Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier: Mu3qMC2rEObyUirbEd/ExMslpQNS+RZ9ooaSG+P9xLI=
Subject key identifier: 32:17:7F:31:94:21:E6:48:F0:72:9A:24:8C:17:5B:BF:56:C7:30:BB
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 0198D6297BBA3B4600CD38CA324D06209D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number: 0D6B
Signing time: Sat 23 Aug 2025 09:01:39 +0000
Manifest this update: Sat 23 Aug 2025 09:01:39 +0000
Manifest next update: Sun 24 Aug 2025 09:01:39 +0000
Files and hashes: 1: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: r1Hd3FHlm/GCzr6s6vNUnc9NgDUR7+uHReQZEDhKUFE=)
2: OPYEfeaD4UG3_woKyPv1Wj7JrZg.roa (hash: iv8H/ObGNtJDTTAshveiukMxLvPbVXVjWuW+XjG+jWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7b:ba:3b:46:00:cd:38:ca:32:4d:06:20:9d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Aug 23 09:01:39 2025 GMT
Not After : Aug 24 09:01:39 2025 GMT
Subject: CN=32177f319421e648f0729a248c175bbf56c730bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:a4:f1:4a:8b:b3:bf:66:55:07:cb:f8:1d:
ba:e6:da:16:91:be:da:53:14:25:a8:6c:e9:2e:09:
76:51:ba:8c:0c:77:35:0e:a6:b7:1e:e0:55:ae:0e:
ae:6a:21:94:09:84:a7:a1:67:27:b3:71:7e:25:e0:
97:0b:51:d3:f6:6a:7b:ec:43:f8:5a:62:ab:83:65:
44:58:0f:07:26:a2:b4:af:56:d0:79:61:4b:42:63:
10:47:e9:32:2d:a0:7a:60:4f:80:b5:46:11:e6:cc:
af:ff:ae:77:ff:fa:c2:6b:95:5c:f8:21:5b:7b:97:
a7:8e:ef:60:1f:c0:2f:a0:f3:b2:3a:be:f8:03:93:
c8:45:1c:25:c0:42:a1:53:2e:ef:2c:85:84:41:b5:
5a:3c:23:99:7a:f8:d3:21:11:88:42:bc:e6:24:4d:
14:7a:38:fd:b5:db:d2:55:65:c4:0f:27:8a:73:32:
f4:9e:25:51:e3:7c:29:9b:dd:92:d1:d6:3c:eb:0a:
a4:25:79:76:ff:9a:a4:23:e8:8a:2a:b2:db:77:17:
55:cf:d3:08:ef:21:9e:e3:90:6c:5b:df:c8:55:01:
67:71:b0:9a:e8:8b:a5:1f:05:d0:63:ec:76:d2:2a:
76:0e:4b:f6:a5:24:cd:cc:39:a5:06:ec:c6:3c:6c:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:7F:31:94:21:E6:48:F0:72:9A:24:8C:17:5B:BF:56:C7:30:BB
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:14:6d:89:1a:72:e2:1d:2c:3b:d1:c6:dc:31:a1:3a:80:ab:
0f:20:5c:55:91:66:39:57:b5:8e:49:24:54:19:13:8a:07:36:
9e:a5:5d:77:0e:03:5b:fd:2c:78:6d:49:82:41:d1:12:8f:b2:
51:af:88:37:5d:f0:d8:55:88:0c:06:a7:9f:63:e6:cf:86:4b:
75:57:1f:51:98:26:10:65:e2:fd:b1:2c:68:f5:dc:7d:19:03:
5b:d0:31:e5:f9:03:4c:4a:4d:f9:0b:87:28:b8:27:dd:e0:3c:
78:3a:d7:29:29:b9:cc:21:10:08:fe:0a:a1:1b:94:10:64:9a:
76:7c:70:0e:ca:27:d6:c2:03:30:fe:b7:63:4e:f8:64:95:9f:
e8:37:18:4a:16:2c:a7:0e:0f:e8:c8:fd:31:84:86:5a:ce:9e:
0c:8d:12:57:a4:ec:cb:8d:44:b1:e7:95:20:c3:a0:c1:9a:14:
ab:a7:24:cb:db:d6:37:27:b2:33:cb:c0:a5:1c:62:2f:dd:27:
1b:9a:d7:4c:24:56:24:37:66:dc:8a:26:6b:aa:29:c6:63:41:
0f:e8:e4:45:05:55:ed:64:ad:62:98:66:c3:e9:49:00:4f:5b:
98:bb:37:2a:0f:7c:10:f6:a7:f8:e8:9a:3a:b9:ab:c6:c6:f0:
31:5a:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:12 2025 by rpki-client