Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: WimcnVgx9LPKVL6HOpnUuj3Ov9+vQ0nLPZJKIycN40E=
Subject key identifier: 03:CD:ED:DD:9C:B0:6F:9D:5B:B7:95:18:2C:F6:9E:2D:E2:F4:0E:7C
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 0198D4E0C8317B0CF1CB475042D4FD4E122D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:02:37 +0000
Manifest this update: Sat 23 Aug 2025 03:02:37 +0000
Manifest next update: Sun 24 Aug 2025 03:02:37 +0000
Files and hashes: 1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=)
2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: VYJ1sfAFQRKGa4+Tht2RAYMiHxdQHtsL5hAr9qGOpkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c8:31:7b:0c:f1:cb:47:50:42:d4:fd:4e:12:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Aug 23 03:02:37 2025 GMT
Not After : Aug 24 03:02:37 2025 GMT
Subject: CN=03cdeddd9cb06f9d5bb795182cf69e2de2f40e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:24:4f:d9:bb:2b:9c:ad:6b:7f:bf:9d:81:
49:a7:77:e3:52:9b:6b:6e:6a:5e:d4:5b:7a:df:2a:
1b:1f:66:31:be:f2:c5:14:36:01:4f:35:9b:c2:dd:
3b:d8:08:b8:0d:b4:28:02:a8:bc:80:9b:55:92:67:
a4:31:00:04:e0:b1:3e:85:56:af:b1:5b:79:94:f0:
89:10:1d:e2:96:41:32:43:e4:60:b9:ac:b2:16:ed:
a1:5a:f0:3b:be:87:da:5c:67:89:6d:cb:2a:3c:66:
83:7a:c9:25:9f:62:56:d3:d3:1f:30:99:01:93:6f:
be:80:34:a6:da:04:66:e5:c4:18:4f:df:09:07:02:
48:1a:d0:4d:b1:80:b3:6d:b4:e2:ba:aa:d5:ff:87:
e8:62:bf:21:81:d2:c1:45:a1:aa:9d:e4:61:a2:6b:
22:22:c9:ae:71:7d:4a:3d:69:11:95:00:42:e7:39:
93:b2:9e:92:eb:9f:61:d0:0a:3f:2b:78:78:e3:b8:
cf:0d:a0:2b:49:94:dd:1c:5e:9e:ce:65:9a:60:06:
43:b8:47:84:6f:83:9e:c9:3a:0d:8e:4d:3c:51:32:
d6:f6:ed:36:5e:ac:b4:c8:41:28:19:84:6a:6f:5c:
c6:32:51:d0:b3:ba:2c:14:0a:6f:f6:1b:85:8b:82:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CD:ED:DD:9C:B0:6F:9D:5B:B7:95:18:2C:F6:9E:2D:E2:F4:0E:7C
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:65:3a:67:3f:2f:2e:fe:37:2c:fd:f8:78:59:5b:02:b9:ee:
95:e9:21:a1:2f:07:e9:a1:59:8d:e5:bd:32:fa:c6:d7:ea:d4:
e5:df:b3:9a:d9:41:67:47:4f:d1:dd:84:27:61:b0:5a:44:fe:
4b:63:58:3f:39:d6:8e:f6:d7:24:17:2b:72:e4:91:25:0b:67:
d7:af:82:85:81:ca:2c:76:99:13:fa:b5:44:cc:e3:a6:4b:1a:
5e:18:49:e2:fd:ad:80:bc:6a:13:b4:8a:56:58:47:51:b2:ba:
ff:93:52:6f:2a:b2:6d:69:3a:55:2d:fc:df:bd:4f:7e:b8:00:
4c:05:a4:8d:83:ab:d4:92:ff:8a:74:9b:1a:a7:6a:55:f5:d4:
3d:fb:99:1e:40:b3:5a:6a:76:9e:74:af:9e:6c:ae:c5:c0:55:
2d:c5:38:43:b9:43:ef:5e:a9:29:b8:d6:e0:b6:66:80:b2:60:
6c:c4:22:57:df:a7:81:dc:31:dc:cd:63:2a:95:64:f4:ce:b2:
4b:bc:25:2b:0f:d1:1d:27:9a:ac:96:6b:63:13:06:2d:85:0a:
b2:47:d9:8f:e8:11:cc:e3:4f:31:04:15:0f:a7:91:e3:33:e8:
a4:8c:e3:8b:a6:97:5a:3d:7b:99:00:62:ee:dd:f9:41:89:fd:
92:79:35:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:07:58 2025 by rpki-client