Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json)
Hash identifier: s7xSF2ZRwkVTdFmGf0ZGXXeHhVZgCeocwGmvHR655yc=
Subject key identifier: 03:38:19:55:6B:B5:E4:E5:39:1A:41:AD:84:05:75:11:E8:38:C6:B1
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 019916F5C2063E4E2499F8FC95B0E6FDF043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
Manifest number: 166F
Signing time: Thu 04 Sep 2025 23:00:28 +0000
Manifest this update: Thu 04 Sep 2025 23:00:28 +0000
Manifest next update: Fri 05 Sep 2025 23:00:28 +0000
Files and hashes: 1: b88Rl7W3m-ZgN433QwmekbZFP6o.roa (hash: NoA21W8ly2WxwAuP2zZWwmclSVAV10KXOOvNxpP+/rg=)
2: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: NmlMqgmyzYa5Ww6P2q7qHZ7nJDjALORrhijDeysnQMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:c2:06:3e:4e:24:99:f8:fc:95:b0:e6:fd:f0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Sep 4 23:00:28 2025 GMT
Not After : Sep 5 23:00:28 2025 GMT
Subject: CN=033819556bb5e4e5391a41ad84057511e838c6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:92:95:04:60:cf:92:dd:0f:0e:41:de:0c:
a7:b6:24:71:f3:ab:bc:fd:ac:69:40:6c:5d:b9:43:
8d:82:eb:01:3b:3d:26:74:ca:9b:a1:78:b3:f5:af:
83:17:7e:61:b1:2d:0e:49:73:88:9d:de:1f:9a:79:
06:2f:f3:2b:19:d1:27:83:af:a2:2f:ab:73:ad:fc:
59:d4:e5:6d:f4:c7:56:90:e1:5c:02:42:a1:8a:cc:
e8:72:dc:c4:a3:74:5d:d7:43:e2:b6:29:92:b9:13:
99:2b:3a:ec:96:35:83:c8:ea:8c:4f:35:43:ec:2a:
88:55:4f:c9:bd:a3:18:d1:d8:43:a2:3f:3d:4e:a2:
46:61:20:1c:36:61:c9:41:06:ff:96:cb:1f:55:c5:
ec:55:58:fc:74:9c:bd:73:c5:49:4c:d1:f7:4c:77:
d8:80:48:e3:b6:12:32:33:98:06:58:42:80:01:de:
42:db:94:1e:86:1c:01:36:ea:59:35:88:d2:fc:e6:
24:84:68:af:5a:87:02:32:d4:10:36:75:4e:3c:4a:
da:7e:7d:db:7c:f4:fc:73:7d:1b:2e:27:a8:e7:78:
73:51:3d:23:25:a5:de:1d:96:fc:1d:d4:54:3c:a5:
f0:3f:47:6d:d5:5e:0a:ec:b0:1c:a9:26:b5:e0:a5:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:38:19:55:6B:B5:E4:E5:39:1A:41:AD:84:05:75:11:E8:38:C6:B1
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:75:0b:7d:ec:4a:81:18:8a:56:d8:07:0e:c7:f4:2e:60:f9:
50:86:95:62:d3:73:9b:a7:fb:a9:cb:92:d4:42:8a:e9:7b:d8:
4c:28:e7:47:76:15:de:8d:82:82:54:59:dd:1f:14:69:20:df:
64:03:db:4b:f9:5b:eb:01:2c:6a:a7:eb:40:05:f3:01:cb:95:
7b:dc:f6:ee:b9:b7:47:52:9e:b1:ed:0a:6e:3c:f1:2a:55:51:
bf:25:f6:28:2f:68:34:db:53:fc:7a:34:77:18:bc:e2:da:39:
74:8f:c5:3d:b1:66:86:de:51:91:1a:62:c1:8d:3a:61:34:86:
b5:1f:a7:b9:34:f6:7b:68:78:96:6d:3f:2a:43:e3:83:38:eb:
eb:95:96:a3:c4:21:5b:e3:96:7a:81:32:a5:9d:ea:4a:b4:34:
46:51:cc:14:c7:bb:a3:cf:ab:2e:b2:aa:8c:40:59:ff:9f:f4:
8a:11:06:d8:b7:a5:a2:6e:20:45:2a:ae:cb:5e:63:60:1a:29:
02:1d:e2:26:db:5d:64:7a:9f:2f:ff:76:28:1b:9b:20:a1:1d:
8b:13:76:15:5d:24:12:e9:ed:32:7b:5f:73:5a:4a:26:ea:b0:
7b:d0:28:ba:f5:c3:6f:74:43:cd:a0:09:db:26:f5:1f:1f:df:
04:9f:d4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:29:30 2025 by rpki-client