Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: 2xg5IEzl6VShLzgVXKiw5ak8f6mZNfGrGL1S45Au8Vg=
Subject key identifier: 02:49:B0:42:70:7B:73:85:03:15:19:B8:B0:61:B1:E1:0C:98:90:F9
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 0198D6CD87B294765053D8C6BB582884F5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:50 +0000
Manifest this update: Sat 23 Aug 2025 12:00:50 +0000
Manifest next update: Sun 24 Aug 2025 12:00:50 +0000
Files and hashes: 1: EwMUoWYW4dc0tRkkx15ciptmQak.roa (hash: IxyoruIJ2PWmvP6nW1K1qsmgYgo96Vwp6Gm5YCkQlWE=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: Ei2zeTR2be2y6fGDkVgE9+QfJ5P36bA8pjZe3IkECxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:87:b2:94:76:50:53:d8:c6:bb:58:28:84:f5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Aug 23 12:00:50 2025 GMT
Not After : Aug 24 12:00:50 2025 GMT
Subject: CN=0249b042707b7385031519b8b061b1e10c9890f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:c2:2f:86:4d:f1:ae:d1:c3:09:7c:ff:5c:
51:37:c2:2d:de:ef:50:d2:c7:d3:a7:08:5d:7a:f6:
70:32:64:1d:7e:5d:18:8d:ef:1a:46:fc:4e:75:68:
99:5f:a2:29:45:2b:97:81:19:21:b3:d6:d1:ca:3d:
b1:b6:6e:b1:57:12:55:4d:bd:3a:09:39:58:f9:c4:
71:74:53:9e:e1:6a:ba:d7:9e:40:91:44:30:ff:b1:
2b:99:ef:20:4c:ec:36:b6:c9:3c:b0:c7:31:fd:0f:
15:44:43:07:62:d0:4a:94:a0:01:28:16:12:84:1b:
42:50:c3:88:88:3d:9c:ef:40:7f:64:be:cb:dc:5f:
86:9d:26:c6:69:0c:af:a9:ee:28:57:92:63:1a:42:
09:7f:6b:6f:cd:45:f6:96:c9:0c:77:9b:50:58:58:
bb:c7:6c:f5:b3:3d:ed:84:6d:a7:1d:02:45:d2:fb:
63:0c:20:c9:f7:88:68:b4:ba:37:3b:ec:f6:ef:fd:
05:ee:3a:43:8f:ba:e6:ef:50:64:98:d7:bf:b8:f2:
75:0c:fc:87:2f:75:4f:3a:17:d8:0a:c1:55:82:cb:
df:82:1c:58:9c:25:35:0c:7f:12:42:67:e7:6f:21:
51:a6:09:15:cc:8d:96:9a:7a:5d:23:47:56:62:ac:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:B0:42:70:7B:73:85:03:15:19:B8:B0:61:B1:E1:0C:98:90:F9
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5c:f0:0f:62:0c:68:ff:3c:ed:e5:e2:b8:8e:05:9b:03:85:
c4:10:4b:58:a4:d0:6d:78:72:74:22:ef:25:bb:8e:2a:58:75:
51:7a:8e:0d:6d:ae:1a:19:ef:5d:c6:53:6f:08:53:1c:03:d3:
d8:17:0f:fd:06:86:77:dd:3a:a6:bd:5f:b6:13:aa:06:2c:47:
e5:80:c7:54:dd:4f:56:42:44:99:bd:fe:ae:55:7d:27:8a:76:
fc:bf:0a:d6:93:ac:0e:79:67:fc:de:81:f2:81:5f:48:43:59:
4c:1e:ca:c7:5e:b1:e2:f4:46:24:95:72:2a:ab:e8:66:e4:24:
ac:eb:a6:5d:cd:6e:37:e9:a0:a7:4c:85:f2:eb:57:c1:e3:d3:
e5:27:77:8d:18:a0:cc:50:51:0e:82:1f:df:65:ff:41:4b:5f:
ef:13:b9:53:d7:29:e0:a8:bc:b6:89:63:51:74:bd:17:cc:d9:
b7:a9:b3:65:8d:de:c1:13:31:7f:d0:11:11:ef:5e:38:52:c5:
62:4e:18:47:97:0f:db:40:b4:52:5f:2e:96:94:12:33:34:2b:
10:32:6d:4e:06:18:b2:a8:e8:d8:81:40:02:48:ab:8c:61:0f:
1c:c4:53:3f:99:03:b0:09:c4:b1:98:dd:7b:65:5c:bc:b9:c0:
91:f8:16:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:01:52 2025 by rpki-client