Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: 41oUFx7UqE4kEa/z/IHao5Y+B1ex3gjcl1sHzJxmF58=
Subject key identifier: 51:63:3E:69:CE:85:61:36:E7:1C:10:DF:80:35:16:F5:75:9D:70:70
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019848C04ADBF0E9A82AAB02A6EBCCC1F015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 1595
Signing time: Sat 26 Jul 2025 22:00:18 +0000
Manifest this update: Sat 26 Jul 2025 22:00:18 +0000
Manifest next update: Sun 27 Jul 2025 22:00:18 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: Yl7A6DfDieTxV1eAYbhKwcc3fYKC060j8E2RsRVsyBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:4a:db:f0:e9:a8:2a:ab:02:a6:eb:cc:c1:f0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Jul 26 22:00:18 2025 GMT
Not After : Jul 27 22:00:18 2025 GMT
Subject: CN=51633e69ce856136e71c10df803516f5759d7070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:58:89:f1:3f:62:97:95:59:7a:33:df:f6:
12:30:1e:e3:14:40:a1:01:ad:67:f2:22:f0:69:16:
3f:70:11:1d:ee:de:28:9b:9a:49:b5:5a:1d:4b:28:
70:e7:5a:d1:84:5e:c0:d7:89:14:5a:8e:b1:8b:c3:
c7:14:94:0a:d6:1c:4b:e1:86:83:2a:63:03:35:c8:
b6:60:37:8f:cc:a0:69:57:18:dd:be:91:f8:a9:03:
93:ba:f4:3d:6d:51:38:e0:e8:65:20:b2:da:50:91:
a1:6b:b8:b7:17:88:f3:8e:03:61:41:9f:b3:75:71:
37:af:90:98:71:da:35:f8:41:fa:e9:ec:29:34:9e:
69:19:5b:79:10:27:71:93:86:5d:45:a3:38:cb:31:
9a:a6:b1:3b:63:43:84:a2:6a:45:e1:c4:4d:fd:6b:
20:30:60:06:11:3a:be:e6:c3:3f:21:af:0a:52:14:
de:ee:3a:ff:5b:9c:b3:20:d9:82:06:bf:ad:5a:41:
2e:6b:62:3c:12:7d:73:6e:8f:46:53:74:7d:bf:d4:
a0:2d:a7:2a:e6:15:fb:b8:1f:c1:41:35:43:aa:75:
ba:c4:0c:3e:fc:a7:ab:ef:8e:11:08:c5:e4:3c:ab:
c3:cd:d9:84:ea:30:46:8b:03:ac:37:0c:a4:08:b3:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:63:3E:69:CE:85:61:36:E7:1C:10:DF:80:35:16:F5:75:9D:70:70
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1b:e0:29:46:1c:1e:6c:db:c9:ae:45:fb:8d:67:9f:22:54:
4b:90:38:66:cc:6a:ad:1d:a8:22:0a:52:55:cc:3a:b2:df:52:
eb:90:da:b0:89:a5:40:dc:3d:93:3a:c0:99:d4:2b:9e:fb:7c:
72:36:5a:db:c8:81:27:a3:b8:58:ff:05:5c:ac:a2:bc:ce:b7:
7e:ec:e1:b8:2a:93:69:1d:24:12:65:63:cd:b8:a2:d2:0b:30:
7f:6b:6b:1c:38:64:b4:d8:d8:dd:df:63:87:57:f0:bc:f2:9e:
73:af:85:16:58:a3:ca:47:a0:eb:c1:cc:90:4f:a2:36:23:65:
c8:85:95:cf:2e:b0:d3:78:05:2d:7f:c7:5d:d1:50:b3:9e:46:
47:f6:4a:3e:c2:e1:36:74:9d:af:bf:0f:0e:68:5c:24:05:21:
f8:66:15:9c:10:5f:17:82:e4:af:12:86:e8:cb:94:54:a3:8a:
3b:6f:03:0c:c4:37:25:50:6f:c4:7a:93:f4:96:9f:9f:9f:97:
c2:fd:ef:ec:74:b8:af:78:60:8e:61:0a:9b:f4:46:6f:51:c1:
24:9f:9c:4a:a7:82:7d:6a:93:8a:b5:c6:53:49:ee:50:b1:dd:
e5:84:f4:2b:38:65:03:05:90:47:85:cc:ea:0c:19:c3:cb:71:
09:d3:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:45:18 2025 by rpki-client