Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier: aan7qsUNaN9iOi6+CA0veADI44/uRKwAl4xJyUBbpRg=
Subject key identifier: 93:81:66:E8:A9:9F:BA:57:20:33:13:7F:FC:95:0E:90:D3:5D:78:80
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 0198D660C85266C6E6238C11339C27A82935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number: 0253
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: 0pHcVGxKroxOni6LgFtqt0banSw.roa (hash: Q40CZpsU0+RiU4O4YQFtbp1L/7Yepswrm+UiOB95fSM=)
2: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: 9QR0btdeQdANm4lwOVoKpbfgMGUjn3qQDCbgmWj06YI=)
3: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (hash: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=)
4: 5O6iyLYqjxgK3EFjvB7TPec4vNc.roa (hash: +zN5xcfrGyrSvPX2aPdQntXT/Zvfyz7ULplVdMhrq7w=)
5: BnL626pcSJW84hvMFQ1G4Qrz04U.roa (hash: 3us+txzDTK3Uzjb5+hEvvCFMUnMHD1ygkmUal1BKvv4=)
6: DJsHawN4UfC7y3M-cvB8yQD8M34.roa (hash: 7erERMTFq4HfOI3TzB2K6MSVRmBE9HH5uCjfWAVLlJk=)
7: XcKo7ctmpUBqVfx0JPs9RsSZGCs.roa (hash: 1T8ZHVnMW4fbGLyFMTAkhaxOama9czmojEH2rCd/x6I=)
8: g31y-rKLvjosua_ERt6smuGZVHc.roa (hash: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=)
9: thQM3nYJ2iMAEyGEiwr2nwUUrgM.roa (hash: gexh5X3hJLfL9+D24IG2pZyXO9oAuE0CpLvpzwWH8kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c8:52:66:c6:e6:23:8c:11:33:9c:27:a8:29:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=938166e8a99fba572033137ffc950e90d35d7880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a0:4f:b2:7c:b5:ad:cc:80:d5:c6:5a:a6:ce:
71:45:da:e4:d5:07:cd:7e:78:52:5d:ed:2b:e5:61:
a1:f1:85:ad:97:75:58:a7:28:76:7f:a4:fc:e9:8b:
7d:21:d4:d4:1f:ff:97:d9:1e:0e:26:80:36:c9:c3:
04:41:76:7b:35:20:9e:50:b9:92:31:76:d6:5f:2a:
ef:94:5b:a9:f0:27:81:86:a4:3e:96:67:3e:8b:14:
f0:59:06:76:29:20:40:53:86:7d:98:bd:cb:09:2c:
86:c3:46:e6:95:81:21:43:d9:48:94:7a:dc:65:ab:
a9:96:f5:18:f8:52:89:4b:19:f7:f6:36:a0:62:b0:
a5:b6:11:73:c7:50:fb:66:75:e6:96:a3:c2:84:78:
f2:1b:45:bb:88:4f:27:2d:3b:e9:fe:7c:b5:22:eb:
77:04:28:4c:e6:b1:16:07:90:8c:2f:d2:27:a1:df:
a8:1f:f1:94:56:ac:12:c4:10:61:45:fb:9c:dc:f4:
3c:de:72:ab:2e:9a:40:84:8c:80:ff:30:9d:f8:54:
62:ab:22:ed:cb:79:1e:a5:d2:7a:74:26:b5:48:c7:
e9:2b:50:33:ba:0d:ef:e6:4f:ed:bc:76:79:e9:ff:
d5:46:b0:87:e2:de:3c:d5:9f:1e:b1:35:f7:4e:17:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:81:66:E8:A9:9F:BA:57:20:33:13:7F:FC:95:0E:90:D3:5D:78:80
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:bb:a1:7c:6c:a4:e8:7c:1e:12:b9:9d:2a:1c:31:18:c0:48:
21:00:70:e8:0d:a2:e1:fb:6d:49:7c:b2:5a:fb:1e:b1:41:81:
d0:56:81:36:94:ad:0d:f2:55:2e:3f:a0:6b:3a:08:4e:4b:40:
45:5c:e8:74:7b:f7:06:f7:e7:0e:72:68:49:67:50:43:7b:dd:
68:7e:82:86:b5:4e:2c:e7:cd:cf:e2:fd:07:fa:de:b2:5e:27:
00:bb:92:50:57:b4:0d:87:4b:70:21:99:e3:7b:1c:03:0d:fd:
23:e1:71:01:b9:32:09:56:5c:00:72:35:62:81:ee:8a:5d:06:
b8:56:5f:81:89:66:8c:2c:2f:0f:81:42:13:a1:1d:be:71:3e:
78:60:d1:70:c6:d6:5f:95:93:a2:e6:af:c6:32:a8:6f:41:89:
4e:82:7c:22:4c:ea:52:8d:2c:e2:14:86:ae:39:13:c2:7a:31:
0d:a7:f7:1c:d8:82:79:26:f6:6d:94:6b:b5:3b:14:bb:46:28:
13:b1:61:0a:7e:5e:e2:03:a3:fa:fb:7c:12:f2:0c:88:e9:1e:
b7:09:0d:a7:cd:8d:93:dc:31:db:17:f4:ef:3a:3f:47:56:a8:
68:c9:16:6e:60:27:7b:19:1f:8e:1f:17:19:8d:f2:f4:b8:ed:
45:9f:10:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:40 2025 by rpki-client