Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: 9Sk6TmsrpF1X/mV+6TsZOg2iRAjPXFqZOoFrOYgCqb0=
Subject key identifier: 07:B1:CE:76:F5:D4:6C:50:BF:2E:FD:E1:ED:11:08:CA:79:EC:D3:8C
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 0198D5BBCD3EB00312965DF170919C91E77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=)
2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: RE7QegLy2JrxiOevIZK3PYHRC0fBGFI8zDr3lD+O1H8=)
3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cd:3e:b0:03:12:96:5d:f1:70:91:9c:91:e7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=07b1ce76f5d46c50bf2efde1ed1108ca79ecd38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:f5:f4:46:ef:91:4c:c9:c7:4a:0f:7f:8e:
f5:d9:d7:89:ee:d9:11:37:8d:55:d7:0c:df:7f:cd:
0d:a8:1a:95:b2:f3:0d:f2:10:39:80:4b:c4:09:a9:
17:5a:3a:47:92:fe:61:4f:41:0c:00:21:d2:cc:d0:
9b:67:16:6e:b2:f8:cd:4b:8b:3a:6b:bb:c8:a5:40:
b9:43:ae:7f:86:e2:fb:3f:96:fb:2f:98:f9:f4:8a:
45:f4:5b:77:e3:3c:1c:5f:23:fe:e1:9d:c2:88:e7:
99:80:e0:59:91:87:b1:30:57:8a:bb:31:63:d8:05:
e2:0c:2a:65:3d:57:5b:98:0b:ea:47:ed:1a:86:66:
67:15:55:6a:1f:ed:d0:66:cf:c3:d8:ca:51:d9:dc:
4f:32:30:9d:3c:65:ff:0e:c5:f3:77:b7:01:6d:11:
27:5c:0f:b3:8f:d4:08:2e:fa:ac:4b:a3:f1:03:8a:
b8:7e:1f:cc:05:ee:25:36:15:61:a9:cb:93:18:a4:
b2:4f:53:78:0d:36:18:17:88:b8:3a:56:69:48:ef:
a0:ef:0a:68:29:0c:01:69:72:73:32:f8:72:73:78:
86:ff:79:f4:65:78:7a:65:44:a1:a6:14:53:2b:8c:
77:8d:56:b7:83:1e:55:60:5c:53:8b:28:39:1e:08:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:CE:76:F5:D4:6C:50:BF:2E:FD:E1:ED:11:08:CA:79:EC:D3:8C
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8a:43:75:37:03:91:d3:3e:0c:80:d2:19:b6:fb:a2:56:f8:
f9:d3:0a:0e:85:d0:f6:e1:a3:ee:94:bc:79:74:2d:f7:c8:51:
05:01:5e:9f:3e:55:de:cb:27:a8:71:8d:0a:a1:bd:c9:2f:db:
c2:60:1a:4b:77:55:65:62:dd:ed:ef:cd:ee:12:e9:6f:fa:ef:
1a:0f:4b:99:4d:59:e2:40:25:05:a7:1b:14:c3:a2:5c:3d:6f:
29:d0:65:1b:eb:49:2e:f6:7c:d5:4f:6a:e2:1a:a0:9d:03:1c:
0e:b5:31:af:8e:3a:3a:3f:df:54:98:1d:16:6f:92:c1:15:0f:
26:d2:e4:b9:60:4e:34:7f:53:d2:9e:e3:72:f9:1a:48:c8:43:
d3:79:44:32:41:ab:bc:5e:97:78:2a:65:73:66:fb:11:c1:df:
27:7f:8e:93:85:bf:59:2e:36:81:50:a4:89:a8:4b:af:12:a7:
e8:64:00:3f:03:8c:9e:d5:7b:d5:19:c7:e8:d9:b7:0a:23:d8:
5b:c5:0b:7f:67:60:e2:ea:dc:04:80:70:34:82:6a:3d:e6:af:
9d:6c:13:c7:06:0e:24:fc:e3:6d:21:50:f9:23:d0:7e:d2:f6:
32:60:1f:01:f5:84:9f:a3:03:6c:c5:48:3f:ce:33:6d:55:cc:
e7:23:15:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:37 2025 by rpki-client