Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: UpCj8Luu8HRM9Gk2WkXQ9yKG/w9tcEykZkYHVqN1E98=
Subject key identifier: FA:AF:FE:93:FF:9C:C2:47:01:45:88:F8:B7:34:86:E8:08:56:09:07
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 0198D54DE5C2E151A572BD227C0BB7EA3CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: HnblzgjRhv7ohFCku2dgX5Jr7vw.roa (hash: o9K0gGCxUA0R4sGgN9lj9M6IzHoNtSXBjdq46DJlaa4=)
2: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (hash: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: DZ3GEn2c9h0ze0u8jMaTQumi3dxzmivGs0Bu4edyzPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e5:c2:e1:51:a5:72:bd:22:7c:0b:b7:ea:3c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=faaffe93ff9cc247014588f8b73486e808560907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:45:aa:43:1c:13:31:bb:f6:76:9b:64:d3:
e1:ff:fa:e2:e8:b5:44:a2:50:4d:08:b4:15:63:a2:
ea:bf:de:d7:83:47:3b:ab:77:6b:c8:62:53:7b:fc:
7f:80:26:8b:9a:c6:d5:01:d6:b3:f7:0a:26:3c:19:
3c:86:74:66:af:b4:3e:31:60:0d:3b:a3:7b:b6:96:
d1:4e:d9:64:44:c6:e9:8d:10:34:9a:80:00:c7:f7:
cf:74:58:87:63:e4:51:ab:9d:3e:b2:ef:6f:80:b1:
92:b7:df:95:22:00:cb:00:3a:5a:89:c0:63:07:62:
f6:50:99:bc:d2:b9:06:5b:1b:28:f4:ef:bc:68:af:
03:79:eb:79:f5:38:6b:9b:b3:ce:6a:31:4c:42:75:
e5:77:88:d2:5c:9c:78:d7:01:07:53:db:29:61:1d:
31:c2:ef:48:a4:51:c6:fe:50:5c:cc:7e:2b:fa:cf:
11:13:63:f2:f7:15:20:ca:4d:06:4f:62:78:7d:56:
5a:37:89:33:7e:1b:77:b6:5c:05:76:4e:31:6e:a7:
f5:35:77:5b:7f:63:84:15:a2:c6:0a:f0:99:19:63:
7e:0d:45:b0:15:54:a7:1a:e2:5a:e0:7d:c5:35:c4:
88:5c:53:ed:1b:2e:61:d3:07:3f:f5:35:d0:bc:a3:
8a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AF:FE:93:FF:9C:C2:47:01:45:88:F8:B7:34:86:E8:08:56:09:07
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fc:17:f6:18:54:d9:1e:fd:17:af:51:13:13:f2:fe:fb:fc:
4e:b4:eb:72:e8:39:94:fd:04:cb:d4:79:ab:3a:de:23:9e:0d:
68:5b:38:97:de:41:db:71:f7:d7:0a:f1:cd:d5:30:bf:ab:c3:
f3:d1:02:9b:ae:e4:de:95:b3:19:e1:3e:e8:a3:71:0e:89:9d:
b5:b2:dd:83:68:82:c1:9a:25:57:7d:bb:10:d7:05:50:5f:e1:
16:4c:c2:9d:72:c3:6e:57:c9:a2:c0:4e:0c:f0:b2:c9:40:81:
66:85:0a:9e:98:ad:02:2f:09:2b:04:a6:a8:77:83:61:dd:19:
fd:06:59:a3:12:f5:f3:b3:e8:08:c3:79:00:64:11:99:77:5f:
34:42:49:a9:07:93:05:3b:4f:32:f6:aa:60:07:c4:7f:18:44:
81:7a:39:34:a4:5f:46:12:fa:87:76:bc:25:44:0e:e9:4c:d9:
2a:4c:8b:dd:40:45:0c:b5:b3:27:98:67:26:ff:1c:22:14:0c:
51:2c:c4:96:a9:75:89:96:8f:4d:96:e4:b4:a5:7f:af:c2:fe:
cd:25:a1:35:c2:25:a7:f3:6a:34:bf:f3:79:74:d1:e2:38:39:
0a:31:5c:81:cb:bc:5f:c8:99:90:e7:19:0c:a4:e4:fe:d3:0f:
a7:57:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:48 2025 by rpki-client