Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: z+Uhb212it/nkP8LeubtWszaXm3w0CFs+VhTKVi++Hs=
Subject key identifier: D6:F3:62:56:EC:DF:FB:61:44:CB:EB:CE:01:6D:81:A6:F4:81:59:9A
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 0198D4E06201E16E309821CB10C0F16428D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: __KLjvjgMO1LuKrx6zZXZJBcRtk.roa (hash: kZSjdOtgx956Q9WcOxsnl5QBMbkPJAPdg2gED1ZbQy4=)
2: xmOvbRNpbfTNvGRi0NGmoChwF8k.roa (hash: 7oU4y3FJaTZ6zlZMUwxbLqzJR9lqEVzJSwfHVW5xI4s=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: wkj1DPxk6B+frt7fDF0B1f/xvagUFbK0NFP7/ASvQ9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:62:01:e1:6e:30:98:21:cb:10:c0:f1:64:28:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=d6f36256ecdffb6144cbebce016d81a6f481599a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:16:23:0b:71:a0:1b:de:de:ce:e3:3f:50:
68:17:db:78:c6:2a:1a:ef:72:49:31:39:c4:0e:91:
c9:9a:8f:bf:9f:ff:6e:a3:3f:6c:b0:f7:c1:6e:05:
41:81:c5:af:71:39:7f:64:5c:06:cf:a5:6f:9d:a8:
f0:80:b0:e4:09:12:c3:c5:d4:b4:e9:ab:82:2a:71:
3c:fc:7c:7c:e6:98:a7:3d:a8:2f:e5:85:2b:a3:f7:
1b:df:76:7f:4e:f5:e8:18:e5:d5:90:a1:ae:47:85:
f7:e7:90:05:d3:d7:b1:b9:b8:b8:01:6b:3d:29:fc:
57:d2:2e:76:66:78:15:76:a1:e0:b4:94:66:b0:f8:
59:7c:51:ca:db:f0:bb:a9:f1:0d:74:d2:c9:b6:14:
81:f1:19:f5:78:0c:76:16:85:3e:88:75:4c:e8:cc:
40:b5:1c:fa:ae:48:70:a6:fc:59:13:16:4d:67:92:
44:44:e5:6c:07:c0:00:1b:8b:15:f8:f9:ec:67:df:
d2:2c:69:79:ec:15:00:00:88:4e:dc:28:e3:35:36:
fc:f4:bf:c0:0f:ec:d7:73:91:96:5f:ff:b9:e2:cb:
66:21:6d:dc:7f:93:24:21:70:7c:09:36:a6:68:74:
99:8f:f8:c7:ed:43:00:65:b2:ba:1a:eb:cb:bb:e9:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:62:56:EC:DF:FB:61:44:CB:EB:CE:01:6D:81:A6:F4:81:59:9A
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ee:cc:de:dc:60:ee:42:da:51:13:51:8d:4d:aa:27:c5:ea:
4d:2a:7d:e3:b9:90:e8:d9:b3:be:8c:95:59:6c:46:8d:69:d9:
63:4e:b8:3e:ab:43:b2:7a:82:e9:70:5e:23:e2:68:7a:c9:9f:
fe:cc:2c:5d:00:0f:b2:a2:af:4d:ee:6b:95:16:4d:09:a1:d3:
43:55:aa:db:26:64:01:b3:c5:65:c7:fc:b8:c3:24:f1:d9:d2:
7e:2d:ac:f2:6b:e7:09:93:e0:7a:a5:c2:46:66:1c:d5:83:d2:
bc:b4:29:51:e5:9b:2e:cd:07:74:45:6b:d7:78:03:d5:5e:54:
a4:47:5f:93:f5:41:73:14:a1:a4:8e:e7:df:f1:c9:82:d7:cc:
d2:c6:dc:56:1a:75:be:b5:19:4a:d9:57:72:b1:1d:72:d0:1f:
06:c5:20:f9:b9:7d:24:9d:6d:a2:e0:d2:e4:2c:85:9b:43:87:
b5:e0:98:03:a0:44:6a:7c:b6:31:ea:3d:e0:43:b9:ca:e0:55:
84:7e:11:ab:f7:d3:2e:79:9f:8d:03:86:6c:ba:5b:73:86:aa:
c5:fc:c4:b8:c3:64:66:5f:1c:be:c6:78:24:64:08:09:19:1f:
41:59:33:5a:cb:07:bc:83:02:58:42:d9:3c:84:0b:28:eb:a7:
69:82:71:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:32 2025 by rpki-client