Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: Czh5D4PgEPrIucRDxeCMyuwLdSePph+j2VNIgTATZBI=
Subject key identifier: 55:5C:22:50:EE:AE:4D:A7:B7:44:24:09:96:DA:1B:14:03:8B:8A:C7
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 0198D5F1C488AADFA218E27BDD0FF7DCAD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
2: jECFVXifI2PML21GlnCLdBYUig0.roa (hash: 88xVe4+njhjbTw9qYTdy0ykyXz6/PEaM+aox252NmaU=)
3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: EnKAmWfG4guM/Z030x5Wogdt5nj3JzX1HFo1BNjma1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c4:88:aa:df:a2:18:e2:7b:dd:0f:f7:dc:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=555c2250eeae4da7b744240996da1b14038b8ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:95:e0:d4:6b:40:70:ce:7d:30:8f:b7:49:
75:c6:8e:a9:24:7c:f5:85:a1:25:78:0c:4e:3b:fa:
8c:dd:75:78:2b:5b:54:83:47:29:8a:78:3d:ba:31:
cd:e7:34:8c:23:1e:29:4b:08:a2:3d:4b:87:7a:0b:
a5:5e:7c:30:b1:c0:da:8a:85:32:63:e2:88:78:fb:
98:42:47:18:5b:c5:d4:37:4c:33:43:66:3a:7a:65:
d2:10:2c:bd:6f:a9:0a:7c:1e:2f:b8:d6:4e:fc:30:
32:5a:f2:f7:79:3a:bb:dd:b1:f4:75:0e:8f:4d:6f:
69:63:1f:ec:f6:b2:ae:bb:9c:44:48:e9:d1:ed:71:
96:7a:55:da:f2:ac:b1:67:8b:1c:d5:0d:35:93:d8:
e1:74:a6:6a:63:68:71:a5:16:91:a4:7b:f9:55:c0:
2b:28:2f:f3:66:08:08:87:90:16:51:28:fd:e4:aa:
43:25:1f:c0:96:7e:39:11:81:43:23:4e:77:d7:3a:
9c:80:e9:bb:25:81:54:1d:6f:56:9c:43:d6:89:1e:
27:40:66:e5:e5:b1:66:0f:83:2c:eb:06:54:d3:23:
8f:20:4a:08:bb:66:5a:c3:79:71:00:98:ce:51:f5:
83:b5:6f:52:9a:71:fe:cc:a6:15:a5:5a:d1:1d:71:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5C:22:50:EE:AE:4D:A7:B7:44:24:09:96:DA:1B:14:03:8B:8A:C7
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b8:af:e2:e3:7b:13:c7:75:24:d6:e8:de:a4:dc:9b:ee:64:
c6:b4:fb:c7:03:55:b1:78:82:4c:ca:16:42:bf:52:cb:2a:12:
b4:e6:52:e4:a6:ab:20:1a:e8:12:1b:d1:ef:bf:27:7c:5c:33:
d6:65:fc:08:51:f6:5c:77:dd:93:e8:00:09:e2:1b:da:c0:d4:
aa:27:0d:0b:65:cf:39:d2:3a:f6:5c:c9:f8:3c:57:be:49:9d:
83:88:ce:ee:f2:e5:be:08:42:82:27:38:3d:b3:48:b9:e9:90:
a9:a6:09:48:88:ac:8c:5c:3d:18:f6:e1:47:1e:0d:9c:63:4e:
32:f6:5d:62:7d:81:98:38:1c:d6:32:c6:ec:83:fd:7b:32:5e:
a6:87:ef:a7:dc:b9:c2:bb:9f:be:6e:9e:17:89:92:09:63:f6:
82:6e:36:ba:2d:3d:da:c8:8f:7c:82:aa:5f:40:c4:6b:65:13:
df:26:06:70:37:81:63:06:c5:a7:8c:c0:f9:86:31:90:37:a9:
d9:1c:13:ff:eb:c8:63:f4:c9:46:df:45:e2:98:f2:0b:e9:f3:
2e:43:04:29:63:d1:56:7f:7c:66:47:02:d9:33:9d:43:8b:12:
81:d0:f3:a5:a7:ef:2d:db:a1:71:ab:a1:88:48:53:a0:bd:23:
df:34:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:53 2025 by rpki-client