Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
File: yXKq7Icz1F96AANRAYC0ri1Lvo4.mft (raw, json)
Hash identifier: kNhzE9l+8Tit2yekAVvVJvRGkev0UebqBFWP44luNQA=
Subject key identifier: 66:75:11:1D:C7:55:29:F0:B4:96:F8:51:D7:9D:3F:FA:0C:E0:55:96
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Certificate issuer: /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial: 0198D6984DD2F47388344865A47008542A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:42 +0000
Manifest this update: Sat 23 Aug 2025 11:02:42 +0000
Manifest next update: Sun 24 Aug 2025 11:02:42 +0000
Files and hashes: 1: iEYRoHL_x--Q-PC_QmRkLatna0w.roa (hash: 5s1E+tOqSuT9Il26pYgrASE0LBQS+wYadwRdpb6ASa8=)
2: yXKq7Icz1F96AANRAYC0ri1Lvo4.crl (hash: 6LypwdkmbKO3Ydb3JHq86TlG2pFU3YpRY8uqwgIkwBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:4d:d2:f4:73:88:34:48:65:a4:70:08:54:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Validity
Not Before: Aug 23 11:02:42 2025 GMT
Not After : Aug 24 11:02:42 2025 GMT
Subject: CN=6675111dc75529f0b496f851d79d3ffa0ce05596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:f1:71:52:1b:05:d3:51:f7:e7:a3:59:c1:
f6:66:82:38:a3:5e:06:64:7d:59:c7:11:3b:ac:bd:
e6:1f:f8:71:ba:3f:a1:3c:06:06:cf:21:15:56:c5:
6e:3c:23:1d:d6:af:f7:b2:a4:a4:e0:c6:07:1a:e6:
4b:43:d7:e5:c5:b1:90:86:b0:bf:ba:91:c2:f5:e4:
43:9e:51:a9:80:fb:43:3e:a1:d8:d0:fb:13:e4:49:
35:da:8d:35:a1:22:2b:fa:fc:6b:be:39:05:2f:6a:
16:a1:d4:4d:2e:b9:51:34:7e:94:43:fd:b1:6b:9a:
9c:2b:4a:54:fb:b8:3a:e7:b1:24:0d:2a:cb:b3:c8:
65:23:93:cd:4e:e2:57:db:a6:60:b6:cb:c3:78:c3:
f5:9d:31:5e:2d:32:0d:f2:dc:3a:a3:39:a6:e0:a1:
af:e8:9d:26:8b:00:0b:ef:e2:9c:a3:c7:b4:9a:15:
19:6a:50:5c:0a:bf:06:fe:04:8b:f3:b0:97:b9:b9:
8d:af:cf:ac:0b:49:cf:df:c9:12:bf:cc:7b:f2:9c:
f8:00:4d:8e:a2:ea:fe:25:89:94:39:c5:93:06:25:
7c:1e:86:19:8b:e7:52:00:a1:8d:ae:0e:a4:17:b4:
d9:4b:14:c8:15:ca:a2:5b:80:2b:ac:e2:77:1b:29:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:75:11:1D:C7:55:29:F0:B4:96:F8:51:D7:9D:3F:FA:0C:E0:55:96
X509v3 Authority Key Identifier:
keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ab:bd:aa:96:c6:ea:10:02:ce:bb:fa:3b:d2:3f:52:91:34:
62:4e:12:d5:9b:53:a4:cd:83:83:bb:03:94:37:fe:e9:b7:93:
9d:6b:72:3e:ed:2a:25:b9:88:2f:0d:9e:7a:75:5c:9c:f6:f6:
c7:14:d1:e8:74:32:0c:f6:f6:86:96:36:2d:88:ff:2a:32:0d:
80:1b:f3:86:16:49:ab:74:8e:1c:af:e8:ac:3e:06:ef:29:fe:
77:68:09:90:0c:84:b5:a3:c5:30:b0:16:7a:80:38:6f:c8:a8:
10:6c:45:47:92:f3:d5:28:f1:51:06:fb:40:84:1b:10:12:5d:
18:56:0d:eb:16:ee:e1:97:84:76:dd:b1:5e:f0:5e:86:ff:9a:
13:51:a6:6d:c4:de:13:65:bd:5e:e3:3c:d2:a0:8d:e4:ba:e2:
06:a5:3e:ac:b6:d2:d2:1b:8c:14:32:f8:f3:d0:76:2e:bb:4c:
5d:73:e9:b3:b7:3e:00:d5:65:3a:e3:8f:75:78:b7:6c:6d:f0:
b1:d0:50:76:db:28:a1:c0:2b:b9:00:a5:48:a8:1e:43:85:4a:
f3:9e:6b:c3:b4:f1:a9:58:be:61:87:f5:09:07:dd:29:82:fd:
9f:96:4b:a5:7b:93:24:57:8a:2e:6c:9e:0b:8f:27:cb:56:87:
3e:6c:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:25 2025 by rpki-client