Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: MZSOOc6UykChpEoBAmgHU+Lsijwo0hscHX5qlf38p8Y=
Subject key identifier: D5:50:DB:17:1A:5B:98:58:0A:5B:07:3D:ED:0C:0D:0A:B5:D0:58:22
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 0199356E96FEB041927F2E111CBF88A74F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 1682
Signing time: Wed 10 Sep 2025 21:01:04 +0000
Manifest this update: Wed 10 Sep 2025 21:01:04 +0000
Manifest next update: Thu 11 Sep 2025 21:01:04 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: z9+e/gvV5ceLtFVlgP//QtA1oJ6R2ktxRZeKEb+nfuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:96:fe:b0:41:92:7f:2e:11:1c:bf:88:a7:4f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Sep 10 21:01:04 2025 GMT
Not After : Sep 11 21:01:04 2025 GMT
Subject: CN=d550db171a5b98580a5b073ded0c0d0ab5d05822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:a1:4e:f2:81:e5:cd:f5:a9:27:46:bf:b1:
b2:3c:e6:93:44:d3:98:2c:ac:62:3b:e5:4a:76:21:
92:96:c1:57:d5:2b:c1:8e:a8:2f:cd:7b:c5:b3:3e:
65:e2:d7:ec:a4:df:a3:39:fe:aa:48:b5:e8:7b:af:
21:58:00:42:f3:c7:7c:ee:69:1c:84:96:70:25:42:
24:4b:70:43:4e:41:ff:7d:51:c8:4a:81:8f:2d:78:
c0:ef:99:bc:f8:63:9c:21:a7:08:92:fa:51:90:49:
9a:42:2f:89:09:12:09:29:43:79:88:f6:77:14:d0:
dd:5a:2c:4d:24:5a:9b:28:73:70:d3:47:59:a7:fa:
dd:b1:2d:24:0b:dd:76:ca:fd:d5:2d:6c:91:c5:f8:
28:c2:57:8a:92:4b:bd:0c:ca:26:fb:08:96:79:04:
45:0f:ff:07:ad:1e:f7:8c:a4:31:3e:be:39:c6:5f:
eb:85:dd:62:f6:dc:88:b4:b2:7f:cd:3f:6d:20:a3:
b7:5e:15:c4:d2:95:5b:5f:d0:1f:27:80:d1:94:de:
4e:94:e3:84:72:8a:43:cd:a4:61:dd:4c:a6:32:78:
f9:cb:64:97:7c:7e:0e:c8:fa:b5:b7:71:a8:bd:a0:
ae:a9:65:1a:15:26:32:f3:ce:7b:4c:1f:95:80:98:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:50:DB:17:1A:5B:98:58:0A:5B:07:3D:ED:0C:0D:0A:B5:D0:58:22
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:57:fe:68:44:8c:0f:af:4f:76:f6:ea:79:23:13:3d:7c:0c:
3f:30:34:1f:3d:2e:2c:ff:e6:a5:51:8f:0a:ad:b5:79:9e:cc:
19:16:56:dd:e5:86:a9:e4:36:d1:36:3d:dd:27:18:1a:30:8f:
a4:7a:74:93:8c:20:f6:13:34:29:c2:6e:56:7f:b4:2d:e4:f7:
e9:73:d5:4a:e2:94:27:e9:fe:4e:3b:fb:98:94:c3:f1:57:03:
22:4b:3e:94:0a:40:10:3a:ad:92:96:16:53:00:f3:20:1f:60:
8e:db:ef:ad:98:a7:f3:cf:33:10:16:bd:c2:81:f9:41:1b:d1:
5c:7e:83:a6:9d:71:d6:4a:fd:37:a7:2b:37:c4:e0:6a:dd:6a:
49:ee:35:42:25:1d:34:e2:d6:45:58:97:f5:92:e5:c5:09:8d:
1c:5a:de:9f:09:30:f0:89:af:21:fc:05:0b:a5:0c:1c:fb:e2:
1c:66:41:d1:99:04:8f:5b:87:b8:b7:99:64:3c:e1:64:11:76:
e3:91:30:38:d9:c2:39:04:2a:e9:f5:eb:3c:47:30:03:26:0f:
f6:18:ee:94:cb:df:77:da:92:d4:ee:1a:56:75:a0:62:7b:96:
36:8f:03:45:39:72:7b:72:9b:06:b5:64:cf:04:52:eb:6c:32:
59:35:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:25:26 2025 by rpki-client