
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
File: yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json)
Hash identifier: AHUxE67R8vWexjLqXNB86SnZ+fZ65QnSJ5A865eRjnA=
Subject key identifier: 47:51:49:9B:AD:4E:1A:25:44:97:00:F5:CA:8D:C8:1E:E9:FF:5D:A8
Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Certificate serial: 0198D4E00D29027DBAEEFB0C0C721F56F846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (hash: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=)
2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: rILLOQITSsmRC3V3DWyCrJb/rv4LajX8xHLhTb/w1Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0d:29:02:7d:ba:ee:fb:0c:0c:72:1f:56:f8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=4751499bad4e1a25449700f5ca8dc81ee9ff5da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:6c:12:d7:38:9e:e7:5b:06:b1:c1:f9:a9:
4a:a4:dd:a1:94:20:ec:21:d9:36:70:f4:08:ce:e7:
a5:9c:59:55:2b:d3:26:cd:63:e5:a4:0f:66:09:dd:
29:6f:c9:a8:9f:8f:65:da:fd:f0:39:67:aa:46:b8:
46:3a:64:6c:cc:8d:e5:1b:af:66:69:85:a3:5d:5b:
03:66:45:50:b1:80:3c:e6:1e:e3:fe:a0:08:72:10:
45:7b:73:d6:c9:1c:2a:04:8a:1e:e7:06:32:82:7a:
30:e6:d2:f5:72:50:ab:f4:9b:89:a0:61:48:d5:20:
d8:c5:f0:b7:54:6d:bc:36:a4:21:72:e3:1f:d3:90:
3c:6b:8b:73:6f:23:6b:5b:b1:3c:bd:86:22:5d:92:
21:4c:32:de:ba:d0:3b:f9:13:a1:d9:ee:1f:8f:6a:
21:72:dc:ac:00:b3:74:1c:b9:05:de:93:d5:11:39:
48:f5:59:a4:1c:81:94:2e:3d:79:2b:35:da:c5:30:
6d:9a:5c:af:d3:86:cf:5c:23:b3:3a:9c:5b:58:51:
f8:6e:ea:ad:37:5a:a7:f6:41:30:e2:f3:bb:34:8a:
86:be:b4:88:9f:42:fb:76:5e:56:64:97:d6:cc:e4:
48:2d:c1:aa:1c:e1:11:11:80:f5:0c:7d:cc:cb:ed:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:51:49:9B:AD:4E:1A:25:44:97:00:F5:CA:8D:C8:1E:E9:FF:5D:A8
X509v3 Authority Key Identifier:
keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f2:fe:31:de:70:d3:0f:3b:36:fc:55:24:b7:f4:96:09:e8:
37:25:34:68:27:35:40:14:a8:f7:22:8d:ab:8e:ac:9d:ff:69:
6f:4c:04:e8:be:df:01:cb:aa:33:51:4a:8f:5d:b7:7f:f3:12:
fb:d2:02:5c:f5:f7:1a:67:80:97:91:ee:ad:b0:f8:87:d2:22:
84:ed:2e:58:0b:3c:e7:ee:f7:e8:8f:82:35:b1:aa:34:f1:b8:
8a:37:02:70:f8:ae:aa:99:ce:f5:48:91:8e:50:4f:0c:5d:95:
74:66:f6:26:c0:5b:e6:7d:cf:f0:29:51:01:c6:aa:44:e6:fb:
d9:db:ad:c1:a0:ab:fc:ed:44:12:be:59:27:8f:8f:dc:0a:2c:
a0:25:8e:83:1e:46:99:6d:96:0c:b9:00:59:ee:4a:c9:9f:58:
53:df:17:7b:f4:70:52:87:cf:79:7f:bd:c7:cc:1f:d9:d7:24:
55:79:0f:da:a3:0e:91:cc:c0:8e:90:fd:30:2b:e0:66:e1:ce:
74:2d:a4:34:75:30:b8:7d:6e:48:0e:7b:3b:98:4e:a0:ee:14:
76:c3:58:1e:38:fe:c0:40:04:a0:9d:f8:eb:fe:c9:51:3f:13:
47:ac:ba:36:99:2a:2f:2e:a4:fd:10:19:97:63:d6:9e:7c:69:
87:8e:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:21 2025 by rpki-client