Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: +D0S5YjeIHI1DUQQf8qJOuylueBgMJJfkwIUbgVpnBQ=
Subject key identifier: CB:9B:E0:6F:37:BC:32:FD:5D:9C:9A:FD:13:1A:2A:F3:DB:AC:85:FF
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 0198D65FAA3F1247BD940C349156F67980BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:50 +0000
Manifest this update: Sat 23 Aug 2025 10:00:50 +0000
Manifest next update: Sun 24 Aug 2025 10:00:50 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: K4pRP6moZJRdjg9sH6v0yI+N5mq/O2utFvFtehh6K/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:aa:3f:12:47:bd:94:0c:34:91:56:f6:79:80:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Aug 23 10:00:50 2025 GMT
Not After : Aug 24 10:00:50 2025 GMT
Subject: CN=cb9be06f37bc32fd5d9c9afd131a2af3dbac85ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:4b:a7:ad:9c:66:b1:28:0a:2b:ad:df:4a:
ea:66:1e:b2:d4:19:b5:be:6c:ac:16:d2:fc:f8:84:
92:09:6f:f2:5e:37:e7:46:2b:d2:e0:3b:ce:d4:91:
da:89:06:0c:82:2c:84:a5:fd:0d:08:38:bd:47:ba:
d3:79:e0:32:e1:cd:01:15:0c:1a:e6:96:08:09:16:
30:c2:be:23:ae:ac:de:e4:ad:40:85:9a:d4:14:1e:
c0:b8:d8:ce:ad:d5:b1:54:0f:1c:30:e7:3f:5b:85:
ec:60:18:0e:1f:07:ae:7b:a0:50:cc:d1:59:d4:58:
d0:b7:15:17:06:86:75:2b:27:f7:dd:21:87:81:c7:
29:79:5b:c2:f7:b8:e3:33:77:c3:02:e2:9c:51:19:
39:b5:ef:bc:ec:e5:26:6c:ad:35:d1:67:f4:c1:f5:
6e:aa:72:5a:92:08:23:4f:6b:44:d5:31:72:40:b4:
56:ef:88:7b:70:19:b0:88:26:a3:57:7b:45:58:e7:
8e:9d:26:25:6d:f6:57:de:d0:22:42:6c:c2:75:64:
4a:9b:44:c7:84:eb:f0:8c:a0:ea:6a:e2:ac:ef:e3:
2d:ac:46:a9:e1:0b:b4:79:96:70:76:7c:c5:4c:f3:
7f:be:46:f7:81:bf:5e:4c:0d:2c:b8:8b:a4:91:d1:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:E0:6F:37:BC:32:FD:5D:9C:9A:FD:13:1A:2A:F3:DB:AC:85:FF
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:f5:c4:5f:0d:50:c3:ef:8a:54:4c:0d:3f:23:fe:7d:28:
69:09:0f:38:f2:ac:ca:ae:d8:9f:3c:05:c8:ba:0e:0a:28:c1:
d3:99:19:e1:71:97:63:4a:fa:8a:13:cd:70:fa:9e:d3:62:b6:
bd:78:3d:5a:01:f9:b2:80:ad:71:1d:df:f5:6c:8d:79:b6:38:
10:c8:e1:0f:cc:72:e7:ff:a2:1a:93:ba:46:37:52:2c:83:02:
39:2f:e9:62:9b:01:dc:5b:52:59:e4:72:54:6f:eb:c9:aa:58:
2e:20:6e:02:d5:01:fd:c0:7b:c1:5d:88:88:e4:dd:b4:ad:60:
9d:7c:5e:e4:53:ad:9d:7b:7f:4f:ac:6b:6a:ec:dc:3d:f0:68:
84:3c:65:1d:fd:da:3f:ad:80:40:34:c1:d2:08:e7:5b:22:da:
4c:6f:7e:18:09:c2:72:f4:52:6b:7c:5c:02:02:aa:92:dc:cc:
3d:97:92:d1:88:00:d1:64:2e:67:8b:b3:2e:48:d9:e8:da:b1:
94:05:a6:bf:5d:cb:19:d7:d0:21:8c:2e:35:48:b6:37:82:39:
82:2a:f7:d7:e8:0b:01:ae:ed:c8:75:7d:a0:6f:0c:19:13:5a:
cc:cc:48:04:e3:5c:fd:23:e6:e6:37:32:a4:a8:3b:98:35:b7:
e8:b5:22:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:46 2025 by rpki-client