Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: EopqxGOanmUsnauTfzDEc9FNSgDrB1ZAIdJP7llG9pE=
Subject key identifier: 52:86:D7:91:90:80:8A:C4:E5:B7:D9:D4:67:EE:6C:DE:B3:C7:3E:6B
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 0198808B162CF0376C8B73BDD745B124FAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 18:00:55 +0000
Manifest this update: Wed 06 Aug 2025 18:00:55 +0000
Manifest next update: Thu 07 Aug 2025 18:00:55 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: ddzuJKDdfBfD05pd5AAViQoA2Pc.roa (hash: 2lQWzIDIqMXuR/qxqLFrOSTAaFdBjF2vdhRCL0julW4=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: awJ2xUHB3jxu6c3lxcx2pOlI1Uu2a5h746n/H5VRXfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:16:2c:f0:37:6c:8b:73:bd:d7:45:b1:24:fa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Aug 6 18:00:55 2025 GMT
Not After : Aug 7 18:00:55 2025 GMT
Subject: CN=5286d79190808ac4e5b7d9d467ee6cdeb3c73e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:32:c4:8a:fb:ec:f6:98:56:d7:87:8f:d1:
8d:eb:8e:35:13:e7:56:c0:0a:9f:4a:f2:bb:bc:0f:
d1:96:80:29:ce:5c:27:43:c7:6a:29:cc:3b:d5:c1:
0f:f0:3a:b9:a6:9e:83:6b:c8:4f:ae:a4:a1:ee:d7:
88:d0:a5:94:5e:cf:73:1d:0c:e9:89:5d:27:b2:44:
5e:ef:d5:66:f4:36:b7:68:7a:7e:4c:b7:52:dc:ea:
9b:42:ac:15:f7:3d:10:1e:f6:08:fc:77:26:a2:0f:
f1:66:08:87:d1:95:43:a9:d6:14:9d:f3:b0:28:1b:
55:27:9d:9a:a5:be:ee:4a:bd:da:71:5f:6c:93:8b:
3d:cc:fa:df:80:9c:3e:29:89:ee:d3:f6:5b:0e:2b:
5e:38:34:3d:a5:25:48:a0:84:65:38:46:3a:f1:87:
49:5c:9c:53:34:f2:79:36:b5:bb:fe:cd:48:68:ea:
ad:24:53:32:57:07:b2:73:81:3a:fc:0d:c4:5e:32:
35:08:65:0b:78:44:a0:e7:6b:38:47:02:16:c9:d6:
f0:72:20:70:10:7e:4a:34:00:1a:0a:92:7a:9d:ad:
91:fa:8f:fd:ad:4b:bf:f7:5f:ed:b4:dc:16:ba:c9:
6e:40:65:6d:14:c9:46:e2:e7:89:a1:5c:ae:5a:0b:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:D7:91:90:80:8A:C4:E5:B7:D9:D4:67:EE:6C:DE:B3:C7:3E:6B
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f9:ba:aa:b8:f7:cc:1b:ef:ab:8c:ba:b9:b0:c8:4d:dc:26:
55:e4:da:c6:ce:92:bc:23:41:af:39:ef:4a:f1:b5:73:1b:6f:
95:01:9c:fe:31:83:a7:fd:c6:38:c9:85:3f:68:56:dc:43:4e:
69:26:3d:66:21:fa:44:e4:0e:e1:85:7f:a5:a9:3d:93:87:d3:
25:64:de:5c:0c:48:2c:69:ab:be:43:40:26:59:a7:7c:db:5f:
d9:a0:04:b3:b6:03:42:fd:c0:ab:9c:25:93:ce:e7:a2:ac:a5:
e8:c7:70:a1:1f:44:73:6e:ef:8a:95:3d:ec:28:82:79:ec:ec:
74:b9:68:c4:e3:be:68:70:b9:72:b4:53:5f:17:42:99:e5:19:
e8:c3:1b:17:1c:4e:14:eb:82:7a:d0:d3:ba:b7:4c:10:4e:36:
02:1d:a6:b0:9d:41:b9:b0:77:91:e3:4a:26:13:06:8c:b0:80:
9e:3b:de:e6:36:98:08:49:05:6f:7d:26:f5:d5:01:85:5a:a7:
c7:8b:18:66:c6:0f:62:e3:30:1f:7a:35:2f:26:1f:00:c2:46:
ee:52:27:3c:9a:64:6a:e8:3e:8d:6f:3e:cc:d0:37:c6:ab:f9:
10:40:a1:08:f8:33:f7:87:9d:b4:c9:4e:bf:43:b9:44:8b:61:
60:92:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:21 2025 by rpki-client