Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: 5R1QKxdeK1ohLAAb0MWaOu3JZc83GY5IZNXGmGkac+4=
Subject key identifier: DD:82:40:B8:3A:EB:74:E8:14:ED:A0:5C:2D:5B:0E:E1:BA:D9:2A:45
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 01985CB6E5DBB80D87CAA3DFECCB0C5A3A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 160E
Signing time: Wed 30 Jul 2025 19:02:26 +0000
Manifest this update: Wed 30 Jul 2025 19:02:26 +0000
Manifest next update: Thu 31 Jul 2025 19:02:26 +0000
Files and hashes: 1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: wfa3lxCjsZN2VsC0r4Nux3vBQIqyasTvXl1X1suL2vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 19:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:b6:e5:db:b8:0d:87:ca:a3:df:ec:cb:0c:5a:3a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Jul 30 19:02:26 2025 GMT
Not After : Jul 31 19:02:26 2025 GMT
Subject: CN=dd8240b83aeb74e814eda05c2d5b0ee1bad92a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:f5:68:5f:e7:7e:db:db:96:0b:22:6e:81:
14:7f:90:20:a6:ae:4d:5f:d9:ca:15:48:22:63:89:
bc:7d:cb:21:ee:27:c4:d2:b7:69:a1:88:c2:c7:53:
bf:89:ac:c9:f3:03:9e:65:69:7d:4e:ce:34:45:26:
08:1d:af:9d:1d:d8:34:33:7e:b4:c5:df:f4:07:aa:
84:d3:96:a2:be:85:7c:e3:dc:72:1c:a6:50:8d:ed:
3a:62:bf:ab:27:52:63:6d:a4:ca:14:43:a9:f5:15:
0b:77:bc:94:e2:23:eb:66:11:bd:e7:3d:dd:75:64:
7d:44:7e:c7:a7:25:01:f1:b2:a8:b8:45:b1:f8:17:
62:07:c8:20:5a:ee:eb:4a:59:96:ca:08:56:5a:c8:
4c:81:1f:29:3a:5d:f4:b7:7a:0d:49:a4:c1:6a:2b:
b2:d4:0b:07:cf:a5:e4:14:c0:32:f9:e9:db:f8:07:
7a:15:64:de:fa:34:cf:35:9f:43:6b:67:ce:88:0f:
9b:48:d0:53:e0:02:27:73:60:9f:61:1d:ec:a4:90:
f2:7d:2c:ad:23:14:01:46:04:86:b7:9c:89:55:0a:
38:e6:29:8e:95:8a:5f:4b:47:67:7f:80:bd:09:b1:
f0:fa:7e:48:7b:75:18:08:61:3f:6c:c0:c9:b8:76:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:40:B8:3A:EB:74:E8:14:ED:A0:5C:2D:5B:0E:E1:BA:D9:2A:45
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bc:9d:02:fc:07:b1:19:52:ad:fc:e0:0a:5a:5c:51:78:62:
5f:2c:a9:46:c8:c2:64:a6:f5:ea:0e:37:7c:a1:fd:5c:7a:8a:
73:06:52:ef:2d:5b:10:18:a8:d1:c5:53:0f:b1:fa:14:12:db:
9e:84:1e:55:6f:f5:c8:ce:c8:14:42:5c:aa:06:12:78:c8:e1:
f0:8e:39:20:bc:3b:29:39:dd:78:c6:2e:33:32:d1:0e:dd:08:
8f:4d:ba:1f:4b:9b:12:fa:b8:21:9a:e0:61:a5:8e:82:8b:58:
3b:f4:bb:93:7a:0b:f4:e2:5b:ad:81:5b:da:b4:92:3f:24:fb:
1c:4d:53:8d:25:e4:6d:fb:91:07:13:93:85:98:d6:dc:9a:88:
d4:c4:1b:84:cc:58:74:be:a1:a9:7a:1c:81:af:98:7b:ab:50:
47:67:37:9a:59:a1:62:ac:70:c8:49:ab:3d:bb:39:67:5e:8f:
cc:b9:9e:3a:8c:f5:c7:a6:dc:dc:28:ac:6d:73:dc:4b:14:55:
8d:01:41:2d:97:a9:85:e1:bd:79:88:8d:41:47:07:80:bc:74:
61:fa:51:cf:3c:a2:37:4d:4f:c0:fe:c7:29:8e:51:9e:97:ca:
5d:02:c7:b5:e6:42:93:47:bd:84:87:85:2a:a4:17:db:12:36:
0d:ef:f6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 03:47:19 2025 by rpki-client