Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: MyBQnTdacaMol+MSc6PTqw+/y5Xw2501IxNMzM762R8=
Subject key identifier: BD:79:93:B0:5D:0D:9A:65:9C:93:2F:97:9B:F2:77:4F:0E:C1:D7:99
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 0198D6612067C4496ECE248C314FB7C729C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 1169
Signing time: Sat 23 Aug 2025 10:02:26 +0000
Manifest this update: Sat 23 Aug 2025 10:02:26 +0000
Manifest next update: Sun 24 Aug 2025 10:02:26 +0000
Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: KLGD1Icz2aGzFH8kmKvv42tjJLzURCSgRbHwEmUbfww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:20:67:c4:49:6e:ce:24:8c:31:4f:b7:c7:29:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Aug 23 10:02:26 2025 GMT
Not After : Aug 24 10:02:26 2025 GMT
Subject: CN=bd7993b05d0d9a659c932f979bf2774f0ec1d799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:e8:14:83:37:b0:3e:24:42:5e:29:7d:56:
8a:5c:6e:ab:44:93:59:66:5e:aa:44:f0:7b:b2:98:
a2:50:83:88:ff:84:80:37:ff:28:b9:40:a0:e7:13:
14:e9:d0:a2:b5:7d:b3:55:be:1d:a4:1c:71:fa:75:
21:aa:e0:be:74:3c:81:4b:f4:e1:79:e3:32:77:d3:
ec:76:74:41:64:86:29:44:9b:c1:46:f0:49:54:cd:
7c:88:86:9a:f3:af:aa:01:a5:a6:ac:69:d3:fd:d2:
6c:41:27:ca:cf:c4:08:c9:5a:c0:d4:9f:f2:6c:e0:
e4:21:df:db:3c:96:2b:3d:45:09:3d:60:2f:f7:e2:
ba:5f:c5:76:12:6a:61:49:80:8f:57:98:60:e8:6b:
76:27:5e:40:76:ec:47:ed:76:c5:ef:8b:a0:2d:4a:
f0:82:c0:e7:bb:c4:e1:22:0e:f6:9d:53:c1:b5:69:
94:70:9e:d6:71:e8:88:60:8e:4f:5a:f3:22:75:39:
e7:b9:11:ac:39:ed:e7:7e:73:ca:b3:4b:42:32:90:
87:c3:84:b7:a1:7b:06:c0:92:d5:64:7e:06:9e:98:
d6:35:07:5a:e7:71:e1:16:6d:7c:1b:b1:13:78:01:
23:58:f4:7b:d2:ca:db:ba:dd:0c:27:c7:6c:d1:66:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:93:B0:5D:0D:9A:65:9C:93:2F:97:9B:F2:77:4F:0E:C1:D7:99
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:84:e3:0a:35:78:0a:1d:80:ac:9f:ea:d0:2c:c6:cd:51:ba:
8d:78:29:03:58:c7:15:ed:04:9e:4e:01:9c:cc:cf:e9:68:ae:
ca:33:c6:ad:cc:4e:75:00:d3:66:d9:5c:d3:58:92:73:5a:72:
b1:52:2e:0f:31:0c:a0:3c:72:69:b5:68:aa:92:06:f8:98:c0:
43:3e:27:bc:73:f5:bf:ef:5b:17:f5:69:4e:be:62:2a:97:14:
d0:30:41:ec:a6:43:c5:99:75:47:ed:73:38:79:50:57:cd:f3:
fb:99:bc:fc:c9:4a:d6:09:ab:89:b4:12:9b:b3:76:b2:35:70:
6a:3e:c7:0d:53:dd:73:c0:2b:31:1a:a3:38:29:56:93:70:00:
fc:2a:61:09:42:9c:88:3b:fe:e2:a4:d1:be:0d:85:90:e3:de:
1a:6e:67:3f:f3:dd:69:54:ae:42:ad:5f:37:d7:91:bc:04:2e:
81:86:88:94:7f:fe:45:2b:64:3e:3e:1c:3f:a4:7e:91:b5:eb:
b3:87:b3:2d:c8:5f:fb:b4:3e:ea:d1:0a:88:29:a9:92:aa:19:
93:1b:f6:04:f9:0a:9e:cf:2d:15:84:79:0a:21:f5:a4:3f:82:
69:15:ef:fa:23:c1:75:65:ce:67:19:11:7c:34:60:4e:96:5b:
46:94:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:07 2025 by rpki-client