Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
File: yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft (raw, json)
Hash identifier: i28Ox/kSAKcTzJTcq/aFagSkmzRWpEl0xNU8AFhda34=
Subject key identifier: 52:C8:7A:78:5A:A0:FF:21:8C:8B:1E:41:44:39:03:45:0C:B4:DE:5A
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 0198277E307407F61A0A12CE8AB1EACDF7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
Manifest number: 15F4
Signing time: Sun 20 Jul 2025 11:00:38 +0000
Manifest this update: Sun 20 Jul 2025 11:00:38 +0000
Manifest next update: Mon 21 Jul 2025 11:00:38 +0000
Files and hashes: 1: Fdf0vtB1gT4L0JunIsm8qNZYmQ4.roa (hash: Hfh7wbvCwd9LX8YiFV9RA+et4MH+5Md9SfCGKXu907E=)
2: WzbbS-CvpAp-X59KDM_38Kb2Q90.roa (hash: nHcAVErDor/w6cF6rsBmTNyYVia/mJgseR3zdZens+w=)
3: iUi7thjoE_NSerMmdG4mBc-A3aQ.roa (hash: XBvqQypf6zmJJtMlo2u++NDcjCA5xpacY+hSBCY97kY=)
4: rmFmeiHNGZqQIM8I3hQZlTQLSPU.roa (hash: +4TH3iY83i5mgX2X206BcOV0PV0agK4VaBkhFLKmwRA=)
5: yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl (hash: YuDvNl9GRFpViTqWk0qqA1xZZHhJRmGUMU3qr6GllDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:30:74:07:f6:1a:0a:12:ce:8a:b1:ea:cd:f7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Jul 20 11:00:38 2025 GMT
Not After : Jul 21 11:00:38 2025 GMT
Subject: CN=52c87a785aa0ff218c8b1e41443903450cb4de5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:6b:95:38:f7:9e:e1:fd:1c:00:8c:b9:fa:
df:93:01:48:d8:89:b7:6a:9e:ce:10:7a:97:af:d6:
fc:d4:44:d2:a5:7a:99:9b:dd:56:43:a4:52:9b:cf:
82:28:e2:2c:34:36:0d:11:62:13:84:ed:3f:f1:60:
c9:e0:8c:4a:27:47:7a:42:15:84:e5:ad:1e:4a:aa:
28:4d:ea:bc:36:6f:55:40:51:b7:40:de:1e:88:d0:
fa:69:8b:0d:f7:39:e8:08:71:ff:81:fa:f6:ed:14:
af:5f:fa:05:23:0c:ec:c5:64:4b:f0:3c:5b:cc:ce:
6e:8d:bc:d6:66:e8:c5:f7:21:a8:8c:07:fc:c9:7b:
86:75:12:e1:ed:2d:06:ae:60:1c:6f:92:48:c2:1c:
4b:10:71:36:39:f4:47:fe:d2:4b:7f:32:b1:14:16:
99:c5:e9:cc:3b:4b:12:e8:7e:47:08:75:5c:45:b1:
96:6e:98:81:ac:86:4e:e6:f2:49:60:8e:f7:f0:a8:
27:94:d5:13:fd:70:10:8f:b5:7f:3c:be:0d:6f:68:
f7:fa:ea:e5:fe:28:53:02:92:1a:7f:d6:76:3f:5b:
0f:26:c8:05:24:7f:d1:c1:ae:70:fb:96:29:ea:ba:
32:1c:ee:e7:af:bd:40:46:c8:86:29:6a:ba:cc:bd:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C8:7A:78:5A:A0:FF:21:8C:8B:1E:41:44:39:03:45:0C:B4:DE:5A
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:40:ad:f1:94:5f:c4:96:9a:a8:a2:cf:a7:de:22:25:f7:c5:
f7:fc:d7:fe:fb:f9:ee:5b:5f:35:60:fb:74:3a:5e:98:c7:67:
21:63:b7:a2:0b:02:9d:c5:52:b5:29:80:d7:a6:47:f9:88:cd:
a3:4b:14:ac:a4:a4:4e:4e:c7:de:24:9b:0d:48:a0:71:80:42:
df:0a:96:31:72:36:9e:47:f0:63:97:0a:8a:d0:b7:ff:b9:82:
17:67:c6:b6:c2:6f:d5:3b:3f:4f:e1:7b:de:61:82:e7:53:54:
ee:c4:c4:83:8c:f5:ba:52:94:4d:af:86:48:a9:30:c9:99:3d:
48:b0:7b:cf:47:1a:49:10:f9:c3:6e:e0:0a:40:67:07:82:f2:
fc:f4:de:0c:82:a7:29:8a:39:d6:1d:b5:df:da:8e:04:ef:72:
1d:48:7e:ee:6f:16:19:2c:6b:04:c6:6a:d9:8b:d8:38:8d:b5:
20:f7:dd:97:0a:89:14:6e:40:f4:7f:85:b0:2e:88:8a:a1:2d:
48:3e:f4:62:75:fb:50:98:05:76:9f:9b:7a:24:04:fd:2a:7e:
6d:fc:74:25:31:d3:44:a0:b7:38:77:db:20:10:f0:2e:34:bc:
51:3e:53:99:1e:09:d3:a3:6e:28:d8:22:67:86:05:42:e3:4d:
d6:3d:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:20:04 2025 by rpki-client