Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: xkXl53ikDUFIKvtKZBcxH+YcCnIYkSHNd5VBnHaxzDk=
Subject key identifier: 4D:A7:26:71:72:7A:38:B8:63:A8:29:69:3A:82:0D:7B:D5:BF:96:44
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 01985C10928C122E50716421F42E1429C9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 160B
Signing time: Wed 30 Jul 2025 16:00:46 +0000
Manifest this update: Wed 30 Jul 2025 16:00:46 +0000
Manifest next update: Thu 31 Jul 2025 16:00:46 +0000
Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=)
2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: 2Q7xyHljAK7/snqttReLwSHtDEMHwUEqobo22LxaZRc=)
3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:10:92:8c:12:2e:50:71:64:21:f4:2e:14:29:c9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jul 30 16:00:46 2025 GMT
Not After : Jul 31 16:00:46 2025 GMT
Subject: CN=4da72671727a38b863a829693a820d7bd5bf9644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:ff:93:1e:a8:60:b2:f2:46:d3:d7:91:67:
46:27:ed:50:e0:fe:ec:c8:4e:de:4d:b5:15:a1:07:
99:52:c5:3d:a9:a4:81:a9:4a:bb:12:b5:10:59:f8:
f5:2f:cb:64:76:a2:d0:c1:9b:c3:42:8e:13:27:38:
0d:54:ab:40:86:7b:55:c2:5d:45:d0:78:6e:ca:db:
51:5f:d5:fa:e7:e2:de:e1:7b:ed:0f:2e:9f:70:af:
55:0b:ff:cc:f0:50:5c:7d:61:fb:44:27:5f:3f:e2:
a5:a0:2e:a6:95:35:d2:91:1a:3e:83:c2:2c:0d:c9:
27:97:44:bc:a9:4f:c1:ba:e4:33:33:12:8e:64:d5:
8f:5f:ec:4b:c1:b2:e8:c2:39:ed:89:65:c4:7c:ca:
71:80:47:f9:42:e3:a5:10:6e:13:5c:7b:8c:ff:59:
f8:17:78:cc:ff:41:5c:fd:13:3f:c1:16:9c:15:08:
fb:c8:7a:99:2b:bf:86:33:8a:00:7c:9b:17:11:00:
44:74:63:f9:ad:e3:c9:f0:c6:66:8c:79:40:2b:0f:
94:c6:c0:5f:32:a1:b6:25:22:c4:3b:05:2a:e4:3f:
f4:1a:9e:33:09:cc:6f:f6:aa:e8:09:d3:7c:3e:b8:
2e:e4:60:b5:14:ed:20:d7:b4:58:90:00:be:57:e4:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:26:71:72:7A:38:B8:63:A8:29:69:3A:82:0D:7B:D5:BF:96:44
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:91:41:79:1e:3e:69:3e:1f:54:77:df:2c:61:60:56:9c:b5:
21:7a:b4:ab:84:aa:53:de:78:24:b3:51:1c:f9:8b:19:6d:6f:
89:dd:d7:33:ba:f9:47:9b:1d:82:01:11:f9:25:6d:3c:e7:a4:
c6:48:36:22:54:53:70:93:13:5e:d6:ae:57:10:15:44:bb:f5:
09:bb:31:3b:f7:c8:aa:36:d3:12:93:88:28:aa:41:31:f2:f7:
3d:74:dc:ff:9f:23:69:38:90:2f:c6:e2:00:3c:21:6b:ea:e8:
6d:e5:18:9a:6a:cc:17:09:66:9c:dc:29:25:ce:2c:9b:32:e8:
bb:a6:c5:22:51:ae:c2:46:cd:52:84:50:9c:8b:2e:94:ed:7c:
1f:3b:75:b6:26:86:9e:62:48:cd:fc:52:6f:de:39:f0:95:56:
b9:d8:4e:b2:bc:29:6c:fa:58:61:2f:b9:97:83:99:8e:2f:c2:
5f:63:05:cc:66:44:60:14:7a:40:ae:8c:0f:f0:6a:b2:1a:91:
d8:f8:2c:3d:1a:ce:4a:d6:b8:b2:99:ec:11:26:42:98:31:5b:
6d:12:8c:ee:fe:68:74:4e:a8:82:6d:7b:a2:7b:81:53:ee:7a:
f7:ff:3d:fd:fb:0c:1b:71:11:72:51:ff:1f:01:04:7b:4c:d1:
b5:89:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 21:28:36 2025 by rpki-client