
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: VWtdy5NXl9d+BvMMKlcQaFvRGcbDRrGvlEC3vXaj8FQ=
Subject key identifier: 13:BC:F3:F4:3F:A2:69:B2:BC:2D:06:02:2F:E0:B8:23:87:3D:3E:C9
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 0198D7A9299D81A1E421B7DE2C1F3D7B30FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 16:00:44 +0000
Manifest this update: Sat 23 Aug 2025 16:00:44 +0000
Manifest next update: Sun 24 Aug 2025 16:00:44 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: G11tQGkJUumXLTCbAteHzn91xdrqg4jOqf8D2NtFqXM=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:29:9d:81:a1:e4:21:b7:de:2c:1f:3d:7b:30:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Aug 23 16:00:44 2025 GMT
Not After : Aug 24 16:00:44 2025 GMT
Subject: CN=13bcf3f43fa269b2bc2d06022fe0b823873d3ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:68:48:56:89:be:fe:03:08:5d:67:9a:f8:
fd:d2:2f:15:c0:6f:d2:46:a2:6b:28:db:8f:f1:d2:
a4:4a:4d:c8:a0:13:60:72:5e:64:4c:32:ce:96:d8:
45:68:8f:cd:19:ec:17:8e:73:7c:09:3b:a3:88:f4:
1e:a3:df:46:9e:83:af:e0:68:63:b8:31:8a:4f:6a:
f0:e8:a5:98:49:26:44:f8:31:9e:21:fa:63:7d:5f:
c4:31:1f:62:25:cd:6b:9f:4c:93:b6:ba:b3:54:bc:
f1:63:3d:4a:ef:bf:c4:d1:d5:ba:55:6a:cf:0a:33:
b6:5f:78:9d:72:0e:c4:4e:51:1f:4f:54:f9:96:d9:
bb:4a:f0:48:24:68:b9:66:46:aa:01:9c:88:b5:93:
6a:1f:c5:9c:c5:10:18:a4:29:b8:f3:c4:90:1a:29:
85:72:33:80:c7:4d:74:b6:03:d3:1b:36:36:b1:81:
58:ec:a9:c6:54:65:de:de:a6:bc:c7:59:0b:5c:92:
86:e5:29:5d:b7:d9:ff:a1:82:87:f4:e2:fd:25:24:
20:7c:11:33:0e:a0:4c:93:fc:cd:ce:a4:ee:9e:59:
f1:a4:1b:e0:38:d2:a8:52:9a:b5:84:b1:c3:40:09:
00:ce:0f:4f:78:a2:89:1a:dd:c5:db:8e:94:d0:9c:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BC:F3:F4:3F:A2:69:B2:BC:2D:06:02:2F:E0:B8:23:87:3D:3E:C9
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:51:1a:9e:86:2c:a6:92:00:b9:c2:98:a1:5b:c1:7b:c0:a1:
11:6c:18:f9:d1:72:41:80:f1:ea:73:9d:36:24:28:0f:fa:a4:
60:62:a2:98:0f:ae:de:ae:53:42:99:29:7d:6c:34:cc:b4:86:
9e:62:40:ed:cc:c3:23:56:b3:f3:28:57:66:3b:f8:a6:f1:7b:
5b:9d:15:05:19:62:21:aa:ca:c0:7a:21:90:ef:f4:c1:56:43:
0d:04:de:1a:95:f3:6c:ad:53:21:93:eb:5c:fd:22:8d:fb:c6:
27:d4:a1:98:24:72:3a:52:af:71:59:ab:b5:21:71:14:9d:41:
f3:66:6e:9a:23:35:96:2b:43:66:c4:ee:ca:19:7e:25:79:8a:
f0:5e:e6:ad:b4:ca:25:16:58:45:f5:7f:81:00:63:6a:1e:20:
38:f1:66:f9:67:48:bb:16:83:12:22:11:40:7b:e3:84:2c:ae:
19:4c:07:32:f7:2e:11:51:45:8d:f0:c6:e6:07:a5:49:95:91:
c3:96:e6:85:42:5f:1d:50:b8:55:97:65:30:45:e7:2c:01:e9:
c5:73:dd:60:18:0f:8e:92:f2:38:d1:66:de:23:de:a0:8a:d1:
f9:36:f6:ef:99:1e:ff:20:da:03:54:79:79:60:8d:02:7e:ed:
a7:1e:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:41 2025 by rpki-client