Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: 8DfT4gFW4tU1RiCRN+I9xv0J5scH85flRuYH16Agflk=
Subject key identifier: E2:8A:E7:CA:19:9F:D4:64:F7:7F:32:BD:04:35:80:3E:7C:9D:C1:DF
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 0198D705E3F7E094F3EC62AF8ADDA08D9256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 1633
Signing time: Sat 23 Aug 2025 13:02:24 +0000
Manifest this update: Sat 23 Aug 2025 13:02:24 +0000
Manifest next update: Sun 24 Aug 2025 13:02:24 +0000
Files and hashes: 1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: J5uN/4BcWz7Tlx2xzehtySgm/W+6oqHCxVWRRfbb7W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e3:f7:e0:94:f3:ec:62:af:8a:dd:a0:8d:92:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Aug 23 13:02:24 2025 GMT
Not After : Aug 24 13:02:24 2025 GMT
Subject: CN=e28ae7ca199fd464f77f32bd0435803e7c9dc1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:14:06:59:46:88:77:ce:65:a0:8f:6a:76:
dc:4c:a1:e1:fe:42:66:d0:35:5e:b4:12:f0:d0:99:
99:be:80:29:0f:51:16:eb:16:a2:5d:c8:ce:7e:bc:
54:6c:1b:7c:bb:10:5e:0f:43:a5:5a:32:f3:26:51:
ee:a5:7d:72:81:bc:d0:a9:38:96:a7:52:d2:10:57:
9e:25:01:51:f9:4a:01:19:a3:c0:f6:a6:2f:7f:c9:
a9:53:7e:8d:44:84:c7:b9:fe:b0:b4:0a:26:6b:91:
31:9d:e7:2f:cb:ce:03:49:a1:3f:51:08:dc:99:f1:
2b:c1:56:63:75:ea:d6:5c:3b:74:f8:5b:c4:8d:24:
9c:01:c7:da:8e:6c:b3:78:9f:c0:78:a6:26:48:06:
f0:e8:4a:6f:a4:ae:b7:65:bb:31:81:59:46:b9:fb:
f8:22:36:06:5b:31:e3:b3:61:92:3d:93:79:4c:5a:
45:4d:f5:33:2f:85:e9:3f:73:6f:9f:24:17:d3:9d:
f0:8e:18:e9:36:72:1c:92:33:99:1c:52:f2:8e:af:
81:5b:c5:ac:34:6f:69:94:fb:a2:d6:c0:64:20:c2:
0f:98:1b:03:b4:11:3b:8c:94:8d:c1:1f:e8:98:88:
48:a7:29:8d:7e:71:3c:df:b5:59:e5:51:e0:9b:e8:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8A:E7:CA:19:9F:D4:64:F7:7F:32:BD:04:35:80:3E:7C:9D:C1:DF
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2b:89:09:f3:de:2a:8c:2d:7a:93:b8:ef:ea:6d:5b:2f:1a:
73:21:87:78:36:bf:9c:28:62:a0:41:ad:c0:93:f9:5c:ab:16:
46:74:6c:59:b7:56:fa:fa:00:ae:26:52:09:36:cb:fa:2d:80:
65:7f:71:f2:d0:40:73:0a:f3:6b:6c:fc:0f:b2:9d:f2:15:18:
47:8b:15:76:b3:9e:34:82:76:76:60:bc:67:b0:02:cb:14:02:
d7:bc:05:91:4b:d6:08:d2:99:72:0c:86:70:48:74:98:72:f2:
92:83:45:98:5d:cd:a7:7d:04:e5:0c:98:83:14:eb:69:51:39:
87:3a:1a:36:dc:5a:bc:7c:0e:9f:8c:65:63:d8:33:5d:43:aa:
ba:65:bd:2d:7e:ab:83:6b:d0:9e:fc:32:51:57:c4:fd:c6:98:
cf:48:21:37:45:ca:7b:ea:4e:b8:e4:be:c8:7a:a8:1e:2a:fa:
d7:28:3e:31:58:e3:c5:bf:46:35:e8:e6:77:be:19:af:c1:45:
f0:5e:b5:58:be:60:51:78:99:37:ef:d2:26:67:4f:c1:63:eb:
e1:4d:c1:69:f8:9a:c9:88:c9:d7:e0:c7:2d:dc:2a:c1:42:73:
f0:2c:8a:fb:42:95:9f:52:e2:d2:70:93:23:1a:9f:7a:85:8f:
96:d1:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:17 2025 by rpki-client