Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File: ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier: KeDTJJlth5kIn6l+yZZlErIrTyOifFQBA4bj1qbxY10=
Subject key identifier: FB:6C:90:9F:67:0F:B6:5E:3D:CE:58:0C:A2:02:08:DA:45:0C:4A:13
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer: /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial: 0198D5BBCCB826563C3FB72E6B50DD9C7E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: NA5mgzoDK6jbbKh48XeliWtbDYM.roa (hash: 9nIV3wU01lTdftDhSQVjEb+D2h3DXok24aEDQGNAM3o=)
2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: UvdKtqWM0AXVLiJkDbcyKang1pokgD1TuXIyVSBZ0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cc:b8:26:56:3c:3f:b7:2e:6b:50:dd:9c:7e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=fb6c909f670fb65e3dce580ca20208da450c4a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:fc:ad:a2:36:cd:9b:ad:39:c6:3f:32:dc:
bb:6b:37:13:e3:4f:d1:3f:c3:d8:2e:37:48:e0:71:
e0:2c:51:30:d7:ad:d2:40:d7:56:3e:5d:c6:b5:57:
9f:6c:7e:14:cd:e3:c8:d6:2f:8b:ea:6f:c2:56:cb:
de:ef:87:81:90:6c:87:8d:33:20:2f:d6:b3:2d:39:
b1:7a:f7:99:a6:43:4a:aa:d8:ef:b2:8a:e5:82:4d:
36:9a:43:97:3d:49:57:a0:07:29:77:0a:45:de:61:
15:6d:c8:b5:eb:01:12:44:33:e3:c6:d6:21:e6:5a:
b7:63:8b:43:bb:3c:eb:f7:d0:17:48:b3:77:6a:11:
d6:20:c3:81:f3:ef:99:e7:1c:20:7b:39:46:71:18:
64:d4:0d:ad:1c:48:1a:d8:9b:ea:c6:af:29:e5:9e:
ce:5a:4a:92:d8:61:6f:9a:85:bd:92:e7:f0:cb:62:
bc:6d:8e:83:d3:85:73:aa:78:e2:77:e7:81:0b:a1:
08:87:ba:e5:48:a4:71:15:52:fc:ea:d9:da:b5:5a:
66:35:f9:32:c8:12:96:35:b9:c7:5d:a1:3b:a5:6f:
c2:a4:eb:a6:2e:6e:36:b5:97:81:55:a6:dd:a3:93:
45:af:ac:76:43:b3:67:b0:46:ba:7e:98:dc:e6:33:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6C:90:9F:67:0F:B6:5E:3D:CE:58:0C:A2:02:08:DA:45:0C:4A:13
X509v3 Authority Key Identifier:
keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:09:b0:8d:59:bf:90:e5:d9:e2:6f:ba:87:34:61:9e:15:98:
91:e7:bf:31:23:54:08:6c:82:01:b9:ed:b1:13:b4:df:20:53:
cc:b5:70:27:00:ac:46:fe:ce:6b:06:c0:22:9a:b3:03:b9:d6:
76:2a:7f:39:2e:99:1d:20:84:66:c7:a5:37:70:22:e3:d5:6b:
07:44:f0:29:d4:ce:16:81:e8:24:52:f4:9c:df:32:6b:c2:25:
2b:d3:31:d0:62:06:83:b3:f5:49:98:69:19:e2:99:43:a1:44:
7b:d6:4e:d7:0c:1c:fa:04:25:de:b9:4d:de:32:49:cc:cf:d7:
07:84:5e:d1:34:82:49:c2:49:3b:d0:c6:58:86:83:0d:a3:b8:
2c:0f:b6:10:2f:ed:a4:ca:de:19:e9:df:55:1c:3a:4d:ce:e5:
1a:04:00:21:c8:7d:0d:6a:23:d0:93:7a:46:98:91:b6:45:fa:
4f:cd:4c:1f:fe:fe:54:c1:ee:59:c3:73:8e:89:f2:0a:02:81:
35:95:2c:cd:53:68:45:a8:af:57:0d:c6:99:f0:21:93:6d:b3:
67:a6:d2:29:b7:56:ce:de:ed:34:0e:02:4e:9b:bf:fc:f1:20:
5c:31:d7:5c:45:58:f7:c1:ee:b2:15:6b:a7:64:db:c9:5d:f4:
99:8d:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:01 2025 by rpki-client