Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: 6M38Rb8EoDvvhS5HmO26bVbXwaBZQ2G0v9864w8fws0=
Subject key identifier: 95:D1:EF:D1:5C:EF:1F:8A:D7:54:34:22:F1:36:4A:BC:4D:BE:A6:EA
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 0197794240970B015DB0C8B0E979CB91AC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 159C
Signing time: Mon 16 Jun 2025 15:01:14 +0000
Manifest this update: Mon 16 Jun 2025 15:01:14 +0000
Manifest next update: Tue 17 Jun 2025 15:01:14 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: swYgPE6jZ6x/g9s/tV4FpogSEKuFlu5/tDgsK3QQN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:40:97:0b:01:5d:b0:c8:b0:e9:79:cb:91:ac:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jun 16 15:01:14 2025 GMT
Not After : Jun 17 15:01:14 2025 GMT
Subject: CN=95d1efd15cef1f8ad7543422f1364abc4dbea6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:6f:30:cd:3b:2b:0b:7f:a8:66:ad:02:c2:
d5:c6:90:cf:97:03:65:7e:48:e3:37:17:41:0e:c5:
ee:a1:02:6b:e5:a5:dc:f8:61:f7:a4:82:b1:a0:41:
70:e6:e8:d0:f8:da:78:1b:de:3c:b0:33:35:37:6e:
0c:38:ac:96:dc:89:81:ab:b7:9e:c1:9c:ae:cf:8f:
cf:e1:01:b9:17:99:df:8f:1d:19:4a:6b:6c:a6:ad:
f1:34:fd:b3:6e:85:31:f8:29:bb:b3:d1:3f:a8:3d:
d4:8a:22:26:01:4b:71:99:35:4a:c4:0f:de:08:bb:
12:00:62:63:a7:ba:90:2e:77:fa:c8:ad:af:83:33:
2d:11:d3:60:f3:00:58:60:ba:5e:d6:fe:47:b3:07:
93:d0:db:44:d4:05:b1:2a:7e:84:85:13:3d:fb:59:
3b:da:01:15:c4:3c:47:10:22:c8:85:a2:f6:0d:1e:
cb:fd:66:94:e3:08:83:ea:d4:97:b4:75:85:0d:40:
49:09:df:b8:b2:9e:7d:42:28:d4:bc:5d:14:28:d1:
87:21:b9:34:8a:7f:c8:85:25:b1:da:7a:46:35:42:
3e:b2:e4:37:a7:54:c7:14:9f:4e:2e:fe:73:be:aa:
48:c4:bc:86:8a:0b:f7:d1:c7:f5:d4:48:fc:40:00:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:EF:D1:5C:EF:1F:8A:D7:54:34:22:F1:36:4A:BC:4D:BE:A6:EA
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:19:70:32:73:f6:af:9b:30:2a:f7:eb:cc:ea:1c:11:fb:2f:
42:f4:66:ca:59:b9:0e:04:ee:17:b6:c0:1f:be:9b:aa:55:da:
a2:ca:d3:cf:4f:9a:bc:c0:02:cc:b7:c0:4b:a4:7d:b0:6a:d0:
c1:de:fd:47:d7:2e:e1:fb:13:94:f6:ee:21:b7:51:64:6e:fb:
95:1e:d2:80:5b:4a:0d:7f:70:d7:de:cd:25:b8:90:44:74:2e:
3e:79:ac:f8:4f:eb:6f:26:28:18:76:75:49:bd:d3:09:9c:a7:
03:33:ab:38:61:71:84:97:f6:b1:c3:20:c8:70:79:b0:a6:9f:
01:5f:a6:36:74:f0:6e:38:6a:76:c7:cb:b6:8b:0e:04:70:ab:
9b:6b:5f:ec:ea:9f:33:5a:a9:1d:03:cf:12:63:55:75:47:1f:
20:7c:30:37:44:3a:0d:a7:68:d2:7a:7b:65:cc:e4:88:eb:6d:
ec:4d:36:9e:b1:4e:36:b0:2d:fd:84:20:60:34:07:22:e0:17:
80:05:43:6e:c2:87:a7:90:29:94:54:d4:0d:78:6e:bf:35:bf:
86:aa:2c:d4:e4:22:65:ac:df:5c:81:bb:c2:94:42:22:1a:18:
f9:e0:05:91:b1:81:37:68:df:76:72:1a:9b:e0:a1:cf:15:d3:
83:9f:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:46:32 2025 by rpki-client