Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
File: yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json)
Hash identifier: oiPL6fDIBhP8myIZIpHe05ZVn7SrMBK/HQIqS7SnW6I=
Subject key identifier: 50:56:79:2F:6E:F6:1C:5E:C9:16:12:CB:D5:73:AD:A9:9C:5E:A9:A5
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 0197C2379E5291D5B6DE80C90BA3CAE72D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
Manifest number: 15C3
Signing time: Mon 30 Jun 2025 19:01:54 +0000
Manifest this update: Mon 30 Jun 2025 19:01:54 +0000
Manifest next update: Tue 01 Jul 2025 19:01:54 +0000
Files and hashes: 1: Db8DTjUYkYFq1VL2utnrt9ZhoOQ.roa (hash: d9GgydKG9uk/HAxIswAdFFBoSDorEX71FTaOERwLhzg=)
2: RfiogXB75ZZcw60YgsMcLXMGreQ.roa (hash: CxagJfgQ+HRjqYYAQUHG4nzSSm5GU9hHUNpe0/HqHLA=)
3: Vsvw7zSK2cjlfLBPzsEjNibepw0.roa (hash: fMTdJF0J/U/sST/3YzLYOWjYa8T84ONedHLdQ86kfmA=)
4: WTl9wt0Rp1_SP8V72BWndXzvVXk.roa (hash: BI9xuqlMchALIUZfnOAm1MAIdvbV4MZUCOFrf3rfZgA=)
5: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: 9COdTh/Kw6Q6MT7LaqXw6DxmXkUgZOevwcwrurmdWT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:9e:52:91:d5:b6:de:80:c9:0b:a3:ca:e7:2d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Jun 30 19:01:54 2025 GMT
Not After : Jul 1 19:01:54 2025 GMT
Subject: CN=5056792f6ef61c5ec91612cbd573ada99c5ea9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:4e:22:9d:c8:88:2d:9d:13:e9:f7:b3:0e:
c9:fa:50:88:52:c6:23:04:8f:8c:e9:ed:26:4d:32:
ef:a0:8d:0e:15:28:c4:2d:b9:dd:af:d6:94:0b:6c:
10:8e:35:bf:4d:b2:e0:8b:ab:54:ae:f9:7a:dc:57:
d1:de:4e:28:f7:4e:89:4b:aa:60:89:c5:9b:45:77:
57:23:c1:8e:b9:64:5e:02:8c:d3:82:35:e0:8e:c0:
b8:f8:48:40:7e:5f:3c:5f:29:d8:75:aa:46:96:88:
4c:5f:a6:ef:71:4a:dc:59:7f:d3:75:d8:39:12:9e:
b2:53:a1:a7:13:8a:3d:c4:1b:e7:90:84:dd:aa:f8:
e5:57:f7:c6:6c:5e:41:67:aa:b7:65:9b:7f:b4:93:
88:32:dc:e6:c4:df:ab:55:d9:d6:22:f3:dc:20:f9:
f8:94:03:4e:93:da:4b:f1:27:7d:be:aa:15:48:cd:
4d:85:aa:46:04:ef:d3:35:88:44:3e:e9:06:f9:c7:
c0:41:c8:73:a2:67:b9:b9:f3:f5:73:7b:42:7c:bf:
ef:5b:50:e5:64:65:45:82:3c:78:76:0e:14:e2:d3:
aa:06:b0:df:76:70:ee:14:26:23:09:ef:d0:a5:1e:
6e:f0:b9:37:60:a4:87:f1:49:56:9d:3d:e1:0c:fd:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:56:79:2F:6E:F6:1C:5E:C9:16:12:CB:D5:73:AD:A9:9C:5E:A9:A5
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e4:39:84:6c:f0:b3:79:ea:77:7a:a2:bd:d6:fe:d0:8b:a3:
65:6a:52:98:82:a3:ab:3e:0a:3b:6b:b2:94:3d:69:4e:8a:28:
4a:ad:9f:01:92:4a:be:c1:7f:9e:66:0c:0a:ae:fd:fd:f9:ed:
ff:d5:4d:2e:0d:84:da:2d:fa:73:da:7a:8b:04:91:15:d6:9c:
14:c4:63:a2:03:a0:1b:5f:d5:29:7f:05:70:06:24:d2:9d:1f:
31:5c:18:42:9c:c2:91:0c:4e:00:65:0f:6b:05:8f:a8:f6:1b:
39:34:0a:b2:da:12:62:2e:10:af:76:9c:43:f2:1f:e4:0b:94:
9e:f7:af:e2:8a:03:6e:22:e1:b4:38:3b:1c:15:0a:89:37:3b:
4f:60:d0:1d:9e:65:96:a6:43:8a:b7:f6:8a:25:69:7a:2a:7d:
4a:7e:4b:c7:c5:52:60:b0:7e:7e:9f:48:e9:90:e5:20:b6:fc:
ca:b7:b3:c9:b1:6b:bf:ba:4e:00:ec:7a:9f:40:3b:e8:45:fe:
23:05:61:f9:9f:38:87:d3:a5:bf:f3:4e:ea:47:21:b1:5d:a4:
81:14:42:85:1a:97:d1:15:7b:72:b8:bf:c9:af:5d:57:90:1f:
94:da:fd:7d:48:e2:da:76:31:42:3a:72:d4:4d:6e:79:fb:56:
73:5a:36:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:33:50 2025 by rpki-client