
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
File: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft (raw, json)
Hash identifier: VZ5VHnNurla9GrxIz9l5H35JTJIgFL1nSXGn4gK4/J8=
Subject key identifier: C6:4F:89:59:19:AC:9A:31:99:E1:B8:82:7E:B2:B9:C7:C7:5F:C3:1E
Authority key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
Certificate issuer: /CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Certificate serial: 0198D65FAAD31B6118CA6057785459C95325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:50 +0000
Manifest this update: Sat 23 Aug 2025 10:00:50 +0000
Manifest next update: Sun 24 Aug 2025 10:00:50 +0000
Files and hashes: 1: BfRloUJHji-lEUaufwMc19LxiqE.roa (hash: 94Vq30eYX4ShhMgHZx9s+4a5DKBY3zN9CTPT6BVaH44=)
2: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl (hash: RrO0ZoVN47eTCyXf8MUn2YqCfMG/q00dshc3/1ojSC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:aa:d3:1b:61:18:ca:60:57:78:54:59:c9:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Validity
Not Before: Aug 23 10:00:50 2025 GMT
Not After : Aug 24 10:00:50 2025 GMT
Subject: CN=c64f895919ac9a3199e1b8827eb2b9c7c75fc31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:ab:61:89:3c:44:16:58:ed:b5:d1:69:25:
87:82:a0:9d:75:60:58:c5:2d:f7:2e:5a:1f:fc:59:
1c:bf:12:14:17:86:f8:65:4f:bd:21:22:10:ba:e7:
eb:f0:51:7c:4b:30:df:ff:35:4c:0a:89:5b:dc:79:
5b:a9:87:29:0e:0e:bb:ec:71:a5:ac:f6:a5:65:e6:
9a:00:bc:a5:7c:4d:ab:d0:f8:dc:77:af:f6:55:74:
80:f3:81:cf:28:51:a3:50:59:e6:fc:1c:a5:15:95:
a5:13:18:40:5d:84:4b:37:56:d3:32:da:b7:01:3e:
80:4b:51:96:21:16:17:d8:79:cd:b9:44:d9:47:76:
00:79:47:92:9f:58:ec:26:e4:ef:2d:aa:b4:0f:5a:
d9:8c:71:cb:8f:1d:37:38:89:07:73:31:3b:70:f5:
a2:9e:ce:3d:27:1f:40:03:8d:91:dd:5c:e4:12:61:
af:5a:b4:22:79:5e:05:04:57:1d:33:90:8c:e5:d7:
f5:0c:b0:91:65:78:30:9a:be:2a:d0:2b:24:87:73:
8f:7c:03:d9:af:5a:0c:b5:07:40:97:ee:de:be:90:
1e:a7:93:7d:fe:51:23:3c:a1:9b:42:16:0e:a9:70:
ff:33:04:6c:84:6e:22:b8:69:9a:6b:6b:f4:97:13:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4F:89:59:19:AC:9A:31:99:E1:B8:82:7E:B2:B9:C7:C7:5F:C3:1E
X509v3 Authority Key Identifier:
keyid:A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:63:8f:ee:97:ea:f6:79:f8:7a:fc:24:a0:1c:20:db:2b:7c:
c7:04:25:9c:0d:49:b7:a6:3b:65:fd:76:1e:08:f3:b6:9c:cc:
0c:42:c0:c7:54:2b:71:3f:04:fd:2f:90:d0:95:23:be:0f:c7:
13:c4:2e:1d:d6:30:3b:68:18:30:6b:8b:84:f3:69:30:7a:40:
ac:6c:0c:3a:3b:09:e9:9a:39:94:0d:06:52:7c:de:95:88:ac:
1c:82:d2:0f:88:20:2a:65:d5:4b:32:c7:91:2e:fe:2b:d9:c1:
c1:cd:41:94:a7:aa:d3:4a:6d:3d:e0:ae:6e:f1:5e:20:a4:a6:
77:02:85:0f:3f:c9:a3:c4:73:01:6b:7a:b4:e4:0b:a4:a8:62:
c5:b2:54:77:34:e5:8f:8e:49:e7:d1:f1:8d:13:63:0d:30:1c:
c8:6b:c0:c1:bd:b1:b4:9e:92:b2:a5:4d:7f:94:51:aa:f4:f4:
02:4e:47:4a:e5:f2:78:fa:7f:bb:37:7d:c5:c1:ce:f0:e2:42:
d1:26:08:05:fd:8a:be:27:d1:f5:dd:a3:35:a5:27:81:24:9b:
7c:ff:28:ba:2e:42:7e:f2:70:c5:01:cf:36:64:f8:cd:0f:0a:
83:44:05:d6:3b:67:2a:2c:0e:cf:cb:33:a9:24:2d:f9:30:93:
5e:7d:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:01 2025 by rpki-client