Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: I/r/Y6J4cf0IH/gHkS4gFsmMURISKhH6UI5ZQrF4NGY=
Subject key identifier: 5F:F7:29:AF:E4:CD:E0:CB:67:22:BC:6B:27:50:7A:95:0B:32:F4:8D
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019873744D5DAF1F9BB17D70E3FAF9E0BF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 05:00:58 +0000
Manifest this update: Mon 04 Aug 2025 05:00:58 +0000
Manifest next update: Tue 05 Aug 2025 05:00:58 +0000
Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
2: 8h-VrH2OLGuzooixz2EHGOzGj7c.roa (hash: j9xYGg1A7OFK4mnjxkQLlnHkLT4I6Te+j3atszApNdQ=)
3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: Caa5oY0mlOh35S0BKq6GLRb7fffW1KLJ+hzSftjZRME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:4d:5d:af:1f:9b:b1:7d:70:e3:fa:f9:e0:bf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Aug 4 05:00:58 2025 GMT
Not After : Aug 5 05:00:58 2025 GMT
Subject: CN=5ff729afe4cde0cb6722bc6b27507a950b32f48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d2:d6:84:14:35:7e:93:00:8c:48:b4:0d:ab:
e8:46:70:42:06:18:77:74:c3:d7:62:ea:df:3d:b3:
2b:43:a7:5a:02:80:aa:2d:e9:90:80:91:d1:23:88:
ac:86:e0:0b:b8:43:68:63:a0:8e:16:11:54:72:7e:
6d:27:b0:39:89:62:4a:cc:46:e9:cf:60:f5:b2:65:
a1:09:a1:9d:02:af:f8:c6:21:af:ca:17:af:34:ac:
c3:bc:f8:73:cc:14:04:c3:0f:12:8b:ec:59:a5:99:
82:c3:5c:c5:b9:81:07:4d:87:50:75:31:0f:81:51:
0b:89:b4:d7:2d:15:5c:d6:35:10:3c:11:67:b1:b3:
90:15:59:d5:fa:fc:0a:49:e2:e9:92:59:71:3f:95:
e7:47:80:fb:fc:49:11:91:25:7a:87:d8:fe:17:3c:
1e:6c:4a:9f:9c:ac:73:a3:df:ee:7c:3e:45:68:e5:
ea:8a:66:13:73:d0:c9:e6:3a:28:33:41:24:dc:e8:
04:b2:07:92:b5:4d:57:15:49:1e:1b:c0:ba:3a:46:
e3:95:0f:b2:6a:59:5c:66:fe:3f:f3:19:1d:ee:9b:
fe:25:a7:bb:9c:0a:21:62:44:d0:a8:af:ea:49:8c:
e1:8c:e6:9a:aa:49:10:fc:0e:39:e1:ec:c6:bf:13:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:29:AF:E4:CD:E0:CB:67:22:BC:6B:27:50:7A:95:0B:32:F4:8D
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5e:ee:f8:76:71:22:47:3b:0f:57:be:12:05:18:79:f1:f9:
ac:2a:c6:45:b5:89:82:71:a9:7a:ee:fd:01:3e:a3:e0:98:f9:
29:fe:0c:59:ed:2d:ba:b7:00:54:1e:53:a8:c1:ad:3e:32:71:
55:3f:63:4f:06:00:59:6e:d5:11:40:10:1a:16:53:b1:50:6f:
10:4f:a9:52:c3:8b:62:aa:64:ac:71:b6:87:ab:6d:eb:1d:7d:
ff:ee:a6:0c:a9:2d:df:52:55:26:f9:4d:6e:fa:06:3a:11:19:
6f:cb:d8:f0:59:e0:99:29:16:53:a4:5d:7f:0f:f7:5c:6b:57:
63:f2:df:64:9c:ad:6a:23:7c:75:ad:a7:1d:b9:b9:ce:b3:44:
72:0d:cb:74:9d:f9:2e:6d:2d:40:49:a3:6b:0e:f5:49:22:15:
08:a7:98:7c:3b:ea:f8:af:60:cb:21:6a:8a:43:47:b3:ea:1d:
38:aa:62:8b:10:92:13:99:d3:e1:f7:2d:00:13:bb:25:e6:8c:
af:48:92:2a:ca:7b:e6:ee:08:1c:a5:c3:05:1e:12:98:bf:f3:
77:c4:af:c9:7a:64:66:4b:7a:51:9e:91:08:27:24:45:8f:90:
ce:7f:0c:15:5f:43:3e:f3:1e:ad:4b:0b:cc:3e:84:7c:96:10:
7b:0b:39:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:11 2025 by rpki-client