Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: 6yB3ae4/xdrjJdyxXopVms+/D3K/Muq+oyZagUYy7Uw=
Subject key identifier: 34:F0:89:34:FE:6D:BF:89:20:B5:B0:29:AA:53:45:D6:4C:C9:1D:35
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 0197C6820D9A46757F01B1C4212703EE5A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 15C4
Signing time: Tue 01 Jul 2025 15:01:41 +0000
Manifest this update: Tue 01 Jul 2025 15:01:41 +0000
Manifest next update: Wed 02 Jul 2025 15:01:41 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: Qa8RjbBiVwfjcGJhixOA8nzuO8ZSAz2VBhNDf3YS8U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:82:0d:9a:46:75:7f:01:b1:c4:21:27:03:ee:5a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jul 1 15:01:41 2025 GMT
Not After : Jul 2 15:01:41 2025 GMT
Subject: CN=34f08934fe6dbf8920b5b029aa5345d64cc91d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:73:81:7d:5f:4a:8a:df:9c:26:ab:0e:aa:
9e:36:4d:4d:0a:a2:bf:52:4f:c4:1a:45:19:9f:e7:
88:2e:67:0b:e1:7c:a9:14:42:c1:c1:c4:ad:7b:65:
f1:34:cd:55:80:c3:19:cf:5e:7e:a1:e7:d3:c4:3a:
74:83:a7:07:90:68:50:58:ea:4e:a8:ce:6c:65:d9:
9c:bf:6b:e9:53:7b:ce:a6:01:6f:1b:5c:84:83:fb:
0e:7a:49:a5:22:75:55:93:90:c1:0f:9d:3c:35:e4:
2c:eb:e3:98:54:ee:9e:47:f3:f9:d4:0e:8a:20:7c:
a9:62:f7:57:fd:8b:01:c4:ad:19:81:9f:d5:e4:ec:
ac:7b:e1:af:f8:7a:9b:26:81:a3:07:90:7e:92:62:
75:82:c0:5f:9e:64:f2:ca:e7:ab:34:5c:b9:64:8c:
f7:00:02:62:fd:85:2e:50:bd:90:33:82:1e:2a:7c:
91:2e:2d:6d:ae:92:c2:d3:06:b9:db:23:56:d7:39:
c1:a1:00:86:e1:2f:06:79:01:7f:56:25:04:cb:5d:
0a:44:c6:24:b2:1c:bd:0a:56:62:52:73:2b:91:4a:
c3:e1:dc:0b:53:ca:93:60:6c:60:95:3d:1f:69:9f:
69:d9:94:e2:b5:fe:ba:71:5b:73:38:c4:ab:bb:f8:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F0:89:34:FE:6D:BF:89:20:B5:B0:29:AA:53:45:D6:4C:C9:1D:35
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:b4:ed:6e:9a:b6:84:19:87:01:d3:d4:6f:25:c2:1c:4d:
62:81:11:0c:f9:b6:82:2e:f9:72:4c:68:41:51:1e:d8:17:38:
26:6d:6a:95:b9:3b:50:25:12:07:9e:f9:a6:8a:9f:28:0d:6d:
bf:1d:fb:54:25:ba:42:5d:43:55:55:01:61:af:ff:be:0b:72:
f6:ab:d3:7f:92:e2:1d:4e:51:e3:bc:46:f3:5f:bf:14:8c:80:
ef:e2:6a:ad:2d:35:cd:f1:bf:a5:dc:1e:cb:a0:c5:13:31:ed:
e0:87:1f:4d:33:03:17:95:d7:b1:67:ee:0c:7c:59:f7:41:6a:
68:d6:43:f7:73:af:50:9b:53:9d:ce:9c:10:08:9c:a6:83:45:
58:cb:78:30:a8:7b:e8:8d:4a:50:97:e8:b0:69:0f:75:de:be:
94:1c:87:d2:14:23:23:57:9c:16:2c:3b:22:48:40:26:9a:31:
c4:de:0b:02:b1:d2:25:c9:ab:98:42:68:cf:81:03:0a:1e:b1:
60:75:06:37:c7:52:48:4f:86:56:d3:fd:0e:90:94:83:c9:13:
c0:5d:fc:e5:25:d9:fd:01:cb:20:40:6e:55:cb:1f:75:a0:32:
df:c8:76:9e:aa:d4:89:ab:a6:ae:89:12:ae:2d:f9:ae:60:9a:
39:0b:eb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:43:32 2025 by rpki-client