Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: DuPuTyNga5QDQINHRL5ukB1bVmgVBBngVH5UoOxl6Os=
Subject key identifier: 5B:61:62:41:48:4F:47:EA:E5:97:EE:94:FE:DF:71:BE:2C:4F:F1:03
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 0198D5BBF66D8ABCB28E8EFA02BAAC41C9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0A06
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: cA8dIN3AwUwoY4zLtLC7axO/QH9XZIHSW+BI4r9Rg/c=)
3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f6:6d:8a:bc:b2:8e:8e:fa:02:ba:ac:41:c9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=5b616241484f47eae597ee94fedf71be2c4ff103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:26:39:33:9e:58:15:35:6a:88:a4:7b:cf:fa:
df:a9:89:ad:12:c8:ed:98:af:62:25:40:1d:e7:52:
1a:d2:0a:04:63:5b:c1:6a:c8:7c:75:18:d0:e3:0f:
e3:d5:9b:85:3e:0b:a1:f4:a7:44:3f:1c:ba:fd:f4:
62:2e:c4:96:38:ef:38:94:66:08:ca:51:c0:88:dd:
25:2a:17:b2:99:2d:c5:4a:4f:41:05:54:aa:22:5b:
26:19:a6:db:35:70:ef:3e:01:cf:b2:84:c1:7f:0d:
72:9d:cf:09:5d:1b:33:01:16:51:55:d6:22:89:41:
8c:56:f8:0f:77:3c:6d:85:e1:76:1a:0b:99:33:4b:
c4:9b:88:70:0e:7c:03:1f:ad:a1:a5:64:86:97:79:
d4:1b:00:12:2d:64:a4:5a:bc:5d:76:ad:cb:eb:73:
3f:fa:95:f8:d9:3e:e1:80:cb:21:f1:c1:4b:24:f0:
54:ae:f9:fe:cd:90:fd:ab:40:25:af:c9:ee:7b:78:
5b:69:32:ec:f8:13:ab:23:88:fa:a0:c8:c9:f6:a1:
39:14:c3:cf:ee:81:fb:de:88:6d:46:23:b0:61:b6:
10:4c:41:23:ea:e5:b4:c0:2f:2d:df:a4:01:86:e9:
80:8a:5b:18:c5:56:fc:f0:05:5f:f8:cf:18:16:7c:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:61:62:41:48:4F:47:EA:E5:97:EE:94:FE:DF:71:BE:2C:4F:F1:03
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ba:bf:b6:0d:c2:a8:2f:43:19:3e:c3:b4:78:8d:3b:c9:67:
c4:84:7c:b5:69:7a:a5:4d:02:5b:9e:8d:0f:d3:2f:11:59:37:
a8:56:7c:15:b3:57:4b:3c:9f:f6:6d:a2:45:b7:f2:79:a9:22:
82:73:78:38:f8:6d:94:98:08:53:cd:c9:dc:16:15:45:51:ad:
ad:3c:5f:3c:6f:15:63:45:64:36:bd:36:bb:92:56:02:e1:fd:
83:19:ae:ba:7d:bc:23:50:87:77:85:d7:50:8b:62:10:00:af:
73:29:0d:2d:0d:2e:fb:a4:72:17:f6:72:9d:0d:13:0c:fc:67:
53:0d:04:fb:00:94:c0:7b:a1:43:2a:d2:0e:78:39:c4:f5:a6:
e5:18:58:0b:63:e0:e1:16:1d:7d:82:97:76:d5:36:ce:da:83:
a5:85:57:fb:43:c6:19:a2:28:bd:1c:9e:c1:36:f7:0f:04:e8:
33:0c:1d:b3:75:80:b2:b3:61:15:2f:1f:d3:77:94:bf:96:a3:
9d:e5:b9:72:dd:0c:f5:2e:ea:ae:c3:70:f7:29:13:1f:61:45:
6a:4c:21:dc:5d:ca:19:a6:ae:d7:a5:e6:50:99:90:22:16:f0:
99:2c:44:ac:b1:a3:e0:df:6a:90:12:e1:97:94:ba:b4:53:c5:
4e:a6:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:40 2025 by rpki-client