Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: 5bU5aBu4km5eJETpT7fvE16TljCOBb5AOBKwJl0MQns=
Subject key identifier: E1:6D:9F:6B:20:7D:73:A0:DC:B0:BE:2E:0D:F9:F1:F6:88:50:D1:EA
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 0198D5F129F01CFDBF9B5A726B4E8A69A669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:08 +0000
Manifest this update: Sat 23 Aug 2025 08:00:08 +0000
Manifest next update: Sun 24 Aug 2025 08:00:08 +0000
Files and hashes: 1: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (hash: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: soBkDDZb32ejagcogmQgPNQeo+LBBp/OCIH5zMV+gMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:29:f0:1c:fd:bf:9b:5a:72:6b:4e:8a:69:a6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Aug 23 08:00:08 2025 GMT
Not After : Aug 24 08:00:08 2025 GMT
Subject: CN=e16d9f6b207d73a0dcb0be2e0df9f1f68850d1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:53:6f:7b:6d:f8:ed:ed:4a:13:0d:2a:b9:
40:44:02:24:d8:d3:be:50:7e:a9:5c:a7:5c:89:7f:
5f:c4:71:fc:00:47:ec:4f:91:2d:79:43:c9:27:c4:
23:1e:c4:4e:4a:67:2c:96:03:8d:ed:a0:a4:80:fb:
c5:b8:63:1e:40:59:8d:a2:27:e8:75:d3:13:e5:c9:
b8:ec:3e:50:eb:3c:8b:a2:97:7d:ec:0f:6d:f2:cb:
c3:89:dd:59:52:58:e5:84:e2:21:14:2e:ec:dd:d2:
be:a5:9f:35:27:75:e8:c1:14:9e:6a:e1:f7:f9:22:
2f:a5:59:c6:8a:6f:8e:52:5b:55:b1:33:ee:2d:d7:
dc:53:01:41:b5:02:65:0e:2e:fa:3a:9d:c6:b8:40:
ac:74:65:74:27:37:ba:98:07:13:14:67:24:65:cf:
c5:01:af:02:ce:3e:01:6a:dd:63:72:59:22:ce:43:
6f:3e:5e:a4:9b:c5:c2:c2:38:39:19:d7:e1:fe:df:
6f:49:c0:fe:8c:e4:68:df:88:ce:5a:d2:65:f6:50:
45:25:98:0c:0f:9c:07:07:8d:a3:9c:02:97:be:8e:
b5:26:88:02:db:74:e6:f2:26:b3:11:b7:7b:b9:1d:
8c:1f:a7:ff:e2:b3:1b:45:e4:8e:cf:7a:5a:bc:a9:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6D:9F:6B:20:7D:73:A0:DC:B0:BE:2E:0D:F9:F1:F6:88:50:D1:EA
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:76:b9:f2:71:ac:01:d6:ac:b7:88:b4:b8:10:b0:70:15:b5:
46:f8:cd:df:df:24:8d:df:7d:ce:c3:97:a3:a0:b8:b1:00:b1:
de:ad:5c:0d:ab:72:a6:d5:e5:8b:1d:dd:59:fb:44:9e:bb:06:
02:97:d2:91:99:8b:98:c6:d1:e6:36:87:16:98:5c:c3:9c:97:
ca:5d:3f:e1:03:72:22:95:00:1f:1e:c0:dc:e2:c4:25:2a:63:
23:44:a0:73:06:d0:a8:46:47:04:2b:33:09:01:6e:f3:77:53:
14:45:a5:b6:4f:a0:34:06:b2:31:fd:95:08:57:14:73:a2:a5:
61:e2:74:9e:06:63:96:71:eb:7d:6b:e7:6a:32:5a:84:92:3e:
8f:fc:c9:c2:67:e3:e8:3f:df:f3:f0:5d:15:5e:d6:36:39:9e:
f3:f8:50:6d:76:8f:db:f9:5f:0f:2d:38:fa:c6:cd:54:ae:79:
9a:eb:18:2b:81:00:c9:06:a2:4d:72:9e:63:b2:20:fb:96:ba:
17:8d:9c:5c:1c:e3:db:45:25:a2:9b:54:1e:45:28:92:07:e1:
e7:ed:39:c9:f7:50:11:b8:1a:60:2a:87:8e:70:17:7c:ec:b2:
a8:75:ef:ab:ee:08:ed:5b:0b:01:66:9b:59:b0:c8:0d:c0:cf:
31:39:33:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:11 2025 by rpki-client