Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
File: yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json)
Hash identifier: CSsRbRvMuw0GWRUv+2zCHF4rOBCBaVeTR7Nzw/m9vbY=
Subject key identifier: C8:4D:16:BB:40:15:08:B5:91:0F:66:6C:B1:96:32:AB:F0:5C:8F:F9
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 01987374861D17B57E9F3A99DC4497B9FD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
Manifest number: 034D
Signing time: Mon 04 Aug 2025 05:01:12 +0000
Manifest this update: Mon 04 Aug 2025 05:01:12 +0000
Manifest next update: Tue 05 Aug 2025 05:01:12 +0000
Files and hashes: 1: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: nnfvsaQJgChDQckqj8rX3G/9h69B+e1ROsLQibnYY0c=)
2: z4GL3R9iwn241BwmecTavitjvmk.roa (hash: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:86:1d:17:b5:7e:9f:3a:99:dc:44:97:b9:fd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Aug 4 05:01:12 2025 GMT
Not After : Aug 5 05:01:12 2025 GMT
Subject: CN=c84d16bb401508b5910f666cb19632abf05c8ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:c1:7d:f5:07:c6:77:a1:8e:fd:8c:b5:3b:
dc:aa:10:df:a4:48:0d:84:82:45:7b:a8:a3:de:43:
1f:1c:08:45:b9:4a:ac:c5:5c:e8:b5:73:3a:32:c7:
99:39:09:e9:a1:b2:5b:7e:63:00:20:1c:1f:29:fb:
6d:5f:c8:a2:67:fb:b8:41:f5:0e:f9:26:4b:67:db:
d4:78:a5:00:c3:dc:51:b2:3b:3e:2e:eb:45:1b:1b:
b3:5c:8a:da:fe:46:11:01:f7:e8:3f:d1:18:51:24:
c9:9b:f4:15:b3:5d:76:51:72:e6:5e:98:8c:cb:67:
8b:61:b1:e8:68:d4:f6:47:c3:9a:7c:bf:0c:39:85:
6f:9a:c1:11:b5:46:8b:2a:fb:b9:dd:78:42:80:72:
ec:7f:af:33:1c:bb:e7:69:f6:45:f3:d2:b3:54:08:
d0:18:f2:d0:68:c2:3c:e6:21:a5:ef:86:1e:bb:7c:
6f:97:a7:d6:f6:5c:e4:a0:54:93:fa:8c:12:a9:97:
2d:6a:d7:53:bc:68:af:b6:74:5d:fb:94:45:f0:e1:
b5:ce:ee:f6:df:90:96:aa:40:2a:a0:b2:41:7d:95:
38:8f:3a:d1:6c:41:b5:77:4a:42:85:ff:94:8e:6f:
aa:f1:e6:50:bf:26:9a:97:97:9a:7e:46:64:f7:e2:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:16:BB:40:15:08:B5:91:0F:66:6C:B1:96:32:AB:F0:5C:8F:F9
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ab:28:27:94:17:aa:2a:0a:6f:d1:8b:be:6c:af:b2:a6:64:
8a:f7:c4:14:e4:61:9d:50:70:ce:bc:43:55:8a:2e:5c:23:6a:
48:cc:07:65:1e:0a:f7:ae:f8:d2:df:bd:34:7b:e5:1c:b4:3a:
07:d4:81:40:de:b7:01:2c:5d:3b:bc:35:9e:b5:6a:a2:40:09:
25:01:47:a9:6b:57:53:02:63:86:7e:d3:53:31:59:a9:26:a7:
be:b3:67:99:08:33:68:ec:23:4a:45:08:1f:53:14:9b:5f:23:
cd:57:d6:41:2c:bb:81:28:f7:f2:c5:10:6c:67:70:ab:f5:8a:
c6:3a:ae:aa:b4:c8:5c:af:4a:99:8f:25:d4:98:87:fb:fa:f0:
a9:e9:27:2d:b0:a3:56:46:dd:a0:fb:6a:7e:4f:19:2e:e9:89:
1d:a5:67:38:26:76:da:c2:85:e2:25:3f:47:9c:6c:9f:59:e4:
b1:f5:47:ac:1e:82:3f:15:24:42:bb:1d:e6:ec:26:c1:6c:e5:
d0:2b:65:44:b3:05:63:bd:32:16:aa:f0:36:7a:57:b3:a7:fe:
7f:7c:12:74:e3:c6:87:11:c4:6c:de:71:8a:ef:6d:cf:7b:60:
fd:a2:cd:42:c6:4b:ab:d3:3b:7a:b2:8f:85:1b:30:9e:75:f6:
b7:26:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:23 2025 by rpki-client