Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
File: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json)
Hash identifier: a1Sc5myt7NiXzWm06JHAGXwxiA21BDw4KPVF5nwI6M4=
Subject key identifier: E9:43:13:AA:A3:B8:1C:73:A9:17:6E:B9:92:98:B0:06:69:2C:0C:34
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 0198C6EDCCD3C6180B00B95DEB14CD75D251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
Manifest number: 1642
Signing time: Wed 20 Aug 2025 10:02:09 +0000
Manifest this update: Wed 20 Aug 2025 10:02:09 +0000
Manifest next update: Thu 21 Aug 2025 10:02:09 +0000
Files and hashes: 1: GsgBqUerkRLRUcbs_Ls-LQF-79g.roa (hash: o+byKU/lMI3gKI/hl2xDgwzjDY3NcVCYFP3p/RabszM=)
2: K6zGiisfyNDOI3oc313yAhjD4A0.roa (hash: 6AQQYPpSiTsTvRjFcFVlDWIfwUUDTzHtOyOPf+oYlEE=)
3: h9M-qa9tzN77x6y4M9oRvv0zAZo.roa (hash: Wom6OpKhUIS6gHUXQCwVqaaK67yLypV+CPblB+/oGcM=)
4: ozhROBFdVytrD3TpvGqAgnW-fDw.roa (hash: 4VtjPfNgZjp68d8isA/cFQEHicpTsWLTQUKQfDvxm2Y=)
5: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: j2fFMvhg7by7L6iKpL2CnoUIOKRtSIWApLSRA+eeG/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ed:cc:d3:c6:18:0b:00:b9:5d:eb:14:cd:75:d2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Aug 20 10:02:09 2025 GMT
Not After : Aug 21 10:02:09 2025 GMT
Subject: CN=e94313aaa3b81c73a9176eb99298b006692c0c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:36:cb:58:f3:56:b9:43:c0:38:42:26:1d:
d0:eb:90:52:34:8f:bc:17:7a:9f:4b:fb:d3:52:b5:
61:07:21:33:4d:3a:95:10:e9:24:0e:be:5b:bb:af:
f4:8a:a6:eb:6a:a1:12:74:5b:9c:93:ee:a8:82:90:
9e:04:9a:4e:f9:40:43:4b:a0:d5:e6:04:ef:b7:fc:
ba:02:10:67:62:26:81:96:2e:30:c3:bd:af:0e:3a:
15:8e:13:56:63:3e:7f:ad:22:58:c1:37:ce:31:47:
9e:be:0e:5f:68:f3:a5:fc:3c:66:76:ec:ff:8a:52:
a9:21:8a:10:48:0a:5b:04:ad:39:10:02:ba:0a:88:
93:6f:bd:eb:d3:cc:0e:5a:30:d0:ac:d6:ae:4a:84:
03:ea:ef:16:bd:28:30:3a:d7:37:9d:b5:1a:fd:65:
7b:e3:9c:48:5b:3d:85:a9:bd:22:da:4b:af:74:d7:
f9:07:86:e9:89:dd:28:e8:b4:f8:f4:32:28:37:ff:
ef:5a:1d:20:0a:1f:9b:f5:f5:7a:c1:18:48:17:c0:
bd:1d:96:42:6c:8d:ee:df:6e:16:99:48:d9:72:ef:
92:ae:a4:81:0e:ae:0d:11:32:d5:58:41:f9:1a:b3:
0a:cf:62:fc:fb:d7:00:f4:4e:53:4b:de:9f:40:3d:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:43:13:AA:A3:B8:1C:73:A9:17:6E:B9:92:98:B0:06:69:2C:0C:34
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0f:87:9b:ca:19:ba:c5:3b:18:33:36:08:35:cc:c6:11:7b:
b3:dc:b7:20:9d:8a:7a:63:86:7a:f8:76:7d:e1:9d:c5:9f:24:
54:71:7d:60:fb:f0:70:3a:48:14:85:d4:48:48:93:0f:a2:e8:
99:59:cf:b6:ba:7d:b1:e5:b9:81:ac:25:29:35:7a:ac:35:58:
17:4a:72:5b:22:13:4c:2d:b6:77:a7:e6:e0:5e:03:b8:da:a4:
86:11:ff:52:a6:d5:05:7b:ce:fc:00:72:59:96:7f:9e:64:a3:
4a:5f:45:9f:35:74:93:d0:52:72:74:87:e6:aa:66:df:96:d3:
00:30:b4:7a:0b:13:d0:b1:e4:11:05:93:68:0f:04:8a:dd:ef:
11:45:43:4e:ea:06:4b:5b:0f:b7:1c:a2:25:67:3a:23:d2:b6:
d6:f7:9b:19:fe:22:ed:ae:62:ac:25:96:23:95:98:7f:4f:64:
fa:61:1b:d5:cd:68:a4:9b:17:0f:93:1e:9f:da:fa:94:b2:97:
f6:d1:b2:4f:ea:9b:72:09:69:3d:e9:27:66:a3:28:57:c5:5d:
ea:a2:9f:75:4f:1a:36:b6:7e:24:9e:a1:77:f1:a6:37:fc:41:
d1:3a:08:9f:09:6d:a7:f0:71:1c:41:21:b4:b5:8c:c2:ff:bd:
32:63:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:16:08 2025 by rpki-client