Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: Y9/H0ww1NVY3XelYy1AIc6O0AmOgkrrZCRzE58GsvMA=
Subject key identifier: AB:1E:CB:06:F4:76:B5:92:14:B8:DC:94:6F:8C:C0:29:B5:E4:BE:51
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 0198D47333B86ECCCFB58837C7E78B97110D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:56 +0000
Manifest this update: Sat 23 Aug 2025 01:02:56 +0000
Manifest next update: Sun 24 Aug 2025 01:02:56 +0000
Files and hashes: 1: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (hash: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: jtzQYj3Ac4OkRnOfuuqEoq0GY+AHb1INmQdI+dFCPrM=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:33:b8:6e:cc:cf:b5:88:37:c7:e7:8b:97:11:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Aug 23 01:02:56 2025 GMT
Not After : Aug 24 01:02:56 2025 GMT
Subject: CN=ab1ecb06f476b59214b8dc946f8cc029b5e4be51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:21:9e:61:9f:7e:5f:d4:dc:38:7c:dc:17:
03:75:7d:08:8f:98:87:27:cd:0b:23:53:71:3d:86:
41:00:0f:ac:ce:49:b1:eb:15:75:58:30:ed:aa:6d:
3d:3b:bd:11:8f:ae:49:ba:9c:a3:c7:22:97:ee:e7:
a2:14:78:04:17:dd:66:9c:8d:3a:f6:43:bd:b2:f8:
8e:83:d9:29:0e:0d:d9:fc:81:ad:ee:b0:ee:f2:d0:
a3:99:45:2c:e2:0c:11:2d:70:1c:a6:d5:ad:bc:8d:
06:ab:16:62:a6:86:a7:4e:06:02:33:ce:07:87:71:
29:f9:3a:aa:80:3b:7f:f1:30:b2:a0:8b:27:26:68:
41:23:04:69:73:71:a0:a4:9c:c0:f4:57:45:9c:2b:
11:8f:dd:48:de:93:8b:50:32:0e:9b:7d:e2:13:3e:
17:ae:dd:9c:46:b3:38:71:36:bd:c2:7e:e0:81:c7:
e5:76:7c:16:80:0a:da:4f:60:15:e2:2d:79:f7:f0:
16:dd:51:5b:3d:bd:b6:41:b4:ad:58:a6:3a:22:32:
a3:2e:c1:d5:81:2b:90:f0:72:e0:2d:a9:79:48:4e:
91:d5:22:fc:b7:a2:09:ff:d6:b6:2d:f7:42:92:6d:
9e:4a:98:8c:8f:31:7c:36:08:d3:c2:e9:2a:67:b4:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:CB:06:F4:76:B5:92:14:B8:DC:94:6F:8C:C0:29:B5:E4:BE:51
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:14:42:fc:28:e2:7d:71:48:84:02:cf:09:00:36:15:b8:76:
ea:46:05:09:a1:77:79:57:d1:05:95:06:d3:a3:34:9c:ea:98:
d2:a1:8f:2c:3e:0a:61:96:4d:17:f4:1a:55:48:c0:cb:df:f7:
66:6d:ba:03:67:59:f0:ad:2b:61:b7:64:e0:f4:17:b6:dd:94:
5d:70:51:ea:60:af:f8:95:1c:8f:0a:fb:cb:73:a2:75:9e:3e:
e1:08:0d:69:bf:ee:d1:a4:aa:da:c9:91:6e:12:22:e9:cb:fa:
71:77:87:1d:7a:8d:b1:cb:2a:51:1e:c2:e2:ce:7d:56:4f:62:
6f:46:fa:29:0d:c5:9b:32:45:1f:70:40:5c:ff:36:80:c3:8f:
0e:05:8b:34:5f:a1:26:62:56:db:cf:fc:bd:f9:4d:87:01:74:
85:17:48:19:73:6a:34:4e:45:fd:cd:dc:0c:2f:26:4b:b9:07:
7d:31:f2:05:00:13:2f:03:1d:c4:12:ff:62:82:76:bd:e2:d2:
43:24:84:52:49:df:89:2f:d5:36:30:9b:f7:42:07:29:84:43:
73:8b:fb:9c:fd:c9:2f:a1:9b:e1:ed:13:65:65:16:12:f9:60:
d5:52:34:ad:71:ba:9b:31:a0:42:d2:91:ac:93:86:ec:be:15:
88:4b:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:25 2025 by rpki-client