Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: eEtlXN4QzvnqxEfTnJ4o/5z3aCW8tRLYsnNRnaitOpo=
Subject key identifier: C8:7E:53:E3:6C:9C:19:3B:A9:85:22:80:A1:DF:7C:AA:48:59:26:8F
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019937CB091FA360EBEA2C5227B3FB128D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 06CD
Signing time: Thu 11 Sep 2025 08:01:16 +0000
Manifest this update: Thu 11 Sep 2025 08:01:16 +0000
Manifest next update: Fri 12 Sep 2025 08:01:16 +0000
Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: nxIZRhgJpoUgCJSUo6S0NYlTxgzmFbf068yqMADt2HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:cb:09:1f:a3:60:eb:ea:2c:52:27:b3:fb:12:8d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Sep 11 08:01:16 2025 GMT
Not After : Sep 12 08:01:16 2025 GMT
Subject: CN=c87e53e36c9c193ba9852280a1df7caa4859268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:4c:6a:9f:f0:07:3f:e3:d6:63:60:c7:b0:
8c:ca:f4:e6:61:f9:4e:e2:fd:0b:21:86:a2:60:5e:
61:5f:5c:21:59:67:ec:88:ed:a6:7b:e3:a7:08:4b:
56:fc:7c:c3:73:cd:f3:e6:b6:d7:9f:c9:4d:82:3f:
72:4e:89:f1:09:09:8c:0b:9e:2f:e0:ef:ae:16:b5:
1e:b5:58:28:6a:ae:82:ac:85:5d:b4:17:80:7a:df:
ae:3e:77:ea:b7:46:6a:e7:1d:84:98:3f:3d:af:e3:
e2:00:25:ba:d2:a1:24:74:10:08:59:00:1e:fc:31:
1d:77:ec:5e:d4:59:b5:c9:3c:6d:97:2d:23:ae:82:
8b:14:df:e8:5f:2f:eb:9f:95:d1:ba:12:bc:ca:7e:
dd:c0:5f:ea:0c:93:4b:e5:57:21:f4:55:4d:08:35:
c0:c8:af:92:24:18:36:d1:29:9f:37:64:87:a4:d5:
13:cb:b0:ab:55:12:20:b0:b6:0c:bd:16:54:9d:e5:
93:ce:6a:86:9b:ed:62:17:a2:61:14:8b:8b:56:d1:
b5:ee:95:b6:f7:c1:b5:b3:19:82:a8:1b:c2:60:fe:
fc:43:86:1b:18:b8:08:40:bb:e3:9b:e3:bb:ab:78:
bb:22:51:f8:d6:05:20:e2:eb:96:ad:97:ca:ff:7c:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7E:53:E3:6C:9C:19:3B:A9:85:22:80:A1:DF:7C:AA:48:59:26:8F
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ca:ea:51:0d:bf:d9:dd:36:40:a1:e4:58:d4:23:fe:e7:a8:
30:d0:88:cc:5b:c3:1e:6d:b5:85:93:32:39:8b:16:dd:0a:93:
6f:6a:5b:f0:51:12:49:30:f4:da:b5:41:d7:8e:32:c4:9a:ea:
a1:5d:28:60:2c:0a:d4:19:0a:22:f0:0e:05:78:80:b7:65:89:
ca:19:07:19:a3:b1:df:ef:0a:d1:a1:be:00:1f:95:34:68:2a:
cc:f0:12:ac:16:bd:25:32:b6:78:ca:34:ad:13:48:b4:fb:21:
c5:c6:57:5c:10:d5:d3:bb:c4:6c:86:c6:86:04:40:36:4e:c8:
5f:d1:09:87:ff:9e:52:5c:cf:71:c6:ca:58:00:4d:80:76:b1:
7c:52:fa:a5:65:79:da:84:ae:56:f3:f9:8d:60:88:ee:b3:6e:
6d:49:a3:fb:3a:a1:ec:04:61:04:f8:35:b8:33:a7:13:1f:46:
eb:10:4c:84:01:aa:67:9c:88:a5:06:e5:03:d6:0d:11:cd:04:
77:4a:a2:e7:c0:90:0d:86:a3:c9:06:37:e1:40:7e:ae:75:35:
e7:5b:3f:a3:28:6f:c0:5f:8d:09:f9:d6:41:1d:73:c8:0a:31:
34:85:43:e2:7d:d6:b4:67:c5:02:18:56:df:fa:cb:a2:a7:28:
3a:41:71:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:11:21 2025 by rpki-client