Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: muYN+JIkIhrfS1spbmd5dQLVQ6YtzHOSLKuCytSWgAc=
Subject key identifier: D9:F6:30:68:D9:73:CB:A4:E8:86:20:32:FD:6F:DF:A4:0F:48:46:51
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 0198D6CDC0B1406B4DA699E22E2B338B5CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:01:05 +0000
Manifest this update: Sat 23 Aug 2025 12:01:05 +0000
Manifest next update: Sun 24 Aug 2025 12:01:05 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: iUu8UwYnvg0AsxZX8ik/Cb8m1fPgOchBVtVq1Z49Rx0=)
2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:c0:b1:40:6b:4d:a6:99:e2:2e:2b:33:8b:5c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Aug 23 12:01:05 2025 GMT
Not After : Aug 24 12:01:05 2025 GMT
Subject: CN=d9f63068d973cba4e8862032fd6fdfa40f484651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:6c:5c:5f:d5:7d:12:5f:07:d8:45:a6:48:
a4:eb:93:3d:f5:f7:05:53:b4:bc:7d:52:40:13:02:
6a:ad:3f:f9:9a:ba:a4:2a:34:ec:10:c6:a6:4f:a9:
f9:85:cb:88:3b:04:8b:0c:c3:cf:b0:43:3e:1c:e4:
ef:5e:9d:60:f2:0a:e3:1a:50:d7:8b:d1:05:80:41:
09:7a:0e:d0:7a:20:a6:85:0b:25:ad:73:29:5f:fc:
a3:b4:6a:e0:26:07:b7:67:95:30:c5:67:9d:04:5f:
3a:16:6f:ff:6a:1c:57:6c:a0:6d:e0:c3:74:c5:19:
64:6b:2e:77:72:db:bb:fd:41:33:a6:45:3d:ce:76:
87:89:4e:b8:42:e5:59:8a:da:85:17:3d:47:af:68:
d0:f3:17:90:61:d8:d8:e0:ef:35:c3:a6:55:53:32:
4b:f4:c3:26:20:f9:4e:8a:dc:56:16:37:f1:e3:75:
b5:17:8b:6c:ff:af:e4:ae:ad:25:21:0c:0c:9b:d8:
aa:34:f5:1a:7d:01:4c:9d:63:91:c4:58:d4:e1:4e:
fe:b3:3f:05:d0:ed:a7:40:f4:07:a1:46:68:08:bf:
75:7c:02:63:9f:a2:c4:3a:dd:f7:45:25:8c:be:e5:
57:99:7f:19:29:49:d0:9e:a3:9a:77:a8:66:15:53:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:30:68:D9:73:CB:A4:E8:86:20:32:FD:6F:DF:A4:0F:48:46:51
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f6:a4:00:63:17:87:a4:20:af:4b:1c:de:4f:e7:b9:aa:4c:
db:fd:13:ab:25:c0:53:6f:b3:e3:56:26:2e:be:e5:24:c5:7c:
5b:43:8e:e4:d8:ea:e8:8d:c8:ca:c8:5b:55:15:0d:ff:4e:19:
b7:03:26:83:6a:dd:9c:f5:5c:3b:69:b4:ec:b4:34:f9:34:65:
a7:ea:c0:fd:ea:fc:0b:fd:8f:c8:03:4e:15:ac:fe:be:20:64:
45:8f:5d:2c:26:b1:59:23:a0:67:d1:7b:be:c0:d6:f7:b5:12:
bf:44:98:47:3e:2d:f0:f7:77:c2:74:4e:41:f1:37:9d:27:27:
70:e6:21:9f:4a:09:d9:6f:3e:da:1e:e0:7b:56:6d:e6:03:7d:
67:ce:69:75:36:b7:e0:aa:cf:b5:10:5d:54:09:0a:23:51:cf:
f0:18:50:0b:b3:ff:f9:14:61:31:36:81:64:56:aa:48:1a:43:
6a:3e:b9:a2:0b:e7:86:c4:9d:d8:eb:ac:a9:2d:7a:1c:9a:ce:
3b:74:b4:d7:f7:42:18:5d:4b:33:bc:41:35:8c:aa:12:65:c6:
7b:5f:55:77:ae:4e:76:20:27:83:79:e7:19:be:2f:30:55:16:
cc:b8:67:05:0a:41:0f:6c:46:ce:1e:e1:94:df:1c:6d:c1:f2:
9f:a5:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:24 2025 by rpki-client