Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier: SFpk8bcN4q9IZmhn3gcDSTepnV/gRkTZ+xYaHhehtvs=
Subject key identifier: 6D:70:C2:4D:B6:6D:27:6C:4F:14:F2:2C:E9:78:76:DB:A9:52:53:EE
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial: 0198D6CDEDDDBCBF93FEF2EB8811A6344965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:01:16 +0000
Manifest this update: Sat 23 Aug 2025 12:01:16 +0000
Manifest next update: Sun 24 Aug 2025 12:01:16 +0000
Files and hashes: 1: 5t5Dcx5tNkWQ_sy57yYX9uF0BSc.roa (hash: PzSrKv8Rw8leyPQ1z/odwxbCskApuD1oeaEEXKXPsNc=)
2: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: FPD+LRWCuR0KSKgBMeOYRmmsOYN/9fJ9KzuhCRW8WIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ed:dd:bc:bf:93:fe:f2:eb:88:11:a6:34:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
Validity
Not Before: Aug 23 12:01:16 2025 GMT
Not After : Aug 24 12:01:16 2025 GMT
Subject: CN=6d70c24db66d276c4f14f22ce97876dba95253ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:83:23:8d:81:b9:ec:af:84:39:aa:46:ef:
fa:47:04:87:f6:1d:90:f3:1c:d2:44:67:3a:57:05:
2a:e8:3b:10:d1:60:9f:dc:2a:31:9c:de:39:03:64:
62:73:b7:95:82:ad:70:fd:2a:c1:ed:03:12:8e:e2:
c3:e5:b2:63:5d:8b:6c:77:14:ba:8d:9f:60:9a:b5:
17:77:3f:53:b7:af:b9:b2:c0:48:7e:e4:b7:5e:33:
8e:52:21:ce:22:b0:4d:7d:af:5f:de:b3:6c:98:ca:
5d:b0:3d:1e:7b:17:bd:cd:2e:c0:d0:ca:25:d6:3c:
2e:c8:69:0f:3e:99:48:ad:4d:57:00:e1:57:17:20:
06:bb:60:20:10:6b:07:a6:d6:39:0a:c1:fb:30:77:
f6:28:b6:48:7d:2c:c1:19:ae:10:20:bb:e3:32:6b:
44:54:aa:c5:e8:1c:94:8a:af:5f:3e:32:73:5b:15:
c8:9c:60:88:66:8e:00:2b:42:3f:2f:b6:05:33:f6:
78:7d:c7:87:54:4e:40:e6:20:99:70:32:31:e7:6d:
b0:c7:72:f1:56:93:47:46:79:f6:ca:78:a4:43:58:
69:86:1f:4f:1b:c3:6e:ad:f1:7e:2d:b0:f4:2c:dc:
2c:8e:55:3a:86:00:4c:98:65:ac:51:3f:3b:8a:e5:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:C2:4D:B6:6D:27:6C:4F:14:F2:2C:E9:78:76:DB:A9:52:53:EE
X509v3 Authority Key Identifier:
keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7f:43:cf:77:7f:f6:57:32:dc:e9:90:2f:b8:60:4a:b9:d5:
65:94:06:29:5a:e6:4a:69:c5:c3:d5:76:ad:2d:76:40:25:ca:
97:91:d5:ac:6d:05:81:76:ac:ac:f0:db:97:21:4a:b3:15:bc:
d3:6d:41:e0:17:9b:6c:f8:ee:f0:51:df:e0:07:19:10:1a:2b:
a8:7f:69:a8:f0:03:47:c5:8f:db:da:fb:20:87:d5:7c:7e:9a:
11:8f:49:de:3c:39:6d:26:d2:79:d0:20:30:2f:54:55:f0:30:
88:8c:51:a5:38:0b:1b:b0:1d:f8:6f:64:05:d3:14:92:b3:57:
fc:76:27:7d:cd:f0:4e:fa:14:b8:a4:43:93:86:f3:7c:07:db:
6e:88:40:26:dc:98:bd:21:9f:cc:e9:68:9a:32:94:53:9b:10:
d7:7f:82:07:f2:68:a8:57:82:fc:8d:c0:f6:27:b3:2f:7e:26:
67:1b:af:b6:43:41:b5:be:aa:7a:4e:c4:38:aa:66:22:05:43:
52:26:bc:e1:7e:41:d4:f2:f1:8b:69:c4:f7:2f:e4:9b:e9:7a:
1f:e9:46:9b:bf:f4:f8:bc:9b:f2:a4:ce:5d:ae:9f:80:f8:29:
0b:73:09:d2:80:b6:2b:41:dd:ef:3d:7d:65:dc:8d:24:cf:9f:
43:78:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:20 2025 by rpki-client