Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: iD6SoVRh1HeiuNCAwrTJzGFR7Z8Ue/lD8Y55gOt2xG0=
Subject key identifier: 9B:24:EF:AE:8E:A6:43:67:DA:0E:55:FC:17:31:77:2F:2A:4F:05:1D
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 0198D473959A2CCDF186846214D9337A628F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:03:21 +0000
Manifest this update: Sat 23 Aug 2025 01:03:21 +0000
Manifest next update: Sun 24 Aug 2025 01:03:21 +0000
Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=)
2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: F/v9zyxaHjGLMF78QEkeUcyD9y7JTpLtBs3If31j0Oc=)
3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:95:9a:2c:cd:f1:86:84:62:14:d9:33:7a:62:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Aug 23 01:03:21 2025 GMT
Not After : Aug 24 01:03:21 2025 GMT
Subject: CN=9b24efae8ea64367da0e55fc1731772f2a4f051d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:63:97:c2:24:45:b9:8b:68:41:3d:4c:73:
b8:ee:82:72:a3:fc:b1:fd:e2:1c:7f:6b:51:ca:cf:
24:dd:b8:f2:59:27:41:f1:ba:dc:fd:15:80:d9:4d:
a9:21:aa:68:18:65:f4:e4:d2:4a:e4:dc:d4:8d:1e:
96:c3:1a:fb:6d:19:33:f3:3e:30:75:fc:28:61:ec:
89:02:3f:79:b5:9d:52:5f:5a:cf:e8:04:6a:98:65:
63:2c:e3:92:d6:cf:8e:6c:d9:f5:a6:21:01:af:3e:
79:01:fc:f8:17:7e:90:19:4f:05:90:bb:87:4e:f0:
e2:19:f6:e2:f2:f5:84:91:83:65:f4:78:70:d9:b0:
fe:f7:4b:9f:6f:e1:7a:4e:fd:66:3d:19:78:57:49:
8d:ab:33:37:7b:89:15:28:08:fa:a1:6e:ad:46:ad:
b3:76:a4:b5:7d:d0:6f:14:12:29:7d:b4:b0:ec:aa:
99:2e:fe:01:e2:e2:87:5b:47:e0:8f:75:b7:6e:bc:
8e:f0:c1:10:e6:23:06:b9:df:52:b0:58:8a:a3:b5:
09:76:1d:7f:20:18:1f:d3:cd:f8:9a:f1:e9:62:75:
58:06:56:ae:f8:51:21:33:4d:b5:be:05:4e:c5:43:
1c:06:8f:0c:a6:d3:ae:04:86:4f:77:c6:4a:71:d0:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:EF:AE:8E:A6:43:67:DA:0E:55:FC:17:31:77:2F:2A:4F:05:1D
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bf:21:01:1b:d1:b7:ca:e0:37:d6:0a:17:f9:8e:47:72:d4:
56:2a:d3:a8:7f:71:d3:8c:04:27:49:7d:8b:f7:a1:3c:2f:e1:
03:c8:a6:91:3b:25:cb:37:70:df:62:59:74:67:9c:49:e3:c8:
eb:44:e4:52:52:f2:16:de:90:02:27:a2:11:ef:42:2e:5f:35:
8f:e6:ce:04:a0:f0:09:9f:05:cb:1a:ca:3e:20:9e:33:fb:40:
10:72:a0:b9:5b:72:d6:39:35:1c:b7:f2:39:25:ec:c5:b5:d4:
a2:12:65:f9:33:93:3b:a8:ac:74:a4:c1:2f:b6:2b:3e:1f:18:
52:aa:11:14:bd:f9:00:b5:af:6d:64:45:fa:cc:f4:19:a4:58:
31:17:7e:ae:0d:3e:5e:14:1b:c7:55:32:2b:eb:83:32:31:ed:
e8:1d:20:b7:9c:ce:15:af:8b:2a:89:b5:e2:ad:a8:db:31:d6:
89:90:04:13:dd:a9:c7:fc:6f:64:0b:02:61:9d:ac:3d:b8:9d:
cf:a6:1f:7b:6f:f1:24:c1:b4:0b:47:5a:69:ae:c1:55:71:ca:
1e:be:5a:2f:3d:53:f4:6f:2b:81:17:f0:82:02:c5:95:b9:72:
ea:f4:fb:1a:18:1f:4a:80:0e:4c:1f:cf:6d:bc:99:bd:d7:7c:
32:a2:4d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:49 2025 by rpki-client