Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: c0QPzu/TADMRUjcOX36CWMKBPFD2V4e8kCPr5La9uvE=
Subject key identifier: 69:AA:95:37:13:A3:78:AB:D1:80:5C:71:B8:A1:07:35:D5:52:6C:D9
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 019750B3666646894419A567DE56131198E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 18:00:23 +0000
Manifest this update: Sun 08 Jun 2025 18:00:23 +0000
Manifest next update: Mon 09 Jun 2025 18:00:23 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: zYuZhp473hgo6Sbg9WphVZQ//kiyxzd4p1dEl3NV3B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:66:66:46:89:44:19:a5:67:de:56:13:11:98:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jun 8 18:00:23 2025 GMT
Not After : Jun 9 18:00:23 2025 GMT
Subject: CN=69aa953713a378abd1805c71b8a10735d5526cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:87:25:32:ad:1e:8c:23:29:cd:d5:a0:2a:
ff:34:c0:5a:a8:ac:e6:1b:9a:9e:0d:f6:f1:20:7a:
98:84:b2:4e:01:d3:be:6c:21:68:dd:34:f8:fe:85:
69:dc:8e:c8:f7:0e:11:1d:ad:95:84:4f:93:7e:07:
52:ce:3b:fe:e0:ad:b2:58:fc:54:4e:8e:c8:e4:9a:
77:a7:43:19:e1:00:21:08:01:42:ce:ba:c1:5a:87:
0f:4a:41:35:a0:87:19:d2:8b:24:a3:14:37:de:54:
23:48:9f:cd:af:2d:7d:6c:cb:48:6f:33:b6:2b:3e:
33:d7:2c:c9:52:08:14:a0:61:bb:fd:c9:ad:82:04:
9f:75:3a:f6:52:2a:27:4f:12:66:3a:ef:cd:64:72:
a0:79:56:82:17:46:f8:9b:86:dd:73:c8:ea:96:7f:
8c:c1:f1:2b:50:3b:79:95:38:e5:c0:14:7b:fc:02:
99:e3:b5:68:9c:c8:0d:81:c7:24:95:0e:c3:08:3f:
7a:92:94:c4:e2:a3:3e:07:9f:02:bb:30:52:e2:d8:
93:74:aa:c7:ff:d1:03:a0:2c:99:55:86:54:d7:9f:
6b:64:44:f4:b2:8e:05:93:59:b5:f1:a9:3c:15:ad:
7c:a4:60:13:4d:04:9e:15:2a:e3:8e:97:79:67:80:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AA:95:37:13:A3:78:AB:D1:80:5C:71:B8:A1:07:35:D5:52:6C:D9
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:da:4e:b3:e7:8c:48:b6:ca:49:f1:8f:23:57:69:0c:fe:05:
81:6a:0d:71:25:14:8c:bd:7f:16:7b:16:b9:e7:19:9c:57:72:
fa:f6:58:17:9d:9b:2c:1b:59:5e:df:ab:d1:fb:4e:5a:46:ae:
1a:9d:9c:26:ee:b1:07:cb:9a:31:d9:66:10:06:46:8f:75:1d:
a3:11:d1:d2:8c:ae:99:d1:fe:fe:e3:9e:5f:4b:27:fe:63:a9:
ad:6a:db:d2:67:02:7d:67:8f:7d:b0:32:ff:76:d1:db:6f:16:
05:11:07:10:3b:10:b9:85:bb:51:21:d3:55:9a:ce:c7:3f:fe:
03:25:7a:ef:96:2f:9a:5e:9a:1b:23:d3:4f:b0:5a:11:9e:81:
58:85:c6:92:18:3d:94:39:89:d7:bb:f2:cc:ed:47:21:d4:36:
d5:e6:71:33:d5:14:8e:98:a8:90:ce:b4:bc:7d:ff:1d:9a:07:
f9:79:ad:12:ac:13:5c:18:b9:f7:31:a6:b8:36:28:fc:96:9b:
fb:68:5e:94:12:67:87:56:db:cc:26:6c:64:d6:82:41:16:6d:
3e:65:9b:ad:87:16:50:9f:fb:2a:1f:f6:fc:f0:92:62:a2:c3:
d2:0d:c0:a6:81:ee:9f:13:b7:ca:6b:03:f3:26:17:bd:e1:d7:
c2:d0:f1:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQs2ZmRolEGaVn3lYTEZjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw
MjhlOTEwHhcNMjUwNjA4MTgwMDIzWhcNMjUwNjA5MTgwMDIzWjAzMTEwLwYDVQQD
Eyg2OWFhOTUzNzEzYTM3OGFiZDE4MDVjNzFiOGExMDczNWQ1NTI2Y2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1piHJTKtHowjKc3VoCr/NMBaqKzm
G5qeDfbxIHqYhLJOAdO+bCFo3TT4/oVp3I7I9w4RHa2VhE+TfgdSzjv+4K2yWPxU
To7I5Jp3p0MZ4QAhCAFCzrrBWocPSkE1oIcZ0oskoxQ33lQjSJ/Nry19bMtIbzO2
Kz4z1yzJUggUoGG7/cmtggSfdTr2UionTxJmOu/NZHKgeVaCF0b4m4bdc8jqln+M
wfErUDt5lTjlwBR7/AKZ47VonMgNgccklQ7DCD96kpTE4qM+B58CuzBS4tiTdKrH
/9EDoCyZVYZU159rZET0so4Fk1m18ak8Fa18pGATTQSeFSrjjpd5Z4CjGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmqlTcTo3ir0YBccbihBzXVUmzZMB8GA1UdIwQY
MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt
ODg1NGM4MmI1NDVkLzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk
LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtpOs+eM
SLbKSfGPI1dpDP4FgWoNcSUUjL1/FnsWuecZnFdy+vZYF52bLBtZXt+r0ftOWkau
Gp2cJu6xB8uaMdlmEAZGj3UdoxHR0oyumdH+/uOeX0sn/mOprWrb0mcCfWePfbAy
/3bR228WBREHEDsQuYW7USHTVZrOxz/+AyV675Yvml6aGyPTT7BaEZ6BWIXGkhg9
lDmJ17vyzO1HIdQ21eZxM9UUjpiokM60vH3/HZoH+XmtEqwTXBi59zGmuDYo/Jab
+2helBJnh1bbzCZsZNaCQRZtPmWbrYcWUJ/7Kh/2/PCSYqLD0g3ApoHunxO3ymsD
8yYXveHXwtDxEg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:36:43 2025 by rpki-client