Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
File: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json)
Hash identifier: +Ln3tD906cvH1161HRmEOeoI7InsjTbSMOWCparU0eM=
Subject key identifier: B1:F9:A7:6C:31:BB:42:C9:DE:1E:12:16:4A:46:CF:60:9C:62:9D:FD
Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
Certificate issuer: /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Certificate serial: 0198D51623BE95035C824E5FA3BD781D0EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: O8Js1mgAF0iv_PSwJLDMH2LqzNs.roa (hash: uCecidRlrlebYe8zpAxIMGUV7GE/OrG+H65AT04t1PQ=)
2: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: Gk4RG8y9U03zSs3lfmV/oPFdWeW4UwrUu+n0zvRuSTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:23:be:95:03:5c:82:4e:5f:a3:bd:78:1d:0e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=b1f9a76c31bb42c9de1e12164a46cf609c629dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:60:38:7a:35:31:07:9d:db:f1:46:a5:7b:
ad:18:04:ae:c6:d6:59:ae:f7:71:99:59:82:07:08:
c8:fc:b0:2b:f1:42:c0:e4:c5:94:94:be:77:76:3a:
d6:68:cf:8a:71:ff:6b:33:2f:c8:0b:74:7c:17:57:
4c:0e:a8:82:4a:44:3d:8e:d8:a4:92:3a:45:71:70:
fd:67:b6:04:97:b3:f3:45:0f:d4:ea:57:1c:37:76:
74:a5:3d:bc:92:e5:d1:67:2a:28:fe:56:02:b6:a1:
a4:09:db:3b:af:b2:d1:f6:61:bc:88:77:fe:c1:1e:
de:87:05:97:23:34:3b:54:6d:00:c4:cb:3d:1d:f1:
86:e4:8f:9e:0e:19:46:7b:6e:9d:ac:e0:c5:49:5a:
e0:3e:7d:d6:32:94:0a:df:48:23:8f:8d:f4:2e:3c:
0d:12:b0:85:75:99:fb:f5:73:f1:ac:12:ff:7a:13:
e6:05:26:08:8b:78:19:c9:67:50:d2:eb:4e:08:26:
b9:b0:fb:11:e6:14:ff:83:50:42:0c:ef:43:64:c1:
b8:14:85:b5:8b:24:79:b7:a9:0a:af:55:14:39:4d:
ad:4e:ee:9a:35:00:8c:11:c6:e5:fe:df:77:38:05:
8a:8d:9b:a1:45:d2:92:4d:8d:ec:0b:d2:1b:27:20:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F9:A7:6C:31:BB:42:C9:DE:1E:12:16:4A:46:CF:60:9C:62:9D:FD
X509v3 Authority Key Identifier:
keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ca:82:33:9c:7f:f7:95:eb:eb:7e:2c:ba:c2:43:42:54:cf:
c1:95:fd:b9:5f:4e:e5:e6:ff:04:e4:7c:f3:0d:db:99:00:c7:
75:73:f1:f7:a1:93:c9:ce:bb:c7:07:b0:8d:3d:81:b9:48:1d:
8e:c0:6c:b7:c1:e1:c4:08:97:fc:06:d5:39:37:29:f0:3a:4d:
83:06:c7:e5:01:9d:da:f7:99:ea:51:57:d0:eb:d9:7d:76:11:
9d:9c:82:c0:73:0d:f1:38:bf:0f:0a:ca:f7:b8:b4:cb:c1:5d:
85:8f:8f:c9:02:9b:08:af:2c:17:63:0f:39:06:ab:cc:b0:a8:
87:07:73:5e:59:86:72:f8:e5:7e:d7:89:d5:5f:2f:43:b1:af:
ae:de:e2:04:18:6e:b6:4a:40:d8:68:10:db:1f:ed:a6:56:1f:
3b:f2:06:cb:70:39:27:e0:2c:3f:50:5c:46:51:12:ff:c9:3f:
ee:cb:ab:aa:26:c9:86:e0:b9:a6:89:b4:d5:40:df:fe:73:e1:
24:9d:85:9c:c5:a4:91:77:31:d9:4e:28:70:d5:d3:f0:4f:a9:
14:ae:cb:55:3e:e0:c4:d8:fc:bf:cb:ea:14:76:c7:ea:9b:87:
95:9a:6c:71:78:ec:44:8f:f9:3a:26:30:93:d7:36:d5:2c:fa:
18:4b:2d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:46 2025 by rpki-client