Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: L+XF0/P5Lz+xqO3S4uYz6F9sRR7ldrb07yRzhvTOU5g=
Subject key identifier: 9C:AC:58:DA:06:13:9A:94:59:47:F9:12:F0:88:9E:49:E6:CC:7E:44
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 0198D5BBA2B9BDEA1655900B0402F47B32CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: ha9bz1RTR3T+q6kqbTvOG6x7IR+g3/b3eqHw3Q77nY0=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a2:b9:bd:ea:16:55:90:0b:04:02:f4:7b:32:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=9cac58da06139a945947f912f0889e49e6cc7e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:b9:ed:ab:9a:c0:c8:87:f6:01:49:04:04:
6a:66:31:f2:2c:25:95:e2:d7:53:ac:74:41:fb:70:
a3:ac:a3:37:ce:0b:49:51:ef:c5:ba:50:8e:98:9e:
1e:55:4d:80:80:1a:3c:aa:3d:4e:b3:21:25:79:3c:
1b:bb:ca:c4:d1:53:a0:f5:d9:ba:09:82:f4:24:56:
87:79:94:45:3f:42:27:b9:53:36:1f:32:7f:5c:b2:
c3:13:66:67:fc:0d:19:24:8d:8f:6f:e7:95:95:fd:
f4:2e:82:3c:d3:0a:cc:cf:a6:89:8f:24:68:66:6e:
06:8e:4c:19:6d:77:82:48:e0:fb:0c:78:68:e9:17:
7e:e6:3f:6e:63:f1:04:f8:8f:dc:b7:00:18:41:ab:
12:9b:18:a2:9d:80:ae:ae:0d:ed:c1:17:71:e3:b5:
2d:8b:ba:10:99:18:97:f6:de:ae:4d:ea:5d:97:1f:
26:a9:90:1e:68:3f:a8:a1:f1:37:cb:09:de:34:04:
41:cb:6f:6e:24:af:ab:9f:3e:f2:40:d0:46:16:ca:
fb:0b:f9:ca:59:18:df:59:eb:f8:48:76:22:57:d4:
ba:b7:ba:82:71:e1:60:f6:80:a5:d2:65:01:e3:64:
6e:d7:8b:b9:11:a8:8a:af:d6:f0:30:a7:d1:2c:2c:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:58:DA:06:13:9A:94:59:47:F9:12:F0:88:9E:49:E6:CC:7E:44
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:40:65:f5:76:13:e8:b3:c5:4b:26:1f:e2:3d:ec:d6:38:64:
b5:f4:d7:d5:89:de:3c:63:bc:ff:9f:fb:cd:43:10:78:07:43:
77:95:e9:b7:90:9f:1f:e0:f5:98:25:ba:f0:b4:fa:cb:75:5d:
56:8c:ad:cb:ba:0f:6d:06:43:c7:55:0e:b7:36:7b:3a:a9:48:
c9:b0:d7:d1:18:91:fd:92:e9:71:ff:b5:b0:d7:ac:11:8a:eb:
6f:40:2d:5e:4f:3d:d6:24:22:a6:7e:6e:45:cf:7c:64:ac:fa:
83:d2:c8:b3:91:93:42:fa:ec:19:e2:6c:3a:1d:68:62:b8:a1:
98:33:c7:8e:8f:93:43:c7:29:2c:ea:70:5b:8b:9e:65:cd:df:
70:6d:4d:1e:10:11:2f:1f:ab:15:81:30:20:fd:af:e2:b8:4f:
85:fc:db:5a:93:2d:c0:03:4e:85:dc:fd:2d:f7:91:1c:7a:ad:
54:47:90:cc:11:63:b2:3c:46:2a:30:b7:56:ec:5e:92:21:ca:
aa:d5:b9:47:4e:21:f0:90:27:b6:3f:3f:88:14:75:ea:e1:55:
40:1b:1b:87:b5:99:2b:18:f3:2e:cd:83:d3:a3:a4:ea:10:a7:
37:d5:96:48:40:5a:0b:be:76:aa:15:88:6b:58:58:53:6a:fb:
1f:6b:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:28 2025 by rpki-client