Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
File: yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json)
Hash identifier: UBCwk9hnEjmKnyprMvX8twW+3Ouzk5PEia8pJ8EvzW0=
Subject key identifier: 14:53:FB:4A:67:40:F5:BA:76:82:8B:3F:00:0B:E5:44:BF:CF:F9:BD
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 0198D65FF376B5E3DE0588D9CF5EC54EA037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 10:01:09 +0000
Manifest this update: Sat 23 Aug 2025 10:01:09 +0000
Manifest next update: Sun 24 Aug 2025 10:01:09 +0000
Files and hashes: 1: Db8DTjUYkYFq1VL2utnrt9ZhoOQ.roa (hash: d9GgydKG9uk/HAxIswAdFFBoSDorEX71FTaOERwLhzg=)
2: RfiogXB75ZZcw60YgsMcLXMGreQ.roa (hash: CxagJfgQ+HRjqYYAQUHG4nzSSm5GU9hHUNpe0/HqHLA=)
3: Vsvw7zSK2cjlfLBPzsEjNibepw0.roa (hash: fMTdJF0J/U/sST/3YzLYOWjYa8T84ONedHLdQ86kfmA=)
4: WTl9wt0Rp1_SP8V72BWndXzvVXk.roa (hash: BI9xuqlMchALIUZfnOAm1MAIdvbV4MZUCOFrf3rfZgA=)
5: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: PIcRaQVrrj4Y8v1GvAgIdTGnvfhCtdqsbSmmi0YBgAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f3:76:b5:e3:de:05:88:d9:cf:5e:c5:4e:a0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Aug 23 10:01:09 2025 GMT
Not After : Aug 24 10:01:09 2025 GMT
Subject: CN=1453fb4a6740f5ba76828b3f000be544bfcff9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:0d:d6:a6:bc:ab:33:6b:f9:6f:a8:eb:34:
b4:89:2f:63:ba:c3:28:c3:5d:e4:d1:99:ab:56:72:
85:06:4f:ed:a5:7c:ca:34:6d:29:84:b2:20:99:4a:
e0:9d:bc:03:a9:2f:52:0c:d9:c4:59:b2:97:fa:9e:
d3:10:6c:19:9e:46:76:6f:71:a1:70:d8:e4:36:f8:
97:26:44:de:54:b5:d2:eb:b3:84:34:f6:a0:69:e8:
d8:c8:17:47:56:00:83:87:46:72:f3:16:6f:b2:2e:
89:64:af:43:58:65:ea:fc:58:49:9c:94:3a:49:0d:
0d:39:f8:9f:48:7e:33:a8:78:79:84:6b:aa:08:27:
17:87:36:7d:1e:91:22:31:b5:79:67:c9:37:8b:90:
d4:08:67:9e:11:7d:85:14:d0:18:9c:df:d7:99:d7:
e4:9f:fd:a6:98:75:21:b6:a1:a1:08:34:a5:60:ba:
60:b5:78:ef:98:bb:9e:37:69:d3:bc:b0:d3:34:75:
a8:73:e4:8f:1d:59:65:99:e9:f9:e8:04:7b:78:c0:
00:d3:50:01:de:f9:42:94:a5:e4:4c:38:ee:f0:f6:
55:8e:66:f2:67:e1:c3:26:28:fb:61:c5:18:66:3f:
91:75:1e:40:77:7c:53:b4:6a:39:bb:de:f1:11:d7:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:FB:4A:67:40:F5:BA:76:82:8B:3F:00:0B:E5:44:BF:CF:F9:BD
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bb:9d:b1:61:da:f3:83:4b:c6:30:34:d1:0c:55:28:66:18:
3f:ca:06:53:eb:c6:59:7d:54:03:b2:42:31:8c:06:9f:92:f1:
95:ca:b4:26:31:e4:c7:0f:08:47:44:5e:40:04:b9:51:b5:c1:
e9:97:25:75:b2:b9:01:46:16:56:27:12:34:80:be:59:ce:60:
9d:b7:cf:45:3d:27:1c:45:4f:e4:19:b3:b9:11:44:f2:c8:60:
72:90:ff:89:15:bd:78:27:8a:25:bf:f3:da:c0:67:94:58:9c:
f0:57:5e:d8:b1:4f:35:c5:5f:52:2a:ad:57:0a:1d:e5:e5:2c:
f9:f9:33:6b:9b:d3:bc:28:0b:06:8e:98:d7:b2:af:4b:5e:79:
8c:bb:3f:48:68:06:0a:e0:7c:e2:0b:29:8b:20:7a:eb:39:89:
b2:30:3a:6f:ad:05:f4:84:17:50:75:ac:c2:9b:d2:62:86:33:
ad:31:0f:38:7e:df:69:03:ad:b1:d2:dd:49:be:d7:3d:84:22:
d4:d5:29:d9:e0:96:b9:78:19:de:45:73:47:79:c3:20:2c:1e:
34:66:35:03:13:73:ab:7e:ad:60:74:1f:6a:ed:6a:52:53:ef:
94:3e:5d:b3:d1:6a:f2:8d:e3:34:39:60:21:75:7f:9e:75:79:
eb:f5:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:01 2025 by rpki-client