Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: QZTZXNDztZn4Oh9DiIjsDFYiu5aj58CrepMTrpfyS+s=
Subject key identifier: 47:0F:B7:20:92:9A:73:51:76:C7:2C:C6:EE:82:49:DC:46:28:27:7C
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 0198D6610B40B82DB2B4CC356F9E11037BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:20 +0000
Manifest this update: Sat 23 Aug 2025 10:02:20 +0000
Manifest next update: Sun 24 Aug 2025 10:02:20 +0000
Files and hashes: 1: OiIBQ74SHEVkT-8PoCX8Cy-Yivo.roa (hash: W/4g1y46KUHpbD2tJe93lGZ8b+4RqJt+o9NgZvpLShw=)
2: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (hash: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: zwyN7BDvSdELRyafrLFtmEKt5j0w8BtMBRq2JVAM5pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0b:40:b8:2d:b2:b4:cc:35:6f:9e:11:03:7b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Aug 23 10:02:20 2025 GMT
Not After : Aug 24 10:02:20 2025 GMT
Subject: CN=470fb720929a735176c72cc6ee8249dc4628277c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:95:5a:af:0d:5e:4a:21:f3:4d:df:6e:da:
f3:4a:65:34:e0:05:bb:c5:0b:7e:10:b5:90:a9:bc:
e9:d6:e2:d8:db:76:41:d6:f5:58:11:47:54:84:10:
19:10:f6:1b:c0:be:7d:8b:e9:93:b2:99:e8:09:4a:
21:68:eb:41:14:a5:6e:24:2d:89:3d:6a:98:f7:0e:
6a:a3:69:f7:d0:47:e7:a7:63:10:a7:99:15:14:3d:
a3:47:dd:96:31:02:d9:ef:8f:27:92:45:e0:a6:ec:
b8:99:eb:fb:67:15:f3:8d:de:87:eb:d5:ce:fd:dd:
c4:ca:4d:86:72:05:25:ec:13:2d:ef:49:17:34:71:
17:72:b9:0a:9c:29:2c:1b:fd:42:0b:04:03:bb:88:
64:56:32:73:bb:49:f5:17:b3:d3:cf:e5:ac:ba:19:
01:eb:5a:1e:e8:00:e1:d6:ed:cb:8f:6a:37:b7:ba:
e3:1e:00:94:71:a4:f3:45:89:8c:a9:44:95:ec:09:
ae:55:21:e0:18:5b:5c:47:17:0e:d6:13:1e:1b:5f:
cd:ed:60:6b:c3:99:db:56:90:a9:66:8d:f6:73:84:
5e:ef:0e:d8:2a:e4:41:ea:56:a7:cf:d5:0f:23:c7:
74:da:de:4b:98:74:da:87:7b:52:f2:9f:ed:1d:f9:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0F:B7:20:92:9A:73:51:76:C7:2C:C6:EE:82:49:DC:46:28:27:7C
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:06:43:61:26:10:e9:8a:05:44:ec:8f:c5:13:6d:a2:51:17:
3f:7a:f3:a2:9b:66:be:0f:6a:01:7b:3b:24:58:22:98:ef:7d:
32:48:90:c3:5b:c3:3d:d9:bb:2b:39:f0:50:08:3f:39:a0:c0:
84:66:25:52:4b:0e:d2:61:ad:c1:96:21:99:08:cc:b3:53:bc:
4e:bb:60:87:49:8a:3f:d0:28:d1:2b:97:40:6c:e2:5c:04:56:
c3:09:9a:40:a5:90:8b:37:23:6b:e2:8f:7f:81:d1:ff:85:04:
df:4d:93:8a:bd:7c:93:bc:ca:b2:0c:16:eb:5b:39:27:1e:a6:
26:86:f1:6a:6c:d3:45:86:d2:69:36:cb:38:83:80:5b:35:5f:
59:60:fc:eb:f9:44:23:bf:01:02:8c:c9:dd:6f:ef:a2:9f:a8:
58:f1:9b:fe:e6:10:b6:a1:a7:33:57:57:b6:b0:bf:60:94:b6:
89:b5:11:6d:21:71:ea:6f:71:bd:d3:70:e5:b0:36:28:ea:62:
49:34:34:05:14:72:be:f5:8d:e0:8e:e6:67:72:6b:d8:a8:55:
71:c4:ed:be:29:fe:9e:18:63:35:c6:6d:7e:b9:08:12:94:61:
e9:eb:76:16:9d:74:f4:b4:7f:0d:c7:4a:71:4d:a7:3d:29:30:
38:ee:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:11 2025 by rpki-client