Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: 0ednSVVhFY0PbxUS1yniV8ynX+cUPqTLxf7fHO38x4w=
Subject key identifier: AA:5E:8E:40:74:85:5A:CE:7A:44:80:B9:B7:17:0C:55:F2:57:9B:B2
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 0198D6CCF666A6A6C88E78B9F7A936D6B3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:13 +0000
Manifest this update: Sat 23 Aug 2025 12:00:13 +0000
Manifest next update: Sun 24 Aug 2025 12:00:13 +0000
Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: Nis69cKZ6pPSYjb1QaKRiJBrSp+KSdEuz9XgNiYw6xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f6:66:a6:a6:c8:8e:78:b9:f7:a9:36:d6:b3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Aug 23 12:00:13 2025 GMT
Not After : Aug 24 12:00:13 2025 GMT
Subject: CN=aa5e8e4074855ace7a4480b9b7170c55f2579bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:4a:e4:80:a5:1c:fe:d8:15:8f:2c:d9:0f:
cd:3f:09:aa:22:45:0b:af:ad:19:61:4e:ab:f5:45:
2b:44:ae:91:34:5d:21:a0:6e:16:76:ca:27:1e:cb:
51:69:56:82:03:0a:c4:4b:4e:45:d6:37:b6:78:3f:
3d:e2:4e:92:ea:d7:76:30:b4:ac:52:e5:bc:ad:e6:
8a:cf:99:a9:ef:d4:53:ec:28:3f:2b:11:97:30:51:
cd:7b:f3:e6:89:3a:88:a5:8e:b4:7f:36:85:18:2e:
02:31:74:37:96:d2:03:7a:10:6a:20:3c:9b:74:ff:
dd:3a:16:53:7c:f4:74:b5:43:73:e7:14:48:56:4b:
f1:b7:67:af:97:4d:fa:ce:53:4c:ea:7a:b5:1d:f7:
02:bf:98:7d:72:64:36:35:13:53:1a:86:bd:98:24:
2c:e6:fa:71:f6:c5:91:0c:db:1f:36:bc:83:0b:5b:
67:69:f6:18:d7:42:58:bc:4a:b6:35:14:c7:b8:b3:
35:cb:bf:10:19:e3:a4:e2:a6:d1:84:97:7f:b8:c3:
72:5e:fc:90:17:50:12:fc:55:fe:eb:01:9e:30:f6:
16:12:8b:c9:9d:ee:a6:10:bb:4c:97:05:4d:6a:2f:
31:c3:89:6d:f2:d9:87:fa:77:e4:b0:d6:35:66:60:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5E:8E:40:74:85:5A:CE:7A:44:80:B9:B7:17:0C:55:F2:57:9B:B2
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:25:a3:b9:be:86:53:ac:05:bf:e5:80:95:3a:f1:05:89:a1:
fc:91:bf:3f:dc:3b:17:65:d1:62:78:fd:0e:38:db:03:cc:18:
2e:e0:27:fe:a9:f4:c8:85:e6:46:93:b6:56:7b:73:ec:7c:5a:
44:db:b9:55:b7:f8:43:c9:1f:ec:eb:7c:1d:08:d8:49:f9:bc:
26:de:97:6c:31:d6:dc:a4:af:6d:13:f8:8f:50:cb:9c:b3:6e:
bb:85:e3:2c:ee:eb:46:14:c3:fb:3e:80:09:61:6c:37:67:48:
5a:1e:9b:29:5c:e7:ca:6d:90:7e:ac:a8:18:2e:23:12:45:be:
c0:8b:59:d4:79:f5:af:44:b5:7c:93:e6:21:59:fe:48:52:13:
81:1b:2c:3d:03:57:72:90:ec:72:30:62:4f:d7:6c:ec:3e:78:
bd:10:db:d2:37:5b:b3:94:36:53:21:29:70:95:1f:f0:a8:3f:
b7:ca:89:1e:e4:9f:34:4d:b6:75:04:17:4c:15:ae:25:63:b9:
f9:63:fc:27:95:ac:f8:2f:a6:2c:ef:7d:93:9c:dc:77:30:01:
6b:33:02:8f:53:9b:18:6d:c4:95:5f:f9:a0:65:c9:c9:a2:3f:
cd:df:79:a5:09:fd:8f:7b:f1:08:74:83:14:c2:88:89:58:83:
1b:e3:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:42 2025 by rpki-client