Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: dmFF+XQEdFyPXSWuxhnDYH3bbgmFGAJ6eQFIpueGps4=
Subject key identifier: 3B:DA:DF:05:BB:B2:50:32:CB:DB:D4:61:62:C2:2F:CF:5A:D9:27:1F
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 0198D54E87244C1C6AD5665235DE50C71836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 069A
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: KWqdiyxsMVivOMaSMovNRxxQFKRW4af4v3EVoA0eMhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:87:24:4c:1c:6a:d5:66:52:35:de:50:c7:18:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=3bdadf05bbb25032cbdbd46162c22fcf5ad9271f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:88:09:4f:f7:da:bd:14:be:14:70:b8:7e:
6a:0b:b7:1c:e9:55:c6:3e:c4:a4:b3:b1:9e:33:dc:
53:bd:0c:ea:04:26:14:bd:b3:63:0f:f4:5a:a3:98:
45:e6:9a:45:84:3e:52:b9:e5:81:1d:ec:ad:7d:f7:
75:81:7e:6d:02:8c:d6:85:0a:2c:aa:24:3a:62:7e:
a5:56:17:4f:c0:43:58:e1:d5:54:fa:e5:a1:5d:54:
f6:f0:3a:6f:50:ad:ea:88:39:24:f8:26:95:2f:8c:
85:b4:8b:af:35:fb:0e:d9:fd:3e:03:4c:05:4c:04:
80:e6:21:0f:ca:fc:57:e5:40:e0:0b:e9:c9:0c:53:
89:04:fd:ee:e3:8f:ce:7d:82:69:e6:32:70:8d:b3:
81:66:55:ea:99:df:59:59:fe:bd:8c:4a:b1:f6:a2:
67:3f:43:cc:fe:07:dc:76:23:74:9f:60:98:88:c3:
fd:81:ee:91:87:44:87:57:3c:e9:0b:57:4f:b0:be:
a0:27:a6:b0:b2:9b:be:03:6c:af:b6:c4:00:a4:d1:
c7:d7:0f:32:cf:e3:b4:00:77:81:48:28:eb:c7:74:
ce:55:35:57:2e:52:e0:43:22:dc:d3:14:d1:4d:6d:
b4:16:af:56:48:02:48:2f:b1:aa:88:ae:7f:8d:94:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:DF:05:BB:B2:50:32:CB:DB:D4:61:62:C2:2F:CF:5A:D9:27:1F
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:73:1a:71:17:0e:78:aa:1c:8d:a5:6e:84:01:de:5d:6d:fd:
e5:47:14:67:ba:94:e8:55:3a:97:46:1f:7b:a2:0c:24:be:18:
0d:6e:19:18:d3:ab:d1:24:18:f6:f1:b4:66:df:2a:4b:34:3b:
96:b1:bf:8b:89:e8:d7:e1:05:b5:e3:3f:3b:da:a7:18:a6:49:
4e:90:9a:b2:14:43:ae:dc:b4:b3:f2:92:c9:b7:b3:c1:2b:1f:
04:77:ed:35:0b:67:2c:20:4b:80:40:48:27:6a:b0:ec:97:36:
70:fd:30:62:78:8d:62:e8:99:4e:b2:55:d8:62:a7:a3:61:42:
02:d9:f5:50:c5:25:ae:fe:24:88:00:8f:77:fd:6d:06:fe:81:
b7:f7:35:3e:98:14:24:91:c7:0f:cf:5b:63:4a:23:64:5b:1c:
38:ce:92:ac:2c:fe:68:64:50:85:0b:e5:5d:8a:6f:dc:f9:77:
40:9d:aa:b2:c0:d5:57:2a:c0:87:ac:3b:30:64:89:d9:c9:a1:
64:86:f6:74:ba:2c:7c:a2:d6:49:67:5e:d4:8e:b3:49:93:c3:
1b:aa:63:4d:db:cc:32:5a:ac:12:22:7d:9e:e5:f2:21:b4:94:
c4:67:39:45:22:d5:1f:27:04:02:8e:dd:ee:10:35:27:c6:79:
31:c4:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:42 2025 by rpki-client