Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: U/m5CXDcBQUQGX0wtgCm9ZzozH9MecpIaKrpk3f4K+4=
Subject key identifier: 39:4A:EE:BE:C3:08:D4:EB:74:33:FC:5F:40:F5:21:DF:EC:C0:83:2F
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 0198D9CEB20D2B5AF3310DAA0B5FD3424E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 164E
Signing time: Sun 24 Aug 2025 02:00:58 +0000
Manifest this update: Sun 24 Aug 2025 02:00:58 +0000
Manifest next update: Mon 25 Aug 2025 02:00:58 +0000
Files and hashes: 1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: z43KYmcWJHshF8oMzwxHKijFHD7SJkczSK41GQYuHVM=)
2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:ce:b2:0d:2b:5a:f3:31:0d:aa:0b:5f:d3:42:4e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Aug 24 02:00:58 2025 GMT
Not After : Aug 25 02:00:58 2025 GMT
Subject: CN=394aeebec308d4eb7433fc5f40f521dfecc0832f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:51:fd:b7:05:40:e6:0f:ea:5b:30:55:d3:
c3:25:04:e2:eb:e5:66:cd:a2:ab:83:ac:50:f9:28:
99:c2:01:e8:05:c2:ab:e2:05:bd:da:2c:c3:e1:76:
d7:3b:b7:36:e1:60:e1:1e:21:dd:a5:32:ae:91:82:
4c:c1:00:f8:b6:13:49:6d:30:f1:54:56:71:00:ba:
f9:c8:51:7b:e4:46:70:cd:60:bf:52:fc:40:66:e2:
13:d4:fc:39:f7:8a:49:01:68:31:91:8b:f6:0e:a5:
b4:e0:76:a5:9c:ec:3c:fc:d9:a5:20:ca:77:74:04:
f6:e2:c3:e5:09:19:06:b9:51:11:1d:5f:7e:c1:90:
cb:d7:57:38:db:83:ec:53:3b:e1:37:fb:ba:4c:e3:
ad:b5:3a:93:98:da:30:eb:9c:d9:25:36:5c:d4:e1:
ea:38:d1:ca:79:62:a6:f7:c9:34:bc:8e:43:8b:d7:
de:7f:6c:23:22:6d:cd:e2:31:4a:83:ab:d6:f1:67:
f9:f8:d7:dc:59:43:4b:b3:d6:3a:2b:d0:44:11:83:
b9:09:e9:6b:39:81:60:38:0b:57:c5:9b:1b:a1:80:
77:41:79:bb:15:71:4a:d5:9b:4d:59:0b:ea:47:31:
73:32:ec:78:48:e3:29:cc:f0:f5:80:7d:0b:99:f5:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4A:EE:BE:C3:08:D4:EB:74:33:FC:5F:40:F5:21:DF:EC:C0:83:2F
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9f:84:18:b3:3d:b5:eb:64:20:28:8b:ef:91:9d:0f:b7:19:
e0:22:4e:e8:08:51:64:12:6a:19:e5:40:2e:a0:71:33:6e:28:
48:6a:71:96:f9:9f:d7:a6:a2:1f:d6:e6:0c:1d:01:50:05:aa:
c1:ae:15:bf:c1:e6:9b:e8:61:4b:47:b5:62:6f:9b:ff:43:fc:
39:fe:d2:94:15:3f:fe:9b:83:96:56:fe:b5:0e:dc:8d:71:f5:
35:af:d0:0e:d6:fe:70:2d:7d:61:e3:48:aa:a6:69:55:b2:fc:
c4:2b:d3:27:b0:fe:ae:48:04:a2:e6:e9:db:90:a8:9e:b1:0c:
f0:a8:31:ab:50:c4:d3:df:0b:38:e9:e8:2d:91:bc:4d:cc:18:
b5:49:d9:f7:81:fe:1d:1d:87:3c:23:6e:1d:2b:e8:fe:b3:3c:
5d:31:7b:8e:36:34:89:81:f7:22:5a:9d:2d:42:9d:50:fe:a3:
40:e8:07:c0:6e:96:88:cc:5c:bf:d5:d2:bd:c6:d1:cc:ca:37:
2b:97:ce:9e:ff:74:38:13:98:d3:68:e1:e6:9b:03:e7:21:52:
96:91:17:0a:98:88:be:a7:df:65:5a:21:51:49:ca:c2:89:34:
f2:f2:9b:67:26:51:34:c7:07:da:12:1b:99:4a:7d:6a:71:27:
7c:53:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:03:08 2025 by rpki-client