Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: YLdQzw5pukb26bmZOAGquMuQaiUMlwuZfKOwBL4HXZM=
Subject key identifier: E9:46:50:90:8A:56:DF:A8:D6:72:8F:E0:35:71:39:B2:43:52:2E:9C
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 0198D5BB78185E64C76065D01FED34B7E4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 1490
Signing time: Sat 23 Aug 2025 07:01:29 +0000
Manifest this update: Sat 23 Aug 2025 07:01:29 +0000
Manifest next update: Sun 24 Aug 2025 07:01:29 +0000
Files and hashes: 1: Iq8sBOoYl2FdEDuOs7ZjqubA0mo.roa (hash: cKH71Gw8ENbKfDC7hsHD0Ixm5ykhTLruun3w+xwHV3U=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: E6MDqS6DMFhznxFqi1HkJkDWcoZ59hbV1+vB+R7BRGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:78:18:5e:64:c7:60:65:d0:1f:ed:34:b7:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Aug 23 07:01:29 2025 GMT
Not After : Aug 24 07:01:29 2025 GMT
Subject: CN=e94650908a56dfa8d6728fe0357139b243522e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:79:22:61:7d:01:3b:ad:5a:f1:66:66:28:
48:f9:f4:5b:7f:d3:69:d5:db:18:61:32:e9:f5:3b:
fb:77:93:ee:4c:ea:91:2c:8c:32:da:5d:3c:e7:51:
20:52:29:29:3e:61:03:8c:97:17:b9:19:45:9e:d7:
63:4b:b1:ce:86:1b:42:92:8a:97:82:4f:da:df:a0:
30:ea:9b:09:11:4c:21:d9:70:69:7c:6d:1f:91:a4:
3a:43:e1:67:8a:0c:02:dd:71:c7:54:07:34:0a:a7:
f4:ff:97:45:98:be:0a:f5:d7:d1:5d:e8:a8:39:db:
b3:45:99:6e:85:96:8d:12:43:87:30:db:9c:a1:89:
1c:2a:99:ad:e4:2e:27:bc:a9:fe:70:79:7b:18:0d:
31:cb:e0:fe:50:f3:da:45:b7:ef:2b:07:25:3b:43:
3c:8c:11:8e:13:20:d9:b1:5b:e9:8a:15:f1:7a:05:
89:f7:89:f6:db:b9:6e:0d:ae:c0:0d:c4:99:04:70:
6a:69:8a:4f:f7:c3:04:0c:0b:c9:8c:c3:13:e1:e1:
25:62:cc:65:9f:50:3a:81:10:46:49:67:9a:7a:0b:
cd:42:dc:d8:dd:a1:eb:45:ae:07:ae:b5:8a:f1:4e:
a3:bc:12:c5:df:75:8e:f4:0a:d2:81:56:d1:2e:ec:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:46:50:90:8A:56:DF:A8:D6:72:8F:E0:35:71:39:B2:43:52:2E:9C
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:39:16:c0:38:eb:74:15:bd:8d:42:e2:a6:55:92:30:ad:04:
75:8c:3f:3c:f0:02:d6:16:a5:78:5d:c4:84:26:85:8d:31:43:
51:98:d5:88:fe:2f:94:55:8f:7e:29:5c:e7:24:0e:ff:6f:56:
0d:01:d9:8b:da:92:1a:1d:e4:91:e6:ed:74:b3:15:85:39:2f:
2d:94:bf:25:e4:09:f3:87:ac:ba:46:2d:0f:f4:a7:6a:f1:19:
42:b1:23:a3:2b:66:2e:b1:45:5b:6e:81:54:d2:80:72:ab:10:
a6:16:c8:76:af:d8:87:c4:c5:dc:88:71:08:f7:30:d4:87:ef:
9c:54:3a:34:56:50:87:1e:2d:2b:e1:29:e4:12:1e:cb:1e:df:
ff:a4:d6:e6:44:45:76:ea:dd:dd:dc:13:64:d1:d8:c5:1a:84:
dc:df:f6:02:4d:44:c0:01:f3:6d:40:d9:e7:4a:04:4e:50:7f:
0a:02:65:0d:ed:33:b3:20:96:45:da:e7:df:25:fb:7c:57:8a:
84:08:59:93:c9:d6:98:2b:19:c7:50:3e:d4:07:9b:17:5e:7e:
b4:73:3d:c9:3f:a2:c4:ac:bf:19:1b:da:69:a9:c3:e5:9b:93:
fe:64:ec:fc:b6:77:2b:01:ef:b1:61:bb:f6:0a:29:2d:af:73:
9c:2f:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:47 2025 by rpki-client