Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: d8T9VjRijSL0p5vWeLA14S+HhtwW+qECvwAd3DWbHPc=
Subject key identifier: 1F:F2:AE:90:A2:73:16:85:BE:48:C3:CA:3B:75:1C:CA:37:11:AC:4F
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 0198D47304EEBB7F943F9EC92F9D8780C24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 01:02:44 +0000
Manifest this update: Sat 23 Aug 2025 01:02:44 +0000
Manifest next update: Sun 24 Aug 2025 01:02:44 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: Rx6ZSx9XE7xQVqWIfBajGHZJsAo+nmB9PhZ4OnLMqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:04:ee:bb:7f:94:3f:9e:c9:2f:9d:87:80:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Aug 23 01:02:44 2025 GMT
Not After : Aug 24 01:02:44 2025 GMT
Subject: CN=1ff2ae90a2731685be48c3ca3b751cca3711ac4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:17:3a:5d:87:4b:e6:e1:69:a9:4d:78:2e:
4c:b7:2a:28:bd:09:de:84:6d:c4:58:3b:51:1b:64:
b5:4c:7d:be:c1:00:ba:b6:56:84:09:10:45:bd:22:
bd:96:78:83:32:c7:7d:80:ef:ac:31:da:6e:3e:0b:
84:11:0c:e5:05:2d:9e:dc:04:5b:1b:1c:a1:2b:76:
0c:8b:e5:07:30:d2:64:12:ad:f5:af:91:79:5a:a7:
88:4b:31:c8:87:03:fe:ed:e2:22:19:8a:79:26:8f:
39:91:b9:df:72:bb:39:3a:7f:51:6e:3a:bc:42:2f:
ca:b2:be:8f:06:56:76:c9:30:cb:17:d9:db:b5:64:
d9:b6:de:ca:36:f3:5c:be:36:f6:54:41:d8:0c:5d:
08:65:e4:69:c2:62:6c:b0:d3:07:0b:e3:9e:a1:3e:
4c:70:da:5f:f7:37:8b:cd:39:fa:6f:e0:5d:4a:fb:
c8:6d:d1:01:2d:a4:20:2e:02:0c:3c:3a:c7:3f:3e:
41:a9:7a:20:75:5c:7a:91:86:96:78:5a:f8:e4:5b:
41:fe:9a:f9:12:cb:7a:88:78:15:67:43:d2:b7:c4:
01:48:d2:80:70:e5:ec:3a:26:7a:eb:68:c9:67:b0:
93:c0:5b:a9:ed:3d:3a:a1:d3:f6:55:8a:10:c6:62:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F2:AE:90:A2:73:16:85:BE:48:C3:CA:3B:75:1C:CA:37:11:AC:4F
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c9:9a:c1:f6:c9:23:ce:03:1c:f4:8c:e2:28:ae:17:fa:da:
94:10:bf:ac:1a:94:5d:24:d6:08:24:52:ed:90:fc:45:16:6c:
cf:7a:1f:d5:2a:e4:d4:7d:cb:b3:0d:0e:d1:80:97:c4:05:80:
98:f5:a8:de:4d:62:1d:c6:d3:75:0e:c6:62:4d:1f:9e:e0:45:
8d:b9:dc:46:1d:b7:6a:c6:d7:10:aa:6b:7b:f3:cb:e0:c2:b6:
fc:6a:75:c1:86:c6:a6:44:55:08:cc:4e:c5:bb:aa:84:6c:c4:
f2:3e:be:2c:d4:78:34:36:28:dd:77:21:13:ca:d6:9e:d4:74:
16:a7:e1:66:6e:ad:c8:da:c1:d1:d3:5f:25:5f:30:c4:0d:63:
3c:12:87:09:5e:47:fb:5f:04:9f:95:90:5c:cb:89:73:b8:fc:
bd:94:12:7c:d4:d7:3c:9a:ba:0b:2c:d8:39:c5:35:be:d5:db:
1c:e8:38:c8:6a:51:4b:bb:e7:4e:da:24:fa:c8:9f:fb:38:1d:
52:36:de:87:0d:5e:51:83:2c:50:34:37:20:11:f9:9e:92:6f:
c6:84:bd:ee:16:e9:ca:14:d1:69:b5:e7:a2:b8:34:82:05:94:
d3:1c:19:be:2d:97:f9:c5:24:4c:e5:54:e8:de:3d:84:4d:eb:
b5:86:b4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:08 2025 by rpki-client