Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier: qMFGUPWgKikvNMS/hA4NH56aVFrY1wHHxYdYJy6wZ8M=
Subject key identifier: 56:B0:20:53:1F:09:61:B4:92:90:EA:1B:B2:85:64:64:26:83:E1:AF
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 01987D8A907E1B5620FD3EA26164AE024660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 04:01:29 +0000
Manifest this update: Wed 06 Aug 2025 04:01:29 +0000
Manifest next update: Thu 07 Aug 2025 04:01:29 +0000
Files and hashes: 1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: asCTaQ6I1fdnNGlSdssAc89WQ6S6nD99aJRzQUXenMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:90:7e:1b:56:20:fd:3e:a2:61:64:ae:02:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Aug 6 04:01:29 2025 GMT
Not After : Aug 7 04:01:29 2025 GMT
Subject: CN=56b020531f0961b49290ea1bb28564642683e1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:3e:96:eb:41:d1:d2:f5:22:4a:f0:0b:ee:
af:0f:02:62:0c:6d:86:de:76:33:5b:16:cb:e5:f4:
0a:da:bf:5d:91:10:53:94:ad:17:54:c9:33:18:7d:
01:d7:7c:61:04:84:a9:70:d6:40:54:77:dc:71:3c:
f0:03:3d:32:2e:a3:97:e6:bb:71:96:1c:92:ce:67:
c3:df:43:82:eb:ba:5e:8a:0d:17:af:4f:ae:14:d7:
aa:a0:b7:c9:86:84:20:3e:84:b5:f4:0a:b9:95:e0:
10:c2:bc:98:42:8d:ee:2f:88:86:fb:60:b7:2a:bf:
11:f5:08:ac:20:4e:39:bc:57:64:ba:3e:7f:14:d4:
10:94:65:a1:e9:b8:9a:78:9b:0a:da:51:46:5a:b2:
5b:37:1f:65:ba:89:31:f4:fe:39:23:96:c5:19:03:
3c:77:72:60:26:10:cf:1b:e1:73:a5:f7:2e:d0:a1:
5c:20:14:f2:17:66:ed:f2:64:36:6d:9f:5c:02:9e:
8b:df:89:12:49:7d:2b:6a:ba:e9:a6:b6:9e:0f:2c:
4b:a9:86:97:0e:85:83:00:a8:ed:8a:94:9a:f9:84:
e2:22:5c:f1:3a:a8:42:bc:ae:1a:59:c1:49:97:6a:
ab:01:ba:27:5d:c0:a1:52:9e:b9:c0:ac:b0:93:4d:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B0:20:53:1F:09:61:B4:92:90:EA:1B:B2:85:64:64:26:83:E1:AF
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:82:1f:a0:06:fa:73:82:a9:81:d6:ba:ff:db:11:7d:c5:d3:
4e:c7:29:e0:b2:1f:52:61:da:ee:96:a0:20:c8:2e:28:30:72:
f4:00:22:06:b0:e8:f2:8f:61:09:b1:7b:78:69:4f:53:5c:39:
33:b3:59:5b:e2:d8:64:95:ce:45:6d:14:c3:fc:4b:2c:fb:0f:
02:0c:4d:b8:88:dd:91:6b:52:38:e4:84:cc:3d:09:e9:b0:f5:
9b:94:a8:12:cc:1f:9a:a4:70:d4:88:a2:41:f3:4a:2a:49:75:
86:02:35:ce:73:56:65:4c:90:6f:24:37:26:8a:60:c9:70:c0:
ac:36:43:73:1d:75:ce:e4:4c:f3:d0:ca:c3:b2:ce:e6:07:ca:
d4:ff:e4:b0:e2:0b:75:f3:58:2f:e1:52:79:56:97:49:7d:7d:
0c:16:4b:e1:3d:ef:cf:4a:9e:e9:3f:75:80:fa:35:3b:45:e7:
02:51:da:93:3f:4d:8c:1c:73:c9:00:fd:7d:72:b5:0d:a3:a7:
0d:e3:ad:53:e2:69:3c:91:17:f0:62:c8:69:94:1a:2c:74:74:
91:4a:f8:9a:57:d9:eb:5a:19:e8:1d:1b:d7:f7:f7:3d:44:ab:
1a:e4:9b:53:22:00:9b:54:2b:32:cf:e4:68:23:cd:56:33:d1:
be:23:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:21:49 2025 by rpki-client