Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
File: yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json)
Hash identifier: ruuxnIK6c1c3+pGBelMmB6cPoIPhO0nsweKNzzesPI8=
Subject key identifier: 64:E9:E6:85:EC:20:08:2E:7A:64:B3:0A:79:18:2E:B1:78:B3:D7:71
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 01983804D8F5832858E0AC487594E1D0305A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
Manifest number: 1600
Signing time: Wed 23 Jul 2025 16:01:38 +0000
Manifest this update: Wed 23 Jul 2025 16:01:38 +0000
Manifest next update: Thu 24 Jul 2025 16:01:38 +0000
Files and hashes: 1: Db8DTjUYkYFq1VL2utnrt9ZhoOQ.roa (hash: d9GgydKG9uk/HAxIswAdFFBoSDorEX71FTaOERwLhzg=)
2: RfiogXB75ZZcw60YgsMcLXMGreQ.roa (hash: CxagJfgQ+HRjqYYAQUHG4nzSSm5GU9hHUNpe0/HqHLA=)
3: Vsvw7zSK2cjlfLBPzsEjNibepw0.roa (hash: fMTdJF0J/U/sST/3YzLYOWjYa8T84ONedHLdQ86kfmA=)
4: WTl9wt0Rp1_SP8V72BWndXzvVXk.roa (hash: BI9xuqlMchALIUZfnOAm1MAIdvbV4MZUCOFrf3rfZgA=)
5: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: Af3Ul/60QknCtCFxJNjgC7nAqAnS3ryIbD+AoVB0UtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:d8:f5:83:28:58:e0:ac:48:75:94:e1:d0:30:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Jul 23 16:01:38 2025 GMT
Not After : Jul 24 16:01:38 2025 GMT
Subject: CN=64e9e685ec20082e7a64b30a79182eb178b3d771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:e8:a2:b8:b3:59:8b:0f:09:93:4c:a8:e2:
69:e6:e7:61:f2:a6:7d:1d:47:f9:56:bb:19:d5:c6:
38:a8:98:fd:b8:5f:6f:c5:f7:1f:3e:47:eb:ed:9d:
0b:9e:32:c6:04:a7:a9:0a:a1:07:8d:40:05:21:16:
e2:94:76:11:16:93:bf:02:64:2d:28:90:44:c9:20:
d8:30:9e:a0:0e:1f:40:a8:39:4c:11:e3:21:a2:59:
10:9f:fc:65:68:fa:f6:f7:a6:62:85:4d:40:a2:27:
09:5e:4d:d8:e7:b0:73:2c:db:89:df:04:28:2d:42:
88:32:49:89:23:2b:a1:38:7f:e4:f1:1e:e7:dc:4e:
c4:e4:f4:32:7e:97:8e:47:04:78:2d:64:19:2c:35:
6f:b2:11:d3:6d:4c:6c:ee:95:6e:0a:9b:19:a8:e4:
f9:cf:bf:f8:c8:ea:2f:5a:2d:33:79:a9:ba:bc:68:
08:cc:4c:69:5b:ac:a1:3c:65:32:f6:d0:e0:55:27:
8a:be:c2:78:15:d8:a3:aa:d1:ba:e9:f4:2c:fc:7d:
a4:9a:81:ac:80:03:6c:5e:b1:cb:cb:c7:d4:01:8a:
f9:55:20:58:ba:18:17:b4:6f:ae:69:a3:76:b3:1b:
0f:7f:8b:af:4a:64:34:92:c5:93:8b:9e:8e:02:51:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E9:E6:85:EC:20:08:2E:7A:64:B3:0A:79:18:2E:B1:78:B3:D7:71
