Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: zvRRGnDjcV/n9lMSimeeNNPvEY27fkSWu5MzB8ntI/0=
Subject key identifier: 9E:0A:AD:1F:AC:CE:E3:61:4A:BA:10:D3:C2:44:C9:81:0E:6D:06:DE
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 0198575865B0224A2D3E843DE22D3CF8E28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 18:01:07 +0000
Manifest this update: Tue 29 Jul 2025 18:01:07 +0000
Manifest next update: Wed 30 Jul 2025 18:01:07 +0000
Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: gyMHHD1dhVrD7OmnqkJC//TUYc/GT+Bq44Ce1f6PIvM=)
2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:58:65:b0:22:4a:2d:3e:84:3d:e2:2d:3c:f8:e2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Jul 29 18:01:07 2025 GMT
Not After : Jul 30 18:01:07 2025 GMT
Subject: CN=9e0aad1faccee3614aba10d3c244c9810e6d06de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:db:ff:74:ef:6a:68:bd:02:30:18:cf:6c:
d9:c0:10:29:14:a8:fd:10:df:3b:df:07:4c:74:2f:
03:fd:aa:82:18:51:12:91:c7:14:f5:cb:a7:6d:26:
51:ec:79:e1:28:93:12:c3:e6:90:17:4a:3e:eb:d7:
0a:3f:6b:5c:74:74:c8:86:00:9d:e5:80:b4:d2:b2:
14:79:2f:8f:b0:9e:28:9c:89:f5:a1:fe:a6:76:10:
9a:cf:9d:36:da:45:df:28:9b:d0:cb:91:61:48:1a:
84:f1:da:d9:0c:50:31:6b:d3:cb:e7:f0:46:12:97:
72:e2:f6:fd:f7:aa:fe:3d:89:ee:a5:e4:04:a6:f7:
e8:0c:be:98:31:7e:2e:c3:84:3b:34:a7:b1:ad:fc:
dc:20:82:54:32:07:ca:54:16:65:b5:92:04:9b:b2:
2f:03:e0:10:1d:1e:c0:e2:8c:10:ff:f2:64:31:db:
e1:f4:ef:ec:f3:1f:63:b4:86:97:97:80:49:9a:cd:
b8:b2:bd:19:6b:78:e7:42:9e:10:8d:12:68:0f:92:
d5:3e:7c:81:2f:dc:6a:b4:51:4a:8d:ad:26:c7:1c:
b4:82:c6:91:12:d1:3f:38:ca:cc:7b:9d:91:72:3e:
33:15:f3:ad:bf:2b:52:3d:ca:4c:7a:c3:1e:86:e8:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:AD:1F:AC:CE:E3:61:4A:BA:10:D3:C2:44:C9:81:0E:6D:06:DE
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:62:96:9f:49:d1:af:8b:f6:2c:57:bf:43:7b:8c:87:dc:ac:
28:bb:b5:10:9d:c3:00:28:53:52:77:8b:8a:16:22:5d:6b:34:
d1:29:d4:e3:29:25:6d:96:d7:be:0b:44:2b:e4:c1:59:bd:a7:
69:0b:d7:bb:c4:4c:bd:ce:7e:90:56:9e:1b:e5:1d:bd:41:84:
4e:71:ba:60:28:ad:85:54:74:22:8d:c8:4e:34:80:51:40:89:
3d:a5:4b:16:99:f1:99:f8:57:99:1d:01:0d:32:05:c3:2e:ff:
06:a7:e3:ca:aa:26:18:bd:b6:ce:01:df:d7:7d:e9:92:04:1e:
68:eb:1f:1b:05:50:98:a4:c7:ce:7a:af:a4:06:56:15:8d:3b:
2b:43:e2:7e:bb:e2:dd:e2:f8:7a:08:36:9f:06:1f:29:5a:14:
2e:ff:ec:1a:08:b9:82:6b:21:63:d5:39:6f:38:0c:55:3c:5d:
a7:c4:f3:1d:ec:62:03:45:43:77:72:dc:58:fb:02:45:a6:6d:
d4:ee:07:ff:d1:c1:8d:4c:ef:71:ba:29:18:8d:cb:f2:b9:0f:
b6:05:23:89:7b:d9:1e:a1:03:16:82:b6:93:d5:4a:4c:93:83:
46:8b:e6:0c:a0:bd:e7:ff:c5:5f:21:5a:37:3b:07:66:00:80:
bb:38:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:43:59 2025 by rpki-client