Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
File: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft (raw, json)
Hash identifier: b/eKwMq/OZb8/4ghPU3/16fWWXZofgoLZcuwy1isw98=
Subject key identifier: 6E:BD:B0:AD:BE:5F:02:8C:73:B1:0A:DC:28:CD:93:24:22:26:E4:4F
Authority key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Certificate issuer: /CN=63e30980305345fd5365b3515e3568f9cee58541
Certificate serial: 0198D6612CF253EE58D3F24B2674AD1EB98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: Hs2TvjBAbChswFTm05pNrXJsCJA.roa (hash: xtJBUOZoNvBaKTOo18EAAqIaZQ4IjdLX9G/viT94FJA=)
2: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl (hash: flFu0GxayrV2O7Q+EXlrs+pNwaSLIDgOO2bR0aoANis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2c:f2:53:ee:58:d3:f2:4b:26:74:ad:1e:b9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e30980305345fd5365b3515e3568f9cee58541
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=6ebdb0adbe5f028c73b10adc28cd93242226e44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:f3:36:54:63:3c:cb:11:0d:36:56:ef:4d:
ae:54:7d:c2:49:58:1b:d4:ab:de:bc:ae:02:22:3c:
9e:86:29:29:98:d4:e9:bd:ce:9e:36:3b:de:19:a4:
21:c1:74:17:c8:e2:12:88:0a:e6:c2:0d:6a:b0:86:
90:0d:30:9e:42:34:14:41:97:ea:24:24:cc:02:eb:
c1:fc:41:02:ad:de:99:ed:34:a8:8b:1f:98:7d:4e:
61:0a:fb:5b:65:33:1d:04:64:46:dd:24:b3:58:89:
2b:02:de:3d:0e:af:05:76:1e:67:e9:85:06:d4:dc:
aa:d8:de:90:a2:3e:2f:1f:c9:22:30:85:4b:91:5b:
65:c4:ed:d7:ed:42:3c:65:83:58:ee:54:7c:9e:32:
51:10:92:3d:0a:f1:f3:6f:48:2c:29:f8:35:a6:a6:
c5:7b:c9:ae:25:01:65:45:23:26:fa:1d:95:f8:fb:
17:ef:ea:cd:fd:d0:03:78:04:9f:7e:50:2b:b5:68:
65:19:95:9d:a4:37:42:cf:a7:87:88:e4:94:90:24:
0b:e4:08:3f:b2:49:1c:89:85:f0:5d:4f:a1:af:6a:
b6:d4:e8:fc:d5:cd:e0:67:40:da:67:d9:52:d8:c7:
8d:8c:ab:e4:45:1d:b2:92:b8:54:80:1f:21:f0:1d:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BD:B0:AD:BE:5F:02:8C:73:B1:0A:DC:28:CD:93:24:22:26:E4:4F
X509v3 Authority Key Identifier:
keyid:63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:e7:ad:f2:88:3f:bf:40:85:71:6f:a7:25:90:51:32:5a:
cc:50:b9:ba:84:70:f0:f1:cb:e5:3b:0f:b8:cd:f3:b5:36:5a:
d6:b1:1d:ce:8b:db:b2:4e:be:4d:27:fb:0d:23:83:3d:7d:d0:
7d:c1:6e:a4:d9:ce:be:5c:e9:fe:19:6b:8a:3e:69:c3:63:64:
b3:8a:e6:63:6a:47:bb:5b:93:0c:cc:42:c6:f8:7b:ac:ef:c7:
63:6d:72:1e:f9:0c:56:d8:ea:7d:4e:6d:46:a5:76:4d:2a:7c:
3c:04:7e:ce:61:7d:30:3c:15:24:02:fe:70:36:12:4c:d0:03:
50:e8:31:40:8e:fa:d0:3a:bf:97:5b:20:22:a0:b5:28:eb:0e:
67:8f:ac:82:69:ca:9f:a2:81:e2:66:c7:99:f2:6c:a7:97:cc:
f9:87:af:10:0e:75:19:7b:05:f9:aa:0c:2c:27:66:55:7f:ed:
4b:0e:54:d9:a4:ed:f8:ed:7d:b9:3f:5b:f8:6d:d6:77:f1:a4:
db:be:78:b8:4f:1c:c9:8c:51:e4:a6:fc:6c:16:aa:64:9b:38:
42:66:9d:82:aa:81:06:9e:2a:84:22:95:3c:e6:73:a9:ad:42:
7a:eb:22:b2:db:45:b8:84:72:51:21:d8:05:f3:53:f7:2a:b4:
5a:97:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:44 2025 by rpki-client