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c0:b8:11:be:dd:fe:d7:f1:00:ea:b4:34:d5:a5:4f:9b:c5:
51:12:9c:1f:71:e2:d5:ec:72:fd:fa:19:81:a4:84:d8:9e:45:
fa:76:9b:42:d4:c7:ad:c1:d8:90:44:17:6b:1b:93:21:81:e8:
9d:e4:00:85:f1:59:f4:e6:f9:9f:03:a4:e2:20:3d:29:08:d6:
94:7b:87:65:58:7d:4b:15:1d:6f:41:39:fe:31:de:cc:85:15:
5e:20:d9:28:a2:4e:3a:e3:11:e6:d4:c3:66:41:bc:16:72:70:
11:23:88:8e:7b:d0:70:7c:54:bf:25:f3:78:85:8e:1f:96:43:
ab:7d:b9:1e:69:0c:2e:92:60:65:bf:74:d0:28:03:a8:c5:b7:
77:67:27:d4:c6:ef:78:b4:85:24:7d:9e:d9:4b:92:69:2f:ee:
64:0d:c4:9c:7e:fa:e5:ec:0c:94:73:64:00:98:16:fa:12:79:
ef:47:aa:17:1d:c2:b2:f1:28:dd:a8:15:fc:c3:f9:99:13:ae:
b5:a4:db:81:6a:df:d7:59:ae:f1:a4:66:44:28:d8:71:7b:c7:
fa:cd:74:e3:63:27:6d:bc:4e:40:f0:2d:95:66:25:51:68:c7:
ca:46:cd:12:37:a4:0b:d5:d3:33:41:12:b5:88:40:98:43:6f:
06:3b:c5:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4BNj1gyhY4KxIdZTh0DBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2I4NmU2NTQ3MGY5OTRkZmE2ZDZmZWU4ZTI2NGRiNjJl
MjRhZjkwHhcNMjUwNzIzMTYwMTM4WhcNMjUwNzI0MTYwMTM4WjAzMTEwLwYDVQQD
Eyg2NGU5ZTY4NWVjMjAwODJlN2E2NGIzMGE3OTE4MmViMTc4YjNkNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sLoorizWYsPCZNMqOJp5udh8qZ9
HUf5VrsZ1cY4qJj9uF9vxfcfPkfr7Z0LnjLGBKepCqEHjUAFIRbilHYRFpO/AmQt
KJBEySDYMJ6gDh9AqDlMEeMholkQn/xlaPr296ZihU1AoicJXk3Y57BzLNuJ3wQo
LUKIMkmJIyuhOH/k8R7n3E7E5PQyfpeORwR4LWQZLDVvshHTbUxs7pVuCpsZqOT5
z7/4yOovWi0zeam6vGgIzExpW6yhPGUy9tDgVSeKvsJ4FdijqtG66fQs/H2kmoGs
gANsXrHLy8fUAYr5VSBYuhgXtG+uaaN2sxsPf4uvSmQ0ksWTi56OAlGJRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTp5oXsIAguemSzCnkYLrF4s9dxMB8GA1UdIwQY
MBaAFMo7huZUcPmU36bW/ujiZNti4kr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgt
OTUzMWQyNGUwNjEwLzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgtOTUzMWQyNGUwNjEw
LzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcC4Eb7d
/tfxAOq0NNWlT5vFURKcH3Hi1exy/foZgaSE2J5F+nabQtTHrcHYkEQXaxuTIYHo
neQAhfFZ9Ob5nwOk4iA9KQjWlHuHZVh9SxUdb0E5/jHezIUVXiDZKKJOOuMR5tTD
ZkG8FnJwESOIjnvQcHxUvyXzeIWOH5ZDq325HmkMLpJgZb900CgDqMW3d2cn1Mbv
eLSFJH2e2UuSaS/uZA3EnH765ewMlHNkAJgW+hJ570eqFx3CsvEo3agV/MP5mROu
taTbgWrf11mu8aRmRCjYcXvH+s1042MnbbxOQPAtlWYlUWjHykbNEjekC9XTM0ES
tYhAmENvBjvFQg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:29:05 2025 by rpki-client