Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
File: ylF4miMTWsImjCKihWAKX5sFN3A.mft (raw, json)
Hash identifier: V4zrfPQdCStEX7W8rTidixFmt93rJWEuxaJ0+K3zSnU=
Subject key identifier: CE:70:92:4C:8A:D2:F6:CD:C3:30:E3:F0:BE:79:4A:F1:D6:2E:B6:38
Authority key identifier: CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
Certificate issuer: /CN=ca51789a23135ac2268c22a285600a5f9b053770
Certificate serial: 0198462D6E0BC84298BA7E7098BE3E42A699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
Manifest number: 1167
Signing time: Sat 26 Jul 2025 10:00:38 +0000
Manifest this update: Sat 26 Jul 2025 10:00:38 +0000
Manifest next update: Sun 27 Jul 2025 10:00:38 +0000
Files and hashes: 1: HAjyOzGCAwLUy5RivV8kbOy5Vu4.roa (hash: PsK5K2sZtAdplKvTizBojj+ePHRa8hE1Sr8s/0IgHpY=)
2: ylF4miMTWsImjCKihWAKX5sFN3A.crl (hash: 5NiVtt3sfnVTwF+V64DR/UitjsSD2koqXMM9cX+tSBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:6e:0b:c8:42:98:ba:7e:70:98:be:3e:42:a6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca51789a23135ac2268c22a285600a5f9b053770
Validity
Not Before: Jul 26 10:00:38 2025 GMT
Not After : Jul 27 10:00:38 2025 GMT
Subject: CN=ce70924c8ad2f6cdc330e3f0be794af1d62eb638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:5c:33:ed:37:de:d2:67:d7:3f:d7:16:35:
93:da:09:56:6b:8b:28:de:b2:ba:4f:2d:a9:03:f7:
5c:1c:d2:e3:ee:75:30:87:8d:14:ed:94:f2:9e:5f:
a7:4d:67:c3:26:18:03:3e:95:55:a5:63:b8:52:a1:
41:c2:03:b1:74:81:04:a5:8f:fa:56:5a:0d:64:e4:
80:94:38:5d:57:c8:5f:e6:f3:9f:c4:93:1b:86:17:
ea:95:ec:5c:fb:19:d4:c7:e6:57:7b:81:f2:db:20:
65:18:c8:2d:5b:08:16:c0:8b:7b:c8:80:78:01:dd:
e9:dd:a3:e6:22:84:93:ae:ef:ff:f5:15:01:0e:3e:
22:f4:70:29:99:b1:51:bb:2e:e1:05:74:f2:e8:95:
0c:24:2f:4d:b5:0e:02:19:f0:99:4d:59:51:7e:80:
e2:a8:b0:35:26:0d:eb:2e:49:bf:81:91:be:bd:b7:
72:0f:1b:27:b2:fe:50:23:ef:be:55:ce:65:2e:7a:
e4:b3:07:bd:c7:1c:86:e7:6b:28:6c:83:7e:b3:f3:
1e:80:d5:ef:fd:28:3d:c2:fc:ad:25:47:0b:ad:c1:
79:0c:af:3d:00:89:45:43:36:3d:ea:1b:1f:3d:b3:
68:bc:36:82:ea:0b:2a:aa:79:4f:9a:01:17:9d:1e:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:70:92:4C:8A:D2:F6:CD:C3:30:E3:F0:BE:79:4A:F1:D6:2E:B6:38
X509v3 Authority Key Identifier:
keyid:CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:68:a9:c4:5f:4c:03:bc:fe:9b:71:92:c6:72:62:a4:36:06:
20:26:dd:1b:44:00:4a:4d:f3:e2:c2:52:64:52:8d:80:72:d9:
1e:5e:2f:8d:3d:cf:9f:ab:61:a5:47:12:af:67:2d:9c:6c:74:
6e:43:12:dd:11:c2:e7:1c:ab:87:10:d4:53:10:45:da:2c:1c:
9a:cf:54:1d:c1:75:28:35:de:88:e5:aa:fb:d0:0b:5e:cc:70:
d2:79:b2:4a:cf:15:02:ff:c9:ab:34:c0:9e:05:6c:56:3e:ac:
01:54:00:b4:d8:79:e1:28:cf:ac:4a:b1:3c:a8:79:a5:4a:2f:
47:55:89:d1:5d:4c:57:37:f7:f8:1c:cd:40:4b:12:55:75:58:
8e:43:30:ef:e5:a9:d9:32:95:f7:c9:bc:31:6e:8c:ee:cb:b5:
a7:6f:ff:ed:52:72:84:12:0e:40:91:b0:24:fb:17:63:e2:0e:
6e:cb:be:02:dd:b3:51:68:b7:f3:df:06:4a:e2:25:e9:af:a9:
d8:c2:a9:61:f6:1f:d5:36:c8:52:09:c0:82:30:77:51:77:be:
aa:39:37:6b:af:99:a5:e3:60:93:dd:b4:88:25:2f:f2:ff:b8:
b2:e5:72:7a:0a:cf:06:0f:e5:e7:26:67:bd:f9:78:d7:be:d4:
b6:e9:ec:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:59:02 2025 by rpki-client