Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: DWZbIHF6xg2fCcmrufJaUypKYFP2tRIPTz9Zg4W5lh8=
Subject key identifier: BD:8E:75:83:EC:34:84:A6:1E:BA:23:D6:0A:EA:36:42:67:34:28:58
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 0198D66069A7A95728915AA8E26F461B1485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: 6thBO5jod-S22ld5I7cCUqU9PPU.roa (hash: whhraWURnepuYYNpLNQlvK7It8S7aCrmfs8zXpfqsOc=)
2: bNZ4Q9wcD7yZAP2RwlbB4JNFkjQ.roa (hash: JZzkHPxKw9rE1eeiiSJfGm5FFzPkvIECAGzsNfZT2+0=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: ZioCjm0pca00/VGKheKP0M/a9ka9NcviNSOxVvHt3Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:69:a7:a9:57:28:91:5a:a8:e2:6f:46:1b:14:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=bd8e7583ec3484a61eba23d60aea364267342858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:8e:fe:6a:af:06:53:c5:08:d6:46:b9:5d:
b9:fa:57:6a:29:c3:8f:f8:56:31:65:f3:3b:ef:4a:
82:01:9a:a3:0b:a9:44:d7:7a:e2:f8:f9:62:83:43:
f6:95:f1:6f:e1:2f:0e:7b:af:21:50:8e:38:9a:3d:
23:4c:f4:d0:0f:f0:d5:e9:ef:90:e6:db:31:2a:8c:
b8:95:1b:d0:d9:60:27:95:77:23:9d:a8:2f:19:79:
c9:b4:71:fe:d8:3a:c8:1f:21:c3:78:c5:22:09:43:
3e:64:b9:2b:91:1f:b7:38:4e:f8:6c:a3:40:b1:b1:
6c:b3:34:38:00:76:9d:72:91:d1:48:15:73:dd:02:
aa:03:1d:20:73:4c:eb:be:4a:c8:24:7b:fd:e1:97:
7c:64:d0:97:e6:d3:07:95:39:83:9f:ec:01:50:81:
d0:64:9c:a8:44:ee:46:6b:7b:7c:44:b7:d8:56:ff:
5e:d8:02:31:e9:45:12:e0:10:a5:d2:2c:ab:2e:36:
01:af:4a:b6:02:22:71:a9:cc:eb:19:1a:41:0a:6b:
70:c6:50:c9:0e:a1:33:a1:f0:d8:b5:0f:d2:8d:46:
15:ef:b1:99:2c:5a:90:15:0c:06:03:71:25:d0:c8:
4a:90:88:26:3e:e4:f5:f0:49:e5:15:39:e8:bc:1b:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8E:75:83:EC:34:84:A6:1E:BA:23:D6:0A:EA:36:42:67:34:28:58
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4a:54:0d:d0:13:a0:d8:0a:c8:19:9e:eb:cd:29:a5:26:ca:
3b:cf:16:41:74:9c:7e:86:96:68:0a:df:6d:e2:fd:7b:63:d2:
42:56:f9:0c:b2:9f:9e:3d:f9:18:ea:16:70:1c:7e:6d:a4:ba:
29:59:44:ea:65:87:cf:06:16:da:9e:28:34:0f:f5:06:88:5d:
83:e9:59:4e:35:17:df:c2:bf:48:d6:7c:c8:2f:04:05:4e:d4:
d4:41:bd:d8:7f:df:76:32:6c:c7:b8:eb:33:13:08:e8:0c:2b:
49:42:b9:38:ab:6d:6f:e3:2a:62:c0:3f:6c:ec:d0:c9:62:6c:
e5:07:24:ea:14:c4:54:e6:be:df:30:58:77:5e:7f:1c:7c:42:
09:3d:e5:db:1e:64:9c:17:69:5f:f1:f2:83:25:29:1a:b5:d4:
19:0a:33:8b:b5:42:72:d2:16:47:05:21:9e:7f:0e:23:6b:9e:
5c:73:45:bc:14:5b:f1:32:4b:46:98:cb:1e:a2:dc:17:77:b0:
32:3e:c5:ab:b7:4f:5d:6a:a1:62:a8:dc:2f:12:0a:d3:23:68:
02:1f:85:7a:f5:78:69:d7:95:34:c2:f7:44:4e:97:53:cd:c6:
e5:b3:d3:a1:a4:96:a0:c4:64:e4:f4:8f:c7:c2:24:dc:4c:fc:
9e:a4:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:48 2025 by rpki-client