Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: PndXTkgDeq2QW69zq1r2zNcMx2es2oVPoC5FkL9/ehI=
Subject key identifier: AA:29:3E:24:F6:3A:E9:F4:F1:65:AA:7F:32:68:5F:1C:19:5A:CE:F8
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 0198D51629AFB274864059C53923E993AF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: eyWKkhXMDgTxV20U3ySLBe1cSTwjOQ3ZNqPJP5txnJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:29:af:b2:74:86:40:59:c5:39:23:e9:93:af:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=aa293e24f63ae9f4f165aa7f32685f1c195acef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:eb:c7:ee:7c:c5:65:9c:60:b5:e9:af:7c:
d3:40:3b:d5:d4:05:1a:d6:05:77:93:65:79:60:83:
ab:c1:92:df:52:9c:d6:69:18:c3:32:3f:cb:a7:82:
33:7f:b3:29:b7:13:a5:83:33:b4:3d:a5:75:39:9d:
5e:26:f9:78:8e:e7:99:93:8a:be:63:d6:40:49:68:
60:30:72:1e:33:a4:91:6f:12:16:c3:99:50:11:ef:
4c:7f:a3:ef:b0:f5:29:d1:36:61:0a:9a:9b:25:82:
cb:97:b5:db:19:28:9e:d6:11:e2:15:17:d4:c2:55:
dc:91:c5:a4:23:45:87:67:b4:e3:8d:32:d5:27:9c:
21:01:70:19:84:83:29:03:6a:26:7d:d3:c3:32:49:
7f:a8:3b:5f:d0:67:53:5e:52:e9:38:c0:b1:19:f8:
90:f3:9e:95:58:95:9c:42:7e:21:79:02:1c:c3:5f:
4f:ba:93:a2:d6:db:3a:f2:65:5d:9c:08:b3:a5:62:
80:ec:7a:40:c4:a0:19:3f:a1:c7:76:49:59:f6:b9:
4e:63:37:ad:37:93:af:2d:80:5d:f4:d0:08:a6:54:
fa:35:67:b4:14:d2:60:bd:45:ca:40:69:a7:7b:6a:
b8:5a:9a:0c:23:60:0d:74:a6:56:24:96:f6:da:5b:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:3E:24:F6:3A:E9:F4:F1:65:AA:7F:32:68:5F:1C:19:5A:CE:F8
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6b:b1:a2:30:58:5d:85:5f:53:9b:97:30:ae:08:cd:12:81:
07:0b:71:40:82:ef:a0:65:08:45:9c:c5:ab:90:8d:fc:43:9b:
fd:cb:c3:a1:ae:08:a0:f3:d1:d7:92:ce:ee:20:da:39:76:e4:
c0:d7:10:32:b2:77:e7:e1:3e:8a:54:03:3a:26:6e:2f:9b:1e:
fb:44:a6:60:5a:83:be:d6:aa:9b:41:10:7b:40:cc:fe:34:0a:
7f:a6:06:8b:08:b9:73:57:5d:1e:b0:c1:18:9c:5a:18:e1:4a:
bd:ce:4d:25:f2:f7:8e:f8:ce:28:7f:1e:fa:a7:9e:95:10:a5:
f9:73:7c:7f:4d:bd:19:1a:07:34:04:d3:dd:9b:bb:ff:21:b9:
2e:3e:e5:21:c2:e5:3f:5e:a6:19:e4:07:52:87:32:72:b9:2d:
87:83:e2:71:a2:e5:86:30:7e:a3:22:13:b8:97:84:87:9a:a9:
75:51:08:3f:46:a7:d3:5c:71:5b:ee:e0:c0:4b:21:0b:00:ee:
d6:f0:ba:6f:1a:81:a7:ae:ad:69:8c:cb:91:4e:ba:99:88:91:
c7:a5:54:f4:0c:24:32:f2:27:9d:97:d0:2e:bd:7d:8b:18:9e:
a2:4a:1b:ec:32:23:9a:fd:f1:96:b8:b7:2c:58:bb:2e:c3:76:
0f:04:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:48 2025 by rpki-client