49:78:34:eb:52:8b:31:b7:b9:0a:b0:de:c7:a9:2f:2f:
e7:dd:13:2a:fd:41:ba:6a:7b:f6:69:6e:2f:70:be:c4:c4:75:
14:e0:b9:8c:49:c9:ee:25:21:9f:b0:8f:b5:f2:32:f1:55:ce:
67:ab:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:45:20 2025 by rpki-client