Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: Yglw8udl+YeKp8bdQfUelYZyokKq8wK5eE9506W4Jd4=
Subject key identifier: 51:57:FE:E6:76:8E:FC:26:53:8E:CD:66:BD:05:9A:E7:D0:2B:55:FF
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 0198D5157CFAE946C491234E189E73F325D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:11 +0000
Manifest this update: Sat 23 Aug 2025 04:00:11 +0000
Manifest next update: Sun 24 Aug 2025 04:00:11 +0000
Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: TMCIe8XkSV3XJ0osHV4GAC+HoDL/YNDKbW/UIzrfLjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7c:fa:e9:46:c4:91:23:4e:18:9e:73:f3:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Aug 23 04:00:11 2025 GMT
Not After : Aug 24 04:00:11 2025 GMT
Subject: CN=5157fee6768efc26538ecd66bd059ae7d02b55ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:74:b6:45:66:7a:13:a1:2c:3e:39:8b:b4:
2e:7c:60:39:54:16:a5:70:c7:80:d8:cb:9a:01:57:
10:38:83:d5:68:71:bf:50:7f:b1:e4:9c:69:af:ed:
00:1e:5e:90:67:5f:f8:fc:84:24:bc:e1:69:94:fb:
b6:b2:73:59:3e:2e:e9:c0:3f:35:19:a4:8b:be:0f:
77:c4:5a:fa:ca:01:ff:a4:aa:7e:55:97:9f:f1:a6:
c0:05:ec:77:a1:12:b7:44:b7:94:e2:cb:62:9f:64:
5c:51:1f:e3:1e:32:ae:8d:91:9c:aa:75:8a:82:08:
b3:b7:d4:10:01:3f:c6:74:48:16:95:bd:4a:fd:47:
44:db:de:7f:e0:61:18:ab:fb:2e:df:90:73:a8:6e:
33:71:c2:29:16:2c:92:3f:2d:93:1a:7d:eb:e7:9f:
50:15:bc:cf:5a:4a:89:93:0c:0e:65:15:42:6e:1d:
1b:23:40:c6:00:a9:96:96:4f:c8:e8:59:23:5e:33:
97:8e:99:c8:83:2f:8b:13:15:a8:34:2c:41:59:96:
8b:82:a8:46:c6:7d:73:37:aa:27:9f:8e:fc:f4:0b:
86:86:ef:34:f8:9c:73:04:d4:7b:23:a5:0d:80:21:
b2:10:d7:9f:12:9c:49:eb:9e:b8:03:67:a3:a0:47:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:57:FE:E6:76:8E:FC:26:53:8E:CD:66:BD:05:9A:E7:D0:2B:55:FF
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ac:a6:a7:d0:d5:e3:47:00:da:a8:46:1f:ca:9e:c7:80:46:
e0:22:52:09:89:ba:5a:62:0c:64:7b:67:13:26:89:53:4d:8e:
72:5c:e2:db:fc:99:44:d3:49:3f:d5:22:ef:22:67:f5:cb:8f:
c4:82:a4:fc:c1:83:0b:dc:c5:95:f0:94:bd:56:36:78:9a:18:
b7:ff:49:bc:81:5c:09:fb:ad:b6:4c:7a:51:51:d1:7b:23:9d:
12:80:df:00:c3:4b:7a:2d:b4:72:d2:fd:c1:86:4c:01:8e:ff:
dc:d9:e6:50:7d:c1:69:2a:bb:73:f9:54:59:ef:2d:20:56:9c:
2f:f6:59:a1:d7:7f:bb:ff:bd:cc:ee:12:af:22:1a:fc:3c:8f:
52:56:5e:94:91:a8:24:6c:a3:65:86:c0:a3:6e:7a:a5:c7:79:
e0:5a:64:bb:c2:76:0f:02:9c:fa:94:90:d5:d3:6c:11:d6:c4:
e6:77:cf:bd:ab:00:ee:32:66:2f:bf:3b:40:c4:12:6f:ab:3c:
93:5d:11:be:8d:3e:0c:9d:ac:79:e9:f2:1e:f9:cf:f6:78:9d:
50:36:a1:4c:95:00:b1:c8:0e:c8:ec:76:bd:80:7f:34:50:bf:
49:26:0a:6d:a3:56:72:3a:c6:2f:66:63:c6:86:db:f7:7f:bc:
f0:0d:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:45 2025 by rpki-client