Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: d5bIrmZF1YGOw+fmESO/G66N8GyLaeeSKWC2P3fXbsc=
Subject key identifier: D8:51:7C:6A:7D:4E:F9:B5:97:C0:19:82:05:65:DA:2C:7D:91:A6:9B
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 0198499C782C9AA1819A62BC0325618E6A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 160C
Signing time: Sun 27 Jul 2025 02:00:47 +0000
Manifest this update: Sun 27 Jul 2025 02:00:47 +0000
Manifest next update: Mon 28 Jul 2025 02:00:47 +0000
Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=)
2: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=)
3: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=)
4: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=)
5: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=)
6: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=)
7: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=)
8: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: zrntiLOay8Rta6wRbkFwNm/tRbuxYBXPw7uwae0uKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:78:2c:9a:a1:81:9a:62:bc:03:25:61:8e:6a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jul 27 02:00:47 2025 GMT
Not After : Jul 28 02:00:47 2025 GMT
Subject: CN=d8517c6a7d4ef9b597c019820565da2c7d91a69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:f6:be:fd:ca:f8:1e:4f:d9:56:1c:fe:cd:
26:c0:c2:5e:03:c1:18:83:5b:e0:4f:39:ae:f8:34:
16:ab:86:60:30:c2:31:f2:6f:54:b1:d4:ca:84:6e:
62:e2:f2:37:83:d3:2a:65:35:cc:b6:c0:01:11:68:
0c:1f:26:09:ae:34:fa:f4:ef:41:b0:60:72:3a:96:
c0:08:d6:ef:ff:66:d0:46:e6:05:cf:c0:94:da:f1:
fd:50:db:dd:d8:66:1c:7d:25:b2:98:2f:67:64:dc:
a1:62:2e:f5:40:ae:56:19:20:46:b7:90:9b:50:38:
2d:a9:40:62:4a:2a:e7:56:d6:4f:79:08:ef:b6:2b:
dc:2c:68:48:6e:c2:2f:5c:19:50:3e:06:92:99:f8:
56:b8:43:ee:6a:f1:e5:b2:29:fd:14:a9:34:fc:54:
71:ec:90:7d:35:60:1c:fd:79:06:25:b8:11:2a:a6:
8f:f7:73:c1:dc:cf:4f:4e:eb:4c:a1:83:24:fd:76:
ba:4b:dd:f7:86:33:57:52:66:c8:b8:40:b8:ae:77:
be:57:74:46:9a:67:93:7d:f5:cd:9a:df:df:d1:ae:
20:08:e6:f7:f9:0f:b5:da:1a:c3:1f:8e:5a:2c:b1:
d3:5c:50:a0:5e:cb:7c:33:3c:25:81:a8:e0:f0:8c:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:51:7C:6A:7D:4E:F9:B5:97:C0:19:82:05:65:DA:2C:7D:91:A6:9B
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e3:3c:97:88:ac:fb:d8:b5:95:35:34:c7:f2:0c:8f:e8:56:
48:e2:88:70:4f:b0:3e:1e:e2:47:6a:f1:ae:56:b1:3b:ec:a9:
a4:b0:a6:ec:1d:0b:46:0e:26:57:f8:ef:a1:ed:c3:38:cf:5e:
4a:89:f0:a3:7a:06:36:6e:c4:87:a3:89:84:95:78:71:55:c4:
42:bd:f3:f8:61:c4:99:cd:88:22:1f:49:35:35:bc:2f:aa:ae:
bb:bf:38:16:0d:4e:78:18:53:49:69:55:1f:6f:1d:9b:7d:13:
cc:8d:4e:de:0a:93:ea:35:14:94:b9:89:d6:e3:d9:be:2d:79:
8c:9f:a6:a2:4f:6e:b5:a2:33:e0:1b:7f:dc:32:ee:aa:6f:d9:
80:9f:01:5c:51:2d:44:c7:c0:1c:a3:bc:98:ae:56:55:65:9f:
c8:26:df:5c:3b:66:fc:95:83:d4:c1:7d:4a:c2:a2:6c:12:f4:
f4:52:a5:58:1c:b1:45:df:ca:32:b9:6d:de:de:91:88:12:7b:
7c:e1:6d:8e:e3:74:ad:c9:32:cd:03:26:32:18:21:9b:f7:a9:
27:5e:3e:04:96:be:c0:10:90:e7:56:8e:b1:75:21:b2:1a:d3:
66:16:2a:64:60:43:e0:12:44:32:f7:76:58:3a:f9:b5:1a:04:
32:75:4d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:17 2025 by rpki-client