Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: LAaCMRu6lmViGpXuXDO/mEvVHs96XU2dn1S8cLqlxow=
Subject key identifier: 8F:39:B0:43:B6:EF:36:77:E2:03:79:E5:BF:82:8E:9F:FD:25:92:C3
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 019844081DDE8B8BAE48D1528858D88665F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 00:00:39 +0000
Manifest this update: Sat 26 Jul 2025 00:00:39 +0000
Manifest next update: Sun 27 Jul 2025 00:00:39 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: +mwzJWFumwhBhZwpZHNKteTrcRBwYyBgGQXMqXqLyng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:08:1d:de:8b:8b:ae:48:d1:52:88:58:d8:86:65:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jul 26 00:00:39 2025 GMT
Not After : Jul 27 00:00:39 2025 GMT
Subject: CN=8f39b043b6ef3677e20379e5bf828e9ffd2592c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:1e:28:aa:54:22:7a:46:f6:69:8d:c6:12:
52:b3:b5:bf:8a:e7:bb:ad:3f:de:2b:80:ac:c1:39:
85:c2:2a:b2:4b:0c:c6:54:9d:58:1b:d0:1e:03:84:
a5:e3:92:38:f5:2d:2c:d2:71:e1:85:d3:a5:18:71:
28:7c:d7:8b:aa:33:75:80:04:7e:a6:f4:90:40:ec:
dd:8d:1b:70:9e:48:29:ba:fb:29:fb:7f:4d:01:dc:
9a:d8:6c:c9:01:b7:9a:d3:7b:f3:4c:89:41:32:4d:
fa:46:7b:58:38:d3:05:b3:17:96:98:8a:49:d3:43:
28:80:93:40:73:4c:58:df:a8:e0:bd:b8:dd:22:d6:
46:7c:e2:69:1e:5c:18:f8:6b:45:c1:02:0d:2f:bd:
c6:fe:69:c9:11:96:ba:7c:25:4c:43:e1:0a:57:60:
3e:b9:c0:20:a4:c8:48:73:96:6c:a0:3f:e9:f9:5e:
77:de:73:47:cd:db:78:7c:f3:e0:06:16:fa:83:f4:
60:a7:28:0c:79:f1:ba:6e:6d:24:32:4d:38:b5:57:
05:16:ac:e0:94:39:13:3e:ff:a9:4d:1f:88:82:c5:
70:fe:9c:4c:e1:53:8a:3f:32:ca:ff:59:c3:c3:a5:
53:60:1f:84:bd:e0:47:4d:f5:71:18:f8:1a:3b:92:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:39:B0:43:B6:EF:36:77:E2:03:79:E5:BF:82:8E:9F:FD:25:92:C3
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:61:dd:25:53:ea:0e:9a:91:e4:1e:8f:cb:35:7a:cf:eb:10:
f3:f9:06:e7:a1:c0:57:4b:fb:3e:22:3e:12:6c:f8:f8:ae:a9:
8b:48:52:71:94:d3:48:a7:fc:46:2f:d3:25:4c:28:a8:04:56:
37:41:6d:97:3f:53:0f:2c:76:57:7f:2f:ae:f8:fb:9d:e8:82:
f7:ea:90:d7:b3:c6:52:61:bc:fb:94:80:05:58:fe:05:15:80:
6f:44:1d:32:76:18:ca:64:71:67:ee:0e:36:53:22:4f:06:fa:
38:4c:90:f9:96:9e:e4:2e:a4:d2:9e:6c:85:aa:be:20:96:a1:
a5:66:af:8e:93:bb:13:40:e2:05:4f:cd:61:5b:7d:2b:49:c3:
0b:ff:45:f8:0c:c3:81:41:aa:9f:1c:48:03:cc:09:c0:45:c6:
f6:9e:5f:5e:01:f2:c8:52:9b:13:34:4a:e2:32:68:e6:0d:b4:
8d:8b:72:4c:14:16:6d:76:29:d8:e4:3c:8c:c6:70:e8:91:6b:
21:5f:9a:d9:b6:06:4d:2c:c8:b0:9b:c6:98:71:03:33:15:57:
66:82:3d:83:5c:c0:de:c0:a2:dd:7a:c7:94:f7:3a:ae:c7:7f:
46:42:6d:25:08:63:ed:97:6d:76:41:90:1a:09:26:d9:5a:1d:
4c:a4:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:29:05 2025 by rpki-client