Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
File: YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json)
Hash identifier: 5ud5X8tfALdjY38e0X/iT4S81oBw5bsqkSSFMNvsIic=
Subject key identifier: 60:DB:DE:FC:77:2F:8B:81:9E:EB:F5:FD:37:E9:2D:3B:3C:52:BF:66
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial: 0198D6CCECF363ED2D336C7AF38F15886DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 12:00:10 +0000
Manifest this update: Sat 23 Aug 2025 12:00:10 +0000
Manifest next update: Sun 24 Aug 2025 12:00:10 +0000
Files and hashes: 1: Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa (hash: q1LYdMsfXSEFkYw+v/2PtBLKm0CXtMVR1H0DEe1ErnY=)
2: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: BeL9ak96Koy7+6V95LrjYHluR7VmzlGy4+MNG8ReGwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:ec:f3:63:ed:2d:33:6c:7a:f3:8f:15:88:6d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
Validity
Not Before: Aug 23 12:00:10 2025 GMT
Not After : Aug 24 12:00:10 2025 GMT
Subject: CN=60dbdefc772f8b819eebf5fd37e92d3b3c52bf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:35:f5:ba:10:77:09:0d:b7:a7:92:62:b6:
2d:46:0d:0d:3a:4d:d7:7e:28:f6:1d:69:cc:82:20:
ba:7b:41:f2:71:cb:93:8a:36:1f:a3:5f:db:9e:18:
f8:24:24:78:4d:96:f0:62:65:c5:1d:05:f3:9b:bc:
75:18:19:9c:93:4e:d1:9e:e5:6e:9c:f8:7e:94:49:
36:3e:21:aa:ac:2f:03:89:96:79:1c:76:4c:ed:c7:
c9:67:6b:07:8b:0e:d9:c4:47:ae:8b:5c:59:6a:cc:
94:ba:46:5b:dc:c4:b4:3f:3a:7e:1f:a4:06:28:d2:
c8:19:e9:9a:ea:07:bb:26:8b:d2:60:fc:ff:ec:00:
43:73:92:47:bb:18:c3:8e:b8:16:c5:0b:f4:44:9b:
16:60:66:fd:f8:d7:41:fe:fb:e7:73:db:bb:3d:cd:
d7:76:cc:73:15:a0:30:36:67:b2:6c:56:4c:a4:38:
dd:0d:87:73:ab:9e:d6:4d:bc:9e:56:59:b9:9d:45:
9b:8c:60:54:88:3b:bd:20:e9:fb:83:83:3b:c6:38:
74:91:82:7a:48:0c:5a:3b:e5:e3:97:6a:c5:c7:9f:
23:3f:77:d0:5a:4c:88:a5:b8:b3:e8:82:61:a0:93:
f5:59:b3:c0:e9:c2:a3:b1:05:66:25:e7:23:4d:6f:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DB:DE:FC:77:2F:8B:81:9E:EB:F5:FD:37:E9:2D:3B:3C:52:BF:66
X509v3 Authority Key Identifier:
keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0c:a0:a4:50:38:99:cc:5f:40:67:03:a2:d8:d9:51:de:51:
ae:97:9b:54:a3:1b:29:91:1a:08:f4:4d:ea:a5:95:e8:a3:d2:
06:80:ff:19:c8:68:29:f9:c4:15:87:48:23:67:86:3f:6a:af:
b1:cf:16:65:68:02:95:5c:1e:7b:a8:6c:56:a1:e0:c4:52:b6:
6f:f5:19:d4:83:01:5f:87:55:40:56:3f:35:af:bb:c1:cb:99:
93:9d:0e:a6:27:91:46:ad:d5:85:4a:da:be:fd:b0:70:36:dc:
eb:9f:29:92:08:8d:58:da:79:e9:de:5f:db:4b:d7:f0:7c:34:
20:1b:b8:99:16:d1:64:14:01:24:ce:e6:34:2d:25:43:f1:41:
c7:b3:8b:42:f4:35:13:db:a4:4c:e4:21:a4:94:e4:e8:54:c3:
ff:b5:fb:48:e3:c4:23:a1:17:1e:9e:38:21:bc:60:0a:81:c0:
1d:a8:f1:a0:84:55:b9:47:f6:c7:50:33:f8:5b:17:b8:f4:79:
27:ed:51:fe:2d:a2:54:a1:cf:f0:9b:25:b8:d7:61:79:d8:94:
90:77:68:8d:fb:41:60:d4:79:67:21:dc:fa:54:d2:b6:9b:59:
92:45:2d:4c:4d:32:fd:83:bf:f2:0b:14:01:be:f9:a3:57:f1:
6d:60:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:11 2025 by rpki-client