Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: Hj+doRl7MD/6Gqt96kUNyaU0Dvf4YNoMSV6yplV2W5U=
Subject key identifier: 60:73:69:A6:AD:03:2A:44:ED:B9:DE:02:24:53:32:26:0D:69:0B:20
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 0198D583BE90101B627E3B51F9DF1F5BED95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:37 +0000
Manifest this update: Sat 23 Aug 2025 06:00:37 +0000
Manifest next update: Sun 24 Aug 2025 06:00:37 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: ddzuJKDdfBfD05pd5AAViQoA2Pc.roa (hash: 2lQWzIDIqMXuR/qxqLFrOSTAaFdBjF2vdhRCL0julW4=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: RjnDlXNzjoeSIlLdNyYpunRvhqppSUu/6a1yjazKWJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:be:90:10:1b:62:7e:3b:51:f9:df:1f:5b:ed:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Aug 23 06:00:37 2025 GMT
Not After : Aug 24 06:00:37 2025 GMT
Subject: CN=607369a6ad032a44edb9de02245332260d690b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:0c:48:cf:59:76:4d:3c:d0:5d:65:a9:59:
db:1b:de:ec:1b:28:e7:7d:f3:20:fe:a4:ad:0e:72:
5f:be:61:96:a9:f2:39:7b:a9:8c:e5:9a:9f:f9:a3:
8a:6a:4a:0b:8b:6a:2e:01:a3:8a:ed:3a:9f:0c:f7:
bd:d6:99:0c:1d:66:9d:f2:05:f0:9c:f7:c9:73:0b:
7b:01:f2:63:af:db:03:6a:34:54:8b:76:fc:cc:16:
37:bb:a4:b0:5d:7c:84:96:ee:24:f1:b5:5b:1e:dc:
cd:f7:c8:9c:eb:db:16:f1:f7:43:f5:b7:a8:dd:ce:
87:4d:4b:85:90:17:0a:b3:49:52:54:1f:e8:a4:4b:
a3:d9:e2:37:d3:36:1f:c8:62:57:e9:1b:9f:c4:ee:
28:85:57:b6:98:d6:62:d0:7b:e1:4c:5f:cb:f4:03:
4b:45:77:80:40:37:f8:ff:b9:0c:03:4b:c2:c1:04:
a2:50:65:bb:cc:bd:b4:02:9a:29:6e:d5:36:63:88:
bb:fb:26:f0:6c:d9:2e:2a:08:d5:ca:cc:39:f1:a1:
55:9f:12:9f:b4:15:8c:70:3c:54:a8:6d:fd:27:37:
b2:c5:0c:8c:63:a9:19:ff:68:b4:b0:67:e0:0e:81:
de:9e:19:49:27:04:e5:73:6c:d4:6a:59:b5:57:eb:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:69:A6:AD:03:2A:44:ED:B9:DE:02:24:53:32:26:0D:69:0B:20
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:fe:68:63:c3:64:1b:d8:30:84:77:c2:af:87:e9:a6:3b:
72:2c:0c:01:58:e8:e4:40:32:25:c5:e8:dc:a5:a2:34:80:ed:
b5:8b:df:a6:65:ad:3f:6d:e5:46:c2:69:1f:29:53:d2:eb:81:
eb:cd:4a:c2:9a:26:1d:94:39:19:9b:bc:9c:f7:0f:1b:be:81:
f6:09:87:9e:14:bd:27:e3:15:79:c7:4c:c3:02:41:2e:26:eb:
da:22:b9:75:76:e6:07:86:26:cf:a2:60:36:46:51:2d:a5:63:
1e:56:ae:66:89:98:c8:0b:32:e4:8a:ca:b5:00:99:93:53:b9:
6c:15:e8:49:14:28:07:b8:f7:6b:96:21:ff:0b:8b:2e:aa:1a:
a8:ed:e9:1c:ae:25:a5:90:4b:c5:05:70:b5:f6:79:55:7f:22:
7a:d1:e6:c6:6f:7e:ab:6a:37:c5:b3:22:b0:bb:46:30:52:c1:
47:ef:46:88:63:25:65:71:b8:ef:39:fd:5f:aa:ea:35:bb:94:
4d:32:4d:a8:f3:6d:27:93:ae:e6:5d:77:60:8c:67:29:81:23:
27:99:51:3e:e5:4e:5c:33:4f:4f:b5:18:20:4f:2c:df:fe:46:
80:b2:69:7c:20:b1:9f:c9:61:4a:6c:fe:e4:6b:1d:fb:5c:d3:
b6:ac:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:50 2025 by rpki-client