Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: ueWh2v4pORvsfvgEi6GayCAcHy245RBAi8KBU1Km00M=
Subject key identifier: 34:D9:C6:27:DD:C3:70:D6:04:02:A4:E8:D5:5D:A3:4E:A3:D6:CE:40
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 0198D4E08A65B9DF9BE80999BAEEEE4441FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 1091
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: EUYNQbdROBW2dQg8Tmsb5/1Asl4oj9/7OaALy+SfiOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8a:65:b9:df:9b:e8:09:99:ba:ee:ee:44:41:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=34d9c627ddc370d60402a4e8d55da34ea3d6ce40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:f5:92:fe:65:19:be:6e:53:11:1f:aa:e9:
5a:63:72:e1:3e:83:15:cd:0f:2b:9d:e0:af:52:e3:
63:d4:00:4e:53:4a:3e:5c:53:9c:66:c8:de:12:d6:
d9:95:9e:ec:ce:99:ef:c3:eb:71:2e:d7:37:67:6a:
72:e8:ef:cd:b8:1e:6a:1e:52:95:4a:b0:1a:9e:89:
4a:1c:c5:7c:4e:70:d0:10:00:e0:f6:cb:8d:66:cb:
0a:6f:6d:01:fa:97:20:95:6e:ff:97:ec:02:ca:c2:
8f:21:b4:0d:df:af:7f:7a:a2:f9:79:60:9d:8a:b7:
05:ae:f8:12:53:88:eb:a9:52:12:dc:ee:c7:0f:1f:
a2:50:8b:9d:42:02:7b:d0:74:84:dc:ed:2b:d9:d3:
c3:ee:67:ab:76:65:df:b9:5e:86:62:03:a8:c2:a3:
4b:88:42:73:94:f7:9a:2a:c2:47:5f:8c:f9:c7:fb:
df:ca:9b:d1:f5:90:33:29:75:96:07:b1:8b:f0:40:
46:72:4a:a3:42:d4:25:d2:c2:0b:c3:6f:99:b3:95:
fb:f3:f5:44:91:a8:f4:7d:ee:7e:2c:1f:09:ee:1c:
ea:4f:e7:15:30:af:31:0a:13:b4:b5:c3:fa:a2:bd:
12:b8:2f:51:3c:ed:15:b7:34:aa:6b:65:5f:8d:55:
62:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:C6:27:DD:C3:70:D6:04:02:A4:E8:D5:5D:A3:4E:A3:D6:CE:40
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:d8:77:b0:58:df:e2:b9:34:22:80:fd:30:a4:c2:26:0a:
2e:66:0c:b5:8c:bb:b6:18:8b:c2:19:5f:a1:88:82:d3:c0:39:
32:8d:f8:d9:bd:85:dd:74:20:5d:a5:44:12:c8:d8:27:92:1f:
0d:78:f2:1c:61:2f:a3:3b:6d:9a:af:14:d2:2e:b3:e3:94:e5:
d1:57:d9:ce:e1:8a:10:48:01:71:8c:d4:cb:7d:a2:54:3e:bc:
b8:fd:97:a4:8d:1b:c4:06:30:f7:cc:4b:0f:0b:27:03:21:b8:
39:a3:49:0e:7e:56:81:8f:f0:7f:04:38:ce:6b:88:5b:b1:8a:
fb:1e:8d:6c:70:15:7a:c2:01:18:fa:e1:de:6d:1b:b3:de:95:
2a:2c:cf:c3:b0:da:4b:9b:5d:24:53:c6:04:b0:1e:36:a9:38:
d4:59:18:18:f4:4e:83:c8:04:e0:77:71:eb:bc:24:8c:9f:a0:
40:cd:0f:6a:29:47:f2:a0:3e:12:2c:84:b1:e1:8d:18:5b:b5:
ed:33:16:a1:01:ac:4e:3c:ad:d5:61:e3:81:35:cb:94:ee:58:
49:60:85:20:e8:80:d6:19:62:37:37:95:8c:af:99:d8:93:bc:
d2:bd:e5:af:4e:09:cc:10:d9:96:76:9d:7a:e3:06:48:de:54:
24:1c:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:18 2025 by rpki-client