Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: Re+wdNLXcMz21adI82KDBQKTOcD5M88JSMdXJaxT6Js=
Subject key identifier: 5F:BA:C4:7A:BB:E0:AF:AE:46:34:23:9A:C2:93:5E:01:BE:1A:C1:2D
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 0198D4732C9F695EAD8A16C152E4A2AFC500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:54 +0000
Manifest this update: Sat 23 Aug 2025 01:02:54 +0000
Manifest next update: Sun 24 Aug 2025 01:02:54 +0000
Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=)
2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=)
3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: EG5tyPqv7UpS1fJ0YimKcVqLTILsIUmyZzVQk8vyx0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:2c:9f:69:5e:ad:8a:16:c1:52:e4:a2:af:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Aug 23 01:02:54 2025 GMT
Not After : Aug 24 01:02:54 2025 GMT
Subject: CN=5fbac47abbe0afae4634239ac2935e01be1ac12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:29:de:8e:ea:ef:70:7f:94:72:b3:75:53:
77:13:e1:b9:31:ce:55:28:4f:76:80:4d:23:f7:52:
1b:69:90:70:33:4a:d0:43:7c:72:3c:73:44:d3:20:
2a:39:10:66:aa:d2:eb:02:8f:a0:73:8a:1e:95:98:
8d:f2:11:5a:db:43:d3:af:c7:c1:39:ac:d9:4f:61:
ff:1a:16:e5:f8:d3:26:5b:42:20:9d:76:6f:93:d4:
4d:e6:5e:4d:87:1a:ce:0c:15:33:80:86:a4:57:fc:
f3:2d:03:30:a9:ac:f4:8a:84:c0:94:8e:e4:e2:4e:
b6:ba:55:a3:3b:f6:88:53:48:65:d4:8a:3b:ee:15:
23:a1:4c:f5:78:82:59:33:c6:c4:c4:fe:5c:ed:e7:
35:2e:f9:00:5c:c0:01:9d:2e:72:e5:f4:b7:b9:9a:
2b:14:57:42:7b:e9:97:60:ac:76:5f:7b:f1:d9:ae:
48:9b:b9:c7:dc:d8:b9:19:c0:19:ec:20:7a:f0:54:
1d:1a:3c:fe:57:e7:c0:88:b0:ad:82:bd:7b:dd:93:
c7:0f:0a:c3:07:f5:8c:52:a0:a9:5e:08:30:52:15:
52:7b:d0:8b:23:9f:0d:3a:cd:cb:b7:8e:3f:0e:26:
58:db:c2:29:01:a6:d9:f6:80:15:e3:c8:ab:0f:f7:
9b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:C4:7A:BB:E0:AF:AE:46:34:23:9A:C2:93:5E:01:BE:1A:C1:2D
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:26:2d:4e:b6:57:fc:1a:b5:b0:99:09:c1:14:ac:10:bd:ab:
94:80:0e:b1:5b:a3:0b:e1:44:91:02:25:d8:71:3d:93:8f:b5:
43:2a:54:fc:ce:cf:7f:11:1d:ea:44:1e:62:d9:b7:6f:0a:30:
6f:16:fa:fe:a5:b7:f8:da:9a:e0:60:79:73:2c:fa:cc:f5:0c:
0a:f6:53:e5:bf:d8:9d:f2:d6:b7:3f:68:3c:d9:3f:26:96:ed:
fa:e7:92:c8:ca:e4:a9:a8:a8:4f:61:a0:af:34:f3:d1:46:4b:
8d:25:10:df:fa:7a:b7:eb:1a:7b:fb:d9:01:89:64:c5:e6:f0:
14:f7:c3:9e:49:af:f4:c9:6c:39:b8:8b:14:1a:1b:e9:65:9c:
57:27:1e:80:d0:b2:0f:1c:b1:31:54:2b:d3:27:b2:40:a8:d7:
cf:86:2e:ec:4e:d1:e7:76:17:d6:cc:b1:b3:5d:d7:7f:80:8c:
a7:3b:57:54:79:6e:f3:fc:5a:63:d0:cd:39:81:57:c9:0a:55:
75:47:bb:5e:61:93:be:9d:62:6d:23:59:8a:78:6f:e1:f4:b6:
98:00:4a:ae:e5:6c:9a:c4:03:38:98:5f:6d:2b:ba:74:d2:79:
d3:4c:1e:e3:fc:19:7a:77:44:b7:54:ac:a1:b4:f9:78:38:84:
29:cb:f5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:30 2025 by rpki-client