Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: ckeyuq4FSJZvOVkCMdnMzVh+TnEGgET1ZNshOXUITtM=
Subject key identifier: 96:1F:EF:8A:88:2E:BA:78:6F:9D:EB:90:5B:03:E3:A9:BF:F6:00:FE
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 0198D66105935622E88DA3AE5D77EAFE084B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: dmlsvq4a8EF8loUtzBtTiK/Z6f5bf7c3WMfKg13oayk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:05:93:56:22:e8:8d:a3:ae:5d:77:ea:fe:08:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=961fef8a882eba786f9deb905b03e3a9bff600fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:83:a4:b7:da:c3:fc:36:a7:62:2b:7f:3a:
54:75:c7:f3:70:c3:17:45:9b:aa:df:20:12:6c:71:
a1:bd:f6:15:29:ba:73:0b:87:c8:fd:11:20:a0:3d:
a6:ef:9d:0f:0c:c7:03:78:62:40:5e:8c:16:67:db:
24:44:d5:ed:5b:bf:7b:ed:ed:b9:34:ae:b1:fc:5d:
55:de:28:2e:61:9d:43:d4:4d:10:51:4a:b6:d0:dc:
61:ed:d6:7b:03:db:cd:18:5a:a7:59:5b:41:8c:35:
b8:70:27:5b:cc:75:0c:13:1e:05:8b:e8:97:56:39:
5e:8c:1b:75:b2:94:a6:32:7e:8b:eb:00:d5:71:ed:
68:03:3d:c4:fe:e4:b7:1c:ef:55:71:0b:0a:1b:5d:
97:d8:55:c1:cd:33:c8:50:eb:1f:0b:f7:50:da:d9:
52:2c:33:29:31:84:b8:44:88:4e:13:37:60:d2:ae:
9c:36:6b:cd:6d:8c:e9:43:18:e8:47:75:ff:96:d0:
9d:1b:58:33:d9:52:2e:56:27:5c:67:6d:38:ca:e1:
d9:29:e6:a7:5f:e4:c1:53:c8:d5:12:bb:ee:32:c2:
8c:5f:b4:40:78:65:38:c1:c0:e7:a4:ce:b0:67:5e:
4b:61:67:98:dc:fa:3e:c0:0c:f8:d8:d2:1e:a5:c2:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1F:EF:8A:88:2E:BA:78:6F:9D:EB:90:5B:03:E3:A9:BF:F6:00:FE
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ac:7e:47:96:2e:0f:6c:89:ed:6e:81:45:0d:f1:1d:56:5b:
98:b7:34:21:bf:7a:fd:1e:ea:a2:a1:d8:b2:fa:5f:89:3b:b9:
aa:04:e0:38:3e:66:2c:12:e1:35:94:60:8c:d7:21:41:c3:34:
33:25:57:46:b6:c0:d0:28:77:35:44:3d:1a:a1:ba:78:72:d9:
1d:9f:37:a4:55:29:53:ee:21:85:f3:78:f9:77:7d:a4:06:8a:
0e:31:53:92:78:5e:da:1f:0b:81:99:0f:e3:d4:24:cf:de:6b:
c9:62:f0:9c:82:00:9a:65:ea:cf:c2:54:d2:9a:73:40:ab:d0:
db:cf:59:6b:55:89:57:16:62:cd:1b:4d:17:2e:a8:2e:49:4b:
2f:c7:12:4d:48:b6:5f:c6:84:79:50:9a:ec:89:61:10:f9:d8:
c8:52:19:61:4e:e9:b8:5a:c5:b4:14:b8:a2:99:2c:8a:40:e5:
32:06:05:67:92:e0:da:dc:34:67:ce:07:49:61:60:42:c7:c8:
82:1d:e7:0c:65:43:34:4f:03:ca:66:21:86:c3:43:ad:7c:33:
c0:31:01:ac:10:c8:f8:b9:8d:91:81:9a:d0:4c:a9:38:1a:67:
92:47:e8:c6:62:dd:f0:bf:d0:05:f2:12:a1:be:87:52:5d:db:
70:ad:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:54 2025 by rpki-client