Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: 8ycTaG6TroL3WBuE5cvjxb4GBIMWnQbTLWSXG4FJJXo=
Subject key identifier: 89:B6:BE:16:C2:51:E1:82:33:21:1B:1D:72:D6:99:08:0F:7F:CE:35
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 0198D4732673C5D628487B74E40B06E53766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:52 +0000
Manifest this update: Sat 23 Aug 2025 01:02:52 +0000
Manifest next update: Sun 24 Aug 2025 01:02:52 +0000
Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: BdSgNd/y0Wj5Pjl6u2YnrDjfdHyBeSGkXuy3swbUq8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:26:73:c5:d6:28:48:7b:74:e4:0b:06:e5:37:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Aug 23 01:02:52 2025 GMT
Not After : Aug 24 01:02:52 2025 GMT
Subject: CN=89b6be16c251e18233211b1d72d699080f7fce35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:94:00:b8:96:31:91:c4:d2:8a:11:d2:01:
e3:6a:ef:84:c6:d9:4e:36:26:4f:cc:41:8d:c4:8c:
68:cf:61:70:ee:eb:30:f6:9c:66:5a:77:35:65:82:
c6:31:b4:3f:b5:48:73:0d:92:e6:f1:69:e3:57:31:
ef:4e:e1:fe:33:e6:00:6f:45:4b:52:13:af:b8:44:
24:d4:70:3a:20:85:09:9d:7e:1a:83:b0:30:a8:10:
c2:b0:a6:70:fd:16:ee:d2:66:50:43:ba:6f:9b:3b:
4b:29:65:0d:be:c0:f3:20:31:84:10:d6:5c:ee:eb:
c1:b8:79:b9:1d:59:b3:7b:61:38:c4:4f:74:f4:ab:
7e:e2:20:7f:77:91:d8:4e:18:87:86:65:0e:6e:4e:
48:65:35:c8:fa:cf:ec:7c:69:a8:81:fe:ab:40:b0:
e5:5f:ee:df:76:db:a4:e0:18:d1:e3:d1:93:b9:a9:
dc:e8:79:a8:5d:73:cc:6f:ec:72:87:8b:af:d6:2a:
e0:8a:1b:ce:4f:58:f8:0f:ad:05:7f:52:43:58:e1:
d5:01:88:f3:67:60:5b:d1:a6:9f:4f:cb:d5:0b:ec:
e3:0c:70:72:cc:22:72:37:0d:6b:bf:f0:ea:b2:38:
75:ec:eb:9f:fc:fd:ae:d0:22:6a:d8:ac:d6:1f:08:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B6:BE:16:C2:51:E1:82:33:21:1B:1D:72:D6:99:08:0F:7F:CE:35
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c0:01:60:eb:55:3f:75:c9:88:57:04:ea:e9:c9:6b:c2:e8:
09:6f:35:df:fc:29:98:3d:a2:5d:d1:49:eb:6f:9d:ac:15:9e:
92:fc:6c:b8:49:dc:90:27:0d:5b:83:07:4e:df:82:ca:b1:75:
c8:24:1e:a0:18:58:79:4b:fc:2b:ba:23:99:fe:5b:8c:b7:6d:
d0:41:19:78:b8:5c:0c:11:e5:b0:56:b6:ad:03:75:3d:97:8e:
ae:05:b3:7d:66:4c:e5:f0:86:6d:87:ac:0e:bc:aa:b8:3f:3a:
be:a2:5f:de:1e:cc:10:83:7d:0d:8d:55:81:67:00:7b:31:dd:
61:af:31:70:64:22:2a:1b:5b:2c:43:49:e3:05:d1:27:e6:7f:
9f:ce:b0:98:b2:e0:58:51:0f:5d:42:45:5b:a5:4a:4b:1d:65:
c1:67:48:9f:0e:aa:f9:e6:52:67:19:51:a4:1e:99:d7:6e:e6:
66:38:f0:01:e5:c4:48:3e:89:66:1c:70:22:90:76:c3:80:63:
ff:dd:45:41:58:bc:c8:47:13:54:b8:74:1a:5f:36:06:89:24:
8b:5e:90:6d:b7:5f:55:7f:ed:1a:97:81:b6:35:ed:a5:9e:5c:
61:89:ee:fe:02:fc:72:ac:b9:f4:65:49:0f:f4:7a:c2:54:da:
97:b9:c7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:02 2025 by rpki-client