Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File: yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier: p9ucxVWadog0FC2ahGwBO6IvRr6pjjZkwe5sKzg/Zgk=
Subject key identifier: AE:15:15:6E:74:31:A9:D2:69:AB:7C:02:30:41:01:47:DF:5B:76:68
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial: 01989F3AC223E7FF324A7CB1FDE072F713D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number: 0623
Signing time: Tue 12 Aug 2025 17:01:24 +0000
Manifest this update: Tue 12 Aug 2025 17:01:24 +0000
Manifest next update: Wed 13 Aug 2025 17:01:24 +0000
Files and hashes: 1: xfu021S1jJtouexa28jA9KZojkw.roa (hash: ydYZd2IQ/M2DMWZopd0Btk/t60vr6MsiYiLHbkf4rwI=)
2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: FTIKGeDOnepINi6+Pj9VQtry56zNNTtxwEEQgt7Bt90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:c2:23:e7:ff:32:4a:7c:b1:fd:e0:72:f7:13:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Validity
Not Before: Aug 12 17:01:24 2025 GMT
Not After : Aug 13 17:01:24 2025 GMT
Subject: CN=ae15156e7431a9d269ab7c0230410147df5b7668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:86:e6:16:53:5a:ff:4c:8c:cf:6e:57:64:
55:4a:af:d8:6e:c4:9b:6e:6f:83:cb:2f:dc:3f:5a:
17:66:7f:9a:4b:fb:9f:14:58:78:fb:2f:2b:c8:44:
58:97:1b:95:0c:c3:d0:b9:66:b4:42:bd:10:1e:2f:
1e:9b:64:57:96:88:66:dd:33:e7:6c:32:52:b2:03:
6e:d1:ab:cc:13:a9:8b:75:e4:61:8c:11:81:dd:05:
b4:4d:2f:74:e7:2d:74:da:12:e1:fa:9c:92:96:69:
b6:fe:45:b5:0f:ca:88:a8:8b:84:37:57:9f:bd:e2:
ea:a2:b6:9c:c3:ee:0d:37:01:aa:07:51:17:e7:17:
4a:24:fb:a2:24:95:fa:1a:e5:0e:18:a7:61:be:f3:
41:9f:7e:94:c2:98:48:55:b6:a9:f2:f4:f3:b8:45:
79:f3:85:57:15:18:46:6b:91:66:87:12:02:c8:ed:
24:a2:0f:9a:ff:cc:6e:c1:99:10:53:13:af:e2:f0:
e2:c9:70:a9:51:d9:10:cf:ac:c5:10:09:37:d1:1f:
06:a7:7a:68:8b:0d:e9:21:bc:1b:69:a6:cf:ee:f1:
55:4f:8e:67:29:89:24:77:0f:ed:5a:a9:15:b1:48:
2f:1c:40:3e:98:5b:35:b2:5b:cf:6f:7b:28:44:7e:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:15:15:6E:74:31:A9:D2:69:AB:7C:02:30:41:01:47:DF:5B:76:68
X509v3 Authority Key Identifier:
keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e1:96:88:24:88:a2:e4:92:7a:3c:85:df:02:e6:66:f1:9c:
19:32:63:07:a4:e8:a2:6b:25:79:c6:51:c9:eb:cf:5c:1e:7b:
5f:e4:a7:35:a6:fc:25:e8:77:08:47:62:c8:6b:79:42:72:22:
fe:ef:9e:1b:4e:17:e3:de:a5:dd:97:35:f9:4b:94:3b:f1:cd:
66:6a:a9:9e:e1:76:55:22:b8:28:d6:df:08:20:bd:b4:67:90:
7e:57:ee:88:3a:3d:a3:16:81:2d:a2:31:db:7f:c7:95:e1:d2:
b2:80:49:e3:1e:2b:51:fa:46:9a:68:21:f1:ee:09:2f:99:5d:
9a:65:99:41:43:90:51:e3:eb:28:50:cd:23:ad:e4:ea:b5:1e:
e1:ff:f2:25:dd:ee:36:4e:82:3f:6b:b0:17:79:15:ce:c0:45:
64:d2:40:26:7d:9b:a3:05:82:73:7e:ee:b0:20:4f:b5:66:9a:
cc:76:7f:72:e1:b2:9b:d0:e3:ed:2f:c6:55:38:6e:04:50:ad:
d4:a4:f2:82:4b:7e:ea:0b:82:ca:75:29:16:23:8f:55:86:03:
e7:41:53:c7:33:19:37:ca:fb:b8:b5:39:06:71:3f:3a:29:db:
e2:73:ce:f3:43:3b:58:5e:d2:ab:06:4f:6c:21:7f:12:e4:8b:
76:30:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:45 2025 by rpki-client