Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: dC9mW/8fQmetoC10BpECzfz23uiNptFlmdqsgzT3sbc=
Subject key identifier: 99:41:A2:7B:32:BA:DE:E9:9B:C3:80:0F:5A:FB:40:39:B6:89:0F:6D
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 0198560E75909C99A8C47D0F056CDFB1DD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 160C
Signing time: Tue 29 Jul 2025 12:00:44 +0000
Manifest this update: Tue 29 Jul 2025 12:00:44 +0000
Manifest next update: Wed 30 Jul 2025 12:00:44 +0000
Files and hashes: 1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: zhk9LzwIz/K6h+vNHWXuYTl1WNSZMec6zBE7q+pfx88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:75:90:9c:99:a8:c4:7d:0f:05:6c:df:b1:dd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Jul 29 12:00:44 2025 GMT
Not After : Jul 30 12:00:44 2025 GMT
Subject: CN=9941a27b32badee99bc3800f5afb4039b6890f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:24:31:b9:97:11:b5:8a:a3:04:69:e2:46:
da:39:3b:f7:c6:e5:9d:01:fa:d3:01:51:b9:a4:59:
96:ab:97:9f:3f:46:05:af:f4:47:57:ce:2c:72:0b:
15:06:ba:08:dd:55:42:9b:fb:c4:61:ef:da:9b:3a:
3d:e5:5d:61:c0:06:5f:22:23:24:f9:42:47:74:3f:
f5:62:45:65:eb:ae:9a:57:b7:e9:01:27:22:62:5b:
ab:06:2e:f8:2f:43:4d:ea:23:39:18:ed:0e:6b:26:
6f:38:14:a9:6d:82:b5:f7:0a:10:ba:2f:9a:91:20:
8e:ed:87:44:63:e2:15:a2:bf:2a:d6:7c:bc:4f:09:
06:58:7c:3f:8f:d4:db:f7:8d:30:87:e9:f7:1a:f4:
46:5e:45:7a:7d:5a:d2:bd:13:2d:ad:e1:3b:9d:9e:
67:ef:d8:7c:bc:7f:e4:fa:ba:64:00:a8:8b:e2:31:
b7:38:35:a7:34:4e:a3:81:a5:67:d4:98:22:93:ca:
f7:2d:c5:af:cb:27:d3:6d:18:34:7e:80:e9:b8:0b:
37:e8:5a:ac:ad:2e:47:35:8b:60:59:e8:8c:7b:ab:
1d:94:2d:44:95:03:07:87:26:d3:58:93:9f:aa:6e:
b9:f7:f0:f6:34:4f:36:a3:ff:c9:0b:83:37:90:4a:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:41:A2:7B:32:BA:DE:E9:9B:C3:80:0F:5A:FB:40:39:B6:89:0F:6D
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:84:73:a7:b1:d3:b9:04:64:5e:c7:e8:78:48:3b:f6:57:46:
62:df:95:e4:17:b8:29:fb:77:fc:99:61:da:53:0f:06:db:89:
fb:02:9e:1c:1f:9f:f7:32:d4:e9:93:d5:9c:b6:3c:48:40:25:
c0:e6:1a:3e:d8:af:f1:8c:e6:e0:00:29:c9:ba:81:43:1c:f4:
b5:6f:59:7d:68:a4:37:9b:70:8d:2d:33:c1:5d:e2:fd:e1:a1:
0f:25:c4:b1:7a:11:30:27:2a:6b:77:a1:d6:be:ef:e1:d2:a9:
1d:3c:1c:90:f3:8c:5e:a1:c2:15:9e:f7:74:d3:00:a4:17:c8:
1d:fc:98:e4:27:f9:d7:ea:2d:35:d0:86:19:c7:c3:d4:52:ad:
03:7b:a6:b7:e3:70:5a:b4:02:80:d0:d2:8f:cf:e5:0b:96:3e:
9d:0b:da:d4:63:66:7a:72:2f:19:21:21:d8:45:33:e0:e0:ae:
4c:6b:84:04:2e:73:e8:19:3c:4f:45:a6:26:9b:d1:dd:ab:af:
b7:ae:af:f2:9f:76:64:38:06:4d:7f:93:99:eb:67:33:f1:32:
a7:be:a5:55:54:e1:b7:41:33:10:16:3f:8c:b7:1e:ad:ae:b7:
2a:ac:d0:0b:1a:40:f9:d7:6f:15:07:eb:d8:80:9a:51:f4:c8:
ca:6a:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:12 2025 by rpki-client