Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: pIEk/Sune9Eh9s5h3OYDBAga8Yxq05A1ySE49XnQUkk=
Subject key identifier: 28:57:59:35:58:3E:35:5E:55:EA:97:23:3A:54:80:AF:2D:ED:A5:BA
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 0198D4E068A5655B229F0609A13F3CB31325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 03:02:13 +0000
Manifest this update: Sat 23 Aug 2025 03:02:13 +0000
Manifest next update: Sun 24 Aug 2025 03:02:13 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: 9m371QGNluVmpnk8IDPI5m9uA/WQqF6gugVleERw6rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:68:a5:65:5b:22:9f:06:09:a1:3f:3c:b3:13:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Aug 23 03:02:13 2025 GMT
Not After : Aug 24 03:02:13 2025 GMT
Subject: CN=28575935583e355e55ea97233a5480af2deda5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:6d:0e:d3:a1:c9:29:2d:17:0b:a6:2c:e1:
d5:0c:f7:bd:50:09:6f:41:6f:de:13:0a:4f:de:57:
1d:db:3c:54:79:49:86:fd:74:d7:bb:20:b9:9a:de:
76:2c:1c:4d:f2:bc:92:0c:3f:bf:b7:09:71:e2:70:
44:ed:f4:7c:76:9c:d0:b4:84:a6:d5:21:71:b3:ce:
fc:e2:f7:87:7d:96:00:2e:ce:b9:64:dd:b8:f8:c1:
1c:df:47:25:e1:64:4f:6c:47:8d:4b:e8:47:78:42:
48:30:f9:d3:34:64:90:ae:61:21:4a:00:b9:bb:d9:
e2:fc:cc:82:c5:81:42:dc:0a:7d:ef:d1:34:dd:22:
80:0a:2b:7c:ee:c7:b3:5d:28:72:af:87:5a:c7:31:
d6:3d:a3:d0:1f:bf:3b:c4:ed:1f:80:fc:c8:98:f2:
f6:77:31:c2:cc:d0:6d:f4:c8:20:2a:a4:fe:94:79:
36:48:61:45:64:4c:b2:19:0d:3e:bc:f0:4f:9a:82:
32:70:59:5c:b6:87:b1:1e:ce:a4:67:e3:7c:d8:88:
25:c6:83:a7:72:a9:47:81:e5:48:65:ce:8a:99:f7:
27:58:33:27:3d:46:19:55:42:4a:7f:b5:a4:4e:cf:
ef:dd:7f:33:f8:71:37:2a:40:5f:a3:8c:28:5f:9d:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:57:59:35:58:3E:35:5E:55:EA:97:23:3A:54:80:AF:2D:ED:A5:BA
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f6:53:fd:23:c6:c7:28:63:0f:41:0d:aa:11:79:68:b9:5d:
58:d0:1f:47:a4:18:37:6d:46:99:d6:59:8f:82:97:ab:b4:66:
11:24:de:8c:77:5f:56:e9:23:30:83:20:8f:69:76:ab:cb:df:
c1:40:87:f9:7f:b3:3d:5b:6a:83:80:d7:e2:01:92:18:f0:39:
83:49:d8:2a:78:55:15:7d:64:ed:b9:e8:ca:27:66:02:6e:76:
8d:70:bd:28:71:ee:da:dc:d8:11:e8:71:8d:05:91:15:f1:df:
c1:90:6d:5c:6b:0f:79:fe:ba:e6:92:61:99:cf:a5:15:9a:c2:
90:a9:3a:0a:a0:e1:d0:0e:48:f9:ad:dd:a8:82:11:ee:37:64:
09:c3:a4:56:e3:53:36:02:6f:5a:8e:ee:a7:a8:a4:e6:2b:89:
9e:29:ea:5f:2f:b9:f0:93:b6:cd:ac:7e:5d:de:bf:95:96:9b:
de:00:3a:5e:ff:ae:90:ab:de:ff:b8:14:89:15:93:4d:3a:0f:
05:e0:ce:be:66:7c:ba:70:f6:29:01:4c:0a:5e:9a:b2:22:f5:
34:fc:a2:c7:e3:5d:d5:e1:28:23:b8:8f:79:76:45:4a:f3:b6:
cd:6b:1b:93:51:8d:02:c4:18:33:2b:5d:4e:51:68:15:fc:9e:
bc:24:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:38 2025 by rpki-client