Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
File: yyBgbecwRW7dczXMiCy99DlvNGA.mft (raw, json)
Hash identifier: L6ccPww7Hj6ebK2E4Bmo1l8fMwC0TyHqxhRnm+n/9eY=
Subject key identifier: A5:EE:0F:32:C6:FD:10:69:AE:39:27:FC:ED:1E:D2:E4:38:F5:7E:40
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial: 0198D4E067319A58C126A3743EB51F525EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: 1-g2qGyIDLotxJr6jyvuCwE9SDoo.roa (hash: ox4h4LnoAr4/PMYjKkzxk/lX+kgpfI0xggGwFC9kUEg=)
2: BzvUzHnovBo7nbKCDh0scDdCP1E.roa (hash: XCMbu5qQUTLpP7fneXdNrRlDCpPbQNcvgmAEextNWVg=)
3: rHfF7qdYMYkIEjqJPBDOaXebEf0.roa (hash: P0aBQMtyJt0CjcoQ0RWfWtjHju57iTgw6JSMTWTBUj0=)
4: yyBgbecwRW7dczXMiCy99DlvNGA.crl (hash: iyuGAExiHxvRsgEO/ZVLI8fCOuXSRe1XPmpWV9ls1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:67:31:9a:58:c1:26:a3:74:3e:b5:1f:52:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=a5ee0f32c6fd1069ae3927fced1ed2e438f57e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:bf:99:45:87:ff:60:cd:6e:bb:14:13:9c:
18:1e:2e:2b:d9:44:f0:49:10:bd:d9:64:ff:54:db:
bc:bc:28:08:97:9a:b1:cf:fa:c6:60:e6:18:84:f9:
02:f9:93:60:23:b7:12:99:9f:85:ad:f2:8c:76:5d:
50:dd:d9:d7:6d:ea:3a:b1:5c:f8:d3:ec:2d:4b:9e:
74:1b:3f:ab:e4:7a:bd:f7:8c:03:07:7f:9b:3c:8f:
7e:99:17:ad:fc:30:b2:b0:77:fb:9f:d8:af:36:0d:
fa:26:55:7b:06:31:2d:64:bf:25:db:b7:e8:a9:a0:
b8:6b:04:4c:69:f6:1b:8a:08:0f:46:34:67:9c:9d:
2d:68:38:ce:ea:9a:08:73:2a:62:07:71:e4:29:3b:
98:a9:56:df:04:fe:0c:cd:35:f2:cf:7c:11:5d:fd:
3a:82:5c:82:a5:05:94:3f:e1:52:3c:fa:0f:96:6b:
32:7c:9f:23:59:0f:17:73:78:75:2e:32:46:78:70:
69:ad:2c:b0:dd:43:b7:4b:68:b5:77:2f:a7:e9:f3:
a4:ba:f6:b5:56:d5:cb:a4:b9:2a:68:52:e5:6d:7a:
e6:3b:0d:f2:3a:ea:b5:e5:54:17:26:58:2d:96:7b:
cb:25:a3:f2:47:d4:c8:f6:98:f3:77:bb:4e:5d:2e:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EE:0F:32:C6:FD:10:69:AE:39:27:FC:ED:1E:D2:E4:38:F5:7E:40
X509v3 Authority Key Identifier:
keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cc:e5:25:cf:53:a0:33:87:c0:22:1c:93:c6:3b:f5:e1:c4:
7b:4c:d2:b2:f3:6a:69:c2:5e:ae:bc:da:49:31:05:8d:d9:ad:
0d:25:99:8c:95:af:69:5c:d6:a9:ae:b1:98:11:e0:27:ef:7b:
33:18:34:36:d5:a1:c2:88:b8:e9:2b:bc:0c:f4:ad:b5:b9:06:
35:f6:07:2c:55:fd:0b:26:b5:78:fe:b3:a6:f1:65:3d:8a:cd:
28:91:70:61:40:0a:1b:a9:7d:fd:07:a5:a9:d5:94:c0:60:63:
70:34:d9:32:b2:05:03:bb:48:b1:93:61:73:5a:24:2f:4c:d6:
9e:16:6f:a9:3f:aa:1a:b7:24:82:c7:0a:e9:72:38:a2:28:78:
41:74:78:a9:36:00:2d:94:4f:99:e0:2a:0e:a0:ca:84:a0:ee:
ab:55:15:58:fc:07:ea:e9:61:47:48:11:08:da:21:b3:00:80:
aa:db:2d:7d:80:68:15:a6:b0:aa:6a:2a:b7:31:ac:53:a4:ba:
ce:13:24:15:da:84:67:22:1b:8b:64:08:4f:ca:fd:06:3f:08:
4e:52:4d:f9:ed:1a:f1:8d:f4:69:73:e9:a7:18:b0:7d:d6:4e:
e7:ba:48:47:14:16:4e:f8:d5:b7:70:13:40:68:3b:22:44:b2:
3d:c3:b4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:03 2025 by rpki-client