Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier: Rp5dfjzKXUbTd4gqMIyx++6Nqyy7IDvRoS/2y7J4mFs=
Subject key identifier: 13:18:85:07:38:E6:84:AE:B9:CD:EE:AC:A0:1A:4B:5D:97:DD:BB:EA
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 0198CACB094C78C76B01ACEC22CC20277711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number: 024D
Signing time: Thu 21 Aug 2025 04:02:40 +0000
Manifest this update: Thu 21 Aug 2025 04:02:40 +0000
Manifest next update: Fri 22 Aug 2025 04:02:40 +0000
Files and hashes: 1: 0pHcVGxKroxOni6LgFtqt0banSw.roa (hash: Q40CZpsU0+RiU4O4YQFtbp1L/7Yepswrm+UiOB95fSM=)
2: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: RwyrwNnMUjXrcxcV6B1OVoKMJ0kbY2zpdmnMly2MtpI=)
3: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (hash: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=)
4: 5O6iyLYqjxgK3EFjvB7TPec4vNc.roa (hash: +zN5xcfrGyrSvPX2aPdQntXT/Zvfyz7ULplVdMhrq7w=)
5: BnL626pcSJW84hvMFQ1G4Qrz04U.roa (hash: 3us+txzDTK3Uzjb5+hEvvCFMUnMHD1ygkmUal1BKvv4=)
6: DJsHawN4UfC7y3M-cvB8yQD8M34.roa (hash: 7erERMTFq4HfOI3TzB2K6MSVRmBE9HH5uCjfWAVLlJk=)
7: XcKo7ctmpUBqVfx0JPs9RsSZGCs.roa (hash: 1T8ZHVnMW4fbGLyFMTAkhaxOama9czmojEH2rCd/x6I=)
8: g31y-rKLvjosua_ERt6smuGZVHc.roa (hash: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=)
9: thQM3nYJ2iMAEyGEiwr2nwUUrgM.roa (hash: gexh5X3hJLfL9+D24IG2pZyXO9oAuE0CpLvpzwWH8kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 04:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:cb:09:4c:78:c7:6b:01:ac:ec:22:cc:20:27:77:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Aug 21 04:02:40 2025 GMT
Not After : Aug 22 04:02:40 2025 GMT
Subject: CN=1318850738e684aeb9cdeeaca01a4b5d97ddbbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:09:40:40:20:a5:e1:ff:9b:35:53:34:85:
ec:e5:96:c0:73:25:42:65:79:fc:fb:43:ce:6e:fd:
2b:dc:77:46:fe:4d:c7:6c:68:b4:c4:80:e5:e0:a5:
60:c0:68:68:58:ce:c7:48:09:ba:25:ee:52:66:a0:
9a:c2:1c:0d:21:9a:e8:b9:3e:83:bb:b5:ac:a8:c4:
e8:47:c7:4d:8f:94:51:fa:ab:d5:8f:64:55:ca:ff:
a9:1a:25:0f:f9:47:41:51:5a:4b:5c:4b:c3:23:52:
69:a6:54:f2:55:a4:b2:8b:21:e9:63:18:d6:6f:aa:
1e:82:2e:f6:a3:45:fe:cf:92:57:c4:9f:56:20:a7:
24:f4:2c:86:58:5b:21:ae:0f:52:b8:55:9c:e2:e7:
88:25:f7:df:5f:16:f4:01:b2:67:cc:20:d5:75:af:
00:6f:14:3c:33:1f:e9:39:c6:fc:95:85:20:e4:d9:
df:bb:b6:5c:69:80:80:75:3b:b3:80:32:11:af:b7:
90:5d:6c:ff:8c:90:36:9b:f0:d8:83:fc:90:cd:ef:
2a:9c:3a:4b:0a:ca:ba:13:d2:94:ea:4f:11:14:d4:
e2:14:a5:ee:3a:14:84:45:d8:7f:95:05:cd:27:94:
98:cf:cd:6b:23:f3:74:63:05:a7:fd:7e:c5:8f:6f:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:18:85:07:38:E6:84:AE:B9:CD:EE:AC:A0:1A:4B:5D:97:DD:BB:EA
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:85:43:89:30:b0:d3:97:71:8f:6f:2a:e4:ef:3f:10:bd:c5:
ec:c5:c5:28:13:63:15:1c:70:4c:8e:cf:21:d7:98:19:2c:f5:
6f:65:37:15:8c:b0:37:e1:55:c2:34:81:c3:d1:8a:6d:9e:ff:
25:22:26:82:39:7b:56:09:8e:3a:88:d9:bb:c0:d4:bd:e7:5c:
8d:7b:e8:46:82:83:96:c6:cc:2a:28:87:45:df:d5:5a:73:49:
b2:c4:76:59:02:0d:f9:3d:4c:2c:7f:06:f3:8b:ea:36:30:f6:
39:0d:8b:58:17:a0:2c:d5:8e:64:82:86:1c:59:ea:63:c2:88:
c7:0a:dd:86:54:ee:c2:57:cd:ee:f4:24:80:8f:c5:27:2c:94:
e4:ce:c9:2e:ab:9b:9a:b7:a1:f9:aa:2b:3f:f6:61:72:e7:8e:
0b:4a:d9:3b:52:35:6a:75:d7:15:66:dd:ef:bf:ec:5e:98:f8:
c8:38:88:82:42:02:e2:56:eb:ce:56:75:b5:1e:c2:53:47:e3:
16:7c:f5:bd:f2:af:a8:7b:68:6e:26:18:95:88:31:23:51:7c:
2d:9e:2f:d1:2c:fc:e6:84:75:97:49:42:83:99:3b:76:e0:96:
0f:80:bd:00:33:8a:b6:f0:66:8f:11:15:bb:cd:ab:63:a2:d4:
35:de:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:47:06 2025 by rpki-client