Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: Jk373nlhyMrVfeDTwjCjrvFPb2JoT3uYhD7R8pW+EZA=
Subject key identifier: 14:50:6E:AB:4A:F2:9C:FD:32:B1:C1:6A:2C:19:77:D3:7E:6E:B4:30
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 01987E659434CF8291D5D76FC8C2981433E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 0452
Signing time: Wed 06 Aug 2025 08:00:42 +0000
Manifest this update: Wed 06 Aug 2025 08:00:42 +0000
Manifest next update: Thu 07 Aug 2025 08:00:42 +0000
Files and hashes: 1: de76rG8nL4tZzOssRD1ykxkBwJQ.roa (hash: PZ6Gs/7Ric8QzvgdkQxDNgPGEbYADwXFDmxjygY8QME=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: xbeqAcymNn6nD9iDpFfi1zBbiL4ztwwZnIkO1hu2b0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:94:34:cf:82:91:d5:d7:6f:c8:c2:98:14:33:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Aug 6 08:00:42 2025 GMT
Not After : Aug 7 08:00:42 2025 GMT
Subject: CN=14506eab4af29cfd32b1c16a2c1977d37e6eb430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:3d:2f:dd:62:41:52:3d:07:50:91:93:cf:
56:57:f5:3a:10:d7:c0:9e:7c:8e:3d:55:91:fc:78:
6d:ff:2c:52:71:53:05:63:fb:64:56:c6:56:9e:47:
0e:b4:b8:f2:80:95:05:d2:b3:d5:03:8b:b4:62:4d:
c3:2e:6b:ef:c0:3e:9c:cf:63:0d:c2:93:ce:eb:d1:
8f:b5:6c:94:9c:7e:b6:23:95:10:e5:4d:a4:0c:cf:
d3:1f:47:89:1a:87:83:55:06:a1:5a:80:9e:24:19:
46:93:75:df:0d:5e:3e:3a:df:0a:8c:1c:3e:08:7d:
f7:9a:60:f9:e3:1b:2d:ce:91:78:6f:a7:c5:b2:68:
19:8b:d5:2f:4f:f5:42:de:26:c3:3f:34:00:68:52:
f6:64:df:df:b5:5c:be:0e:0a:f6:c6:e3:d7:b4:41:
5f:b1:a5:0b:ff:a2:de:c2:0c:15:f5:df:27:e4:5c:
9f:15:c3:57:bd:50:f8:2f:fa:82:1f:11:a2:87:11:
12:7a:0f:36:2e:70:76:7c:ff:62:9c:2d:b0:94:1d:
ab:d0:ed:86:fe:2a:2d:4e:47:2a:8d:85:15:a6:07:
62:8b:ff:6c:78:b9:00:a9:01:68:b8:7f:1b:98:be:
a8:58:a3:0f:da:bc:aa:0c:83:79:e4:06:ac:8d:62:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:6E:AB:4A:F2:9C:FD:32:B1:C1:6A:2C:19:77:D3:7E:6E:B4:30
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:8a:09:e9:af:4e:b7:89:b7:7f:8e:ed:aa:81:42:fc:af:
d6:4b:49:6b:c6:5e:c7:6f:dd:97:d3:e7:9a:8d:76:62:b2:56:
6b:4e:e5:c5:51:49:03:55:32:39:86:e6:2c:42:2c:d4:a6:b2:
6b:33:1d:68:f4:7f:70:ec:5a:1f:99:93:7f:ed:2f:c1:88:30:
b1:ce:3a:9d:ed:ac:b7:50:d1:61:30:f1:29:69:24:e0:e2:b2:
81:8a:71:72:fe:6d:9b:27:2f:bf:ff:f8:37:f5:33:64:44:80:
d0:42:72:a1:24:ac:96:ae:c8:51:00:9f:ce:23:8f:b3:51:a0:
16:cf:d4:e6:a7:29:38:5f:ba:04:49:ca:bc:1b:4a:e5:cb:64:
89:a8:df:73:c3:dc:3d:03:13:2e:6e:2a:d0:90:f4:96:2d:78:
9a:67:64:8d:59:1a:21:f4:e7:77:41:f1:3b:43:b4:aa:47:f0:
b6:46:ea:bf:ad:ac:b1:2b:34:1c:d5:5a:61:f0:e7:80:3d:e5:
4c:28:c6:9e:76:d4:71:ea:5d:7c:68:85:cc:e4:d0:df:57:32:
fc:22:f7:ce:5c:80:82:bc:de:65:41:64:2f:11:82:fa:92:66:
cb:39:bc:2a:d6:8f:8c:3d:7e:85:29:5a:bb:9d:f5:91:e5:41:
58:4b:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:15 2025 by rpki-client