Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: 9YG2FODFPSneouZf56FkB0wBGZZkNuOgKTJWsPJVW0c=
Subject key identifier: A6:43:D2:5B:15:5D:DB:8D:61:D8:1F:8A:CC:EE:40:18:E5:84:5C:CD
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 0198D54E42C33063E088C915429C4DCD2C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: HkYW65o73eqtWjIhlZ298uCyOUkssGNMj7sYdeIJryE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:42:c3:30:63:e0:88:c9:15:42:9c:4d:cd:2c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=a643d25b155ddb8d61d81f8accee4018e5845ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:cc:db:19:e9:fe:77:b6:55:18:30:60:7d:
ce:84:99:38:a9:7b:c4:d6:55:2a:50:bf:71:69:93:
59:42:7d:f1:ba:d1:f1:6a:b4:9c:a3:d1:77:f6:ae:
45:7f:a5:cf:a2:7f:53:e1:95:83:3b:71:ba:60:22:
eb:53:bb:f0:94:09:75:a6:d8:28:94:d9:93:34:57:
77:d1:83:69:0a:7a:de:4c:31:36:b1:cf:e7:e8:74:
bb:71:72:53:75:08:9b:e0:57:9d:74:68:e4:ea:b4:
d1:5f:de:b2:25:de:09:c2:9d:c5:84:f0:01:0d:e6:
95:6b:33:a2:81:3c:76:7f:c9:83:89:61:a7:4e:72:
63:70:8b:e3:95:b0:01:9c:c8:3e:b0:45:a2:08:34:
47:68:30:56:04:88:e4:6b:bc:b7:3e:81:78:a1:cd:
8f:e0:c0:4f:31:a3:7d:6a:b9:0a:2d:68:c8:08:fa:
d0:4a:0f:0b:bf:be:d9:d1:05:b2:4c:7b:90:cf:5b:
05:24:66:f8:89:d9:2f:46:2d:e4:cb:3f:71:d0:88:
ac:e8:b7:1a:21:df:e8:94:31:1b:69:e5:61:6e:ed:
a2:71:9d:98:37:ad:a4:4e:9f:76:4b:f2:24:5a:d6:
5b:e8:50:a2:c6:ee:ae:b4:09:06:28:02:33:b1:19:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:43:D2:5B:15:5D:DB:8D:61:D8:1F:8A:CC:EE:40:18:E5:84:5C:CD
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d9:da:60:0b:37:98:12:da:58:3e:06:45:fa:33:2c:81:59:
a9:0e:6b:4a:ab:5a:bd:c8:92:e7:eb:1b:79:d1:b3:7b:23:d6:
9e:c0:19:4e:02:17:3c:9d:70:93:89:a2:ad:0f:e4:a1:d1:51:
18:22:1e:a0:fe:9f:2a:ae:8a:7b:c4:c8:06:17:fb:ad:9d:80:
7a:38:c7:40:e9:1d:a8:14:0e:67:5e:93:d3:88:78:ef:92:c5:
84:82:61:40:75:1c:fe:a9:35:05:5f:4f:ee:ae:5c:41:c2:63:
01:45:a1:dd:ff:28:6a:cd:3f:ee:5a:ee:9e:0b:46:a3:71:0a:
1c:89:bd:2e:fd:27:f6:51:28:ea:4b:38:58:a1:7f:73:a7:0d:
81:35:c8:5e:99:05:29:e4:a7:31:81:bc:98:e3:18:0e:6e:1a:
f9:15:f0:66:61:fa:dc:e3:2c:74:ca:26:21:6f:e8:fa:89:48:
b6:38:21:4b:7b:f3:02:08:03:ec:e6:c6:e1:6c:ae:74:49:5d:
4c:16:19:67:ae:33:03:0a:90:16:42:fd:62:38:f1:90:63:b7:
13:80:1a:23:ea:d7:02:95:0e:36:7b:96:3b:70:70:74:28:6b:
b6:c7:10:96:b5:77:a9:71:66:32:b1:08:6f:24:95:f8:54:96:
05:f6:37:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:02 2025 by rpki-client