Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: pguHGEpSl/Joy+nTvKtfJNvl3xqtbL6e+AkrW44Jluc=
Subject key identifier: A5:64:E4:BA:45:A7:2F:E3:D3:83:28:6B:DF:04:3C:14:00:EF:89:73
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 01984A41548518802791DBF878A99BB8E756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0652
Signing time: Sun 27 Jul 2025 05:00:51 +0000
Manifest this update: Sun 27 Jul 2025 05:00:51 +0000
Manifest next update: Mon 28 Jul 2025 05:00:51 +0000
Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: BPr49RqmVXrWS4g8xmsLo29A1TsL1C3tctN6uCvu5sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:54:85:18:80:27:91:db:f8:78:a9:9b:b8:e7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Jul 27 05:00:51 2025 GMT
Not After : Jul 28 05:00:51 2025 GMT
Subject: CN=a564e4ba45a72fe3d383286bdf043c1400ef8973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:ed:9f:b7:54:5a:55:59:0c:b3:4e:3c:9e:
03:2a:98:a6:6a:85:21:02:8b:61:07:c7:9c:7f:91:
3b:37:57:49:5f:89:d2:a5:e8:2b:2f:01:d3:e7:74:
47:05:62:ae:b3:54:02:ae:29:83:fa:bf:22:a5:1b:
ae:18:01:ea:69:5d:b4:ff:ed:9a:99:57:8a:81:47:
9d:82:13:30:4d:f7:9d:82:dc:78:be:2f:2a:d9:59:
d1:db:6e:b7:41:30:11:68:50:dd:b5:c1:9e:4b:9b:
07:15:af:41:b8:47:ba:ee:20:50:94:0b:22:15:97:
ff:b6:7d:f4:65:77:ad:3c:94:65:15:03:d4:6f:4f:
f6:be:53:8f:3b:fc:2c:b2:65:e6:40:d2:35:51:73:
5d:eb:9f:84:b1:00:c8:ae:fb:22:08:02:1f:c6:d5:
4c:ae:cf:ec:c5:58:cb:94:5e:cf:4e:04:c1:ac:32:
6f:5a:d1:b3:36:ef:38:17:00:71:a3:37:cf:5a:16:
33:ed:00:ca:ef:5c:fe:5d:0d:bd:f2:92:04:fa:af:
52:de:d6:28:b9:9c:34:2c:0f:75:14:bf:cb:7c:e2:
b9:6a:56:95:ee:cb:d2:5a:e6:9e:b1:a3:8f:cc:79:
48:f5:8b:57:6b:84:6b:98:aa:4c:a4:be:f9:42:87:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:64:E4:BA:45:A7:2F:E3:D3:83:28:6B:DF:04:3C:14:00:EF:89:73
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:05:3d:00:13:43:80:bf:a1:b6:cb:38:c7:25:ab:17:7c:de:
b0:10:5d:17:15:40:c2:45:24:69:85:23:ef:93:74:3b:5e:fb:
69:09:5a:8f:6d:b5:17:c6:27:0a:b5:24:3e:2d:c6:b1:bc:eb:
26:e1:78:38:3c:7b:76:ab:fb:36:17:9d:54:7a:3b:13:b4:1b:
21:39:c9:4d:d3:6d:82:ae:d2:91:b4:0c:c5:0f:64:67:c0:cd:
95:88:e4:b0:c4:b3:d4:c1:76:e8:76:10:fa:0a:34:e5:97:da:
68:18:bc:14:9f:ce:ce:b0:8e:68:02:27:1a:75:a8:30:2c:a4:
00:f5:c9:e7:ef:1f:ec:53:f6:ef:7c:59:ff:16:50:22:e0:3c:
c7:27:6e:f3:bf:e8:aa:10:e4:62:ff:d3:8b:0b:29:ce:75:e9:
9e:8d:ed:22:b2:d8:94:5c:69:02:86:f5:4b:10:7a:e7:59:4a:
e4:d9:c5:c6:17:1a:6b:aa:a1:d0:69:20:4f:cc:ff:77:48:3f:
83:e8:22:65:ad:b4:d0:ed:f7:1f:4d:17:a1:75:e8:52:ff:f4:
d5:e9:d2:d5:38:5c:0c:8d:2b:49:14:58:ad:16:cb:d2:be:a7:
d5:8f:4a:7c:81:b5:22:36:11:f1:92:66:9d:0f:ec:24:9a:92:
4f:44:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:57 2025 by rpki-client