Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: Yy3BEvEJJFPwanPnjSAcnouBHbBKPUJPIemPVecJLM8=
Subject key identifier: B5:2F:7C:F9:77:AE:37:54:A8:4E:B5:36:CA:78:72:F9:18:E2:AA:BE
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 019873E34DCFA13376BF762E9C75E471F46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 0417
Signing time: Mon 04 Aug 2025 07:02:13 +0000
Manifest this update: Mon 04 Aug 2025 07:02:13 +0000
Manifest next update: Tue 05 Aug 2025 07:02:13 +0000
Files and hashes: 1: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (hash: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: lrdj1bx0zp1qPqkqcwACNRXLG6Lo9LGPThM+riTXVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:4d:cf:a1:33:76:bf:76:2e:9c:75:e4:71:f4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Aug 4 07:02:13 2025 GMT
Not After : Aug 5 07:02:13 2025 GMT
Subject: CN=b52f7cf977ae3754a84eb536ca7872f918e2aabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:db:4b:a6:64:08:9c:b8:2d:be:ae:ca:89:
56:84:b1:2a:d6:74:f2:6c:ea:0c:a5:b3:8f:e5:90:
d1:2b:0a:6a:92:15:30:be:c6:4c:c7:3e:a3:c8:ca:
fc:62:a4:43:0b:48:c6:b0:db:8f:bd:8b:c9:f8:f5:
ca:81:79:16:1e:96:7f:bf:71:d8:be:8c:a7:d5:d2:
fd:a1:50:54:e5:0f:36:df:57:d5:32:d0:6e:dd:38:
64:28:0f:a8:10:b7:1c:97:d8:b0:38:d9:70:2c:6a:
c0:88:e3:0b:ca:c9:88:eb:2a:cd:f8:53:a3:4b:80:
e6:70:e2:c6:87:19:42:5f:12:04:8d:31:88:2a:11:
75:72:5d:41:39:36:56:2a:6a:0a:5c:3f:09:c0:84:
4d:35:4c:eb:43:04:0d:6b:dd:d0:34:8c:83:ac:6d:
48:ce:98:a3:60:23:2a:fd:da:d0:81:fa:84:bf:1f:
73:12:ca:0b:1e:88:61:6b:e5:fa:5d:0f:37:13:4b:
df:97:fe:00:2c:91:76:06:d1:f7:80:5b:e5:b5:4e:
bb:f5:ce:66:76:4d:64:0f:82:dc:f3:eb:5e:69:fc:
a3:cd:ad:e2:67:14:e1:42:a1:b9:7b:35:3b:48:c9:
66:76:c8:f6:cb:a5:0c:ed:d3:e4:08:06:f2:6f:15:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2F:7C:F9:77:AE:37:54:A8:4E:B5:36:CA:78:72:F9:18:E2:AA:BE
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:47:0f:a2:56:88:82:bf:2e:bc:2c:02:58:cc:37:53:f6:42:
bf:fa:69:3b:c3:25:1c:df:82:92:3f:5e:80:2d:49:0d:dd:5b:
bb:61:ae:dd:bd:c4:d1:69:70:b3:24:51:3b:64:2d:80:bd:ed:
8b:53:ab:cc:12:ef:da:0b:03:0f:e9:2e:0e:19:3a:f4:dd:a5:
30:4d:e4:ee:05:16:c7:37:f3:a5:39:e6:24:68:38:11:d7:a9:
eb:50:43:0d:e3:3a:d2:8f:b7:e5:13:b1:d0:17:6c:dc:bf:2d:
4f:4e:22:3f:46:34:fb:4a:c9:dd:e5:ee:92:3d:14:d7:fc:6e:
f9:48:ab:c5:78:2e:6a:e0:8d:f9:ec:1e:3b:3b:43:44:e3:c8:
e4:3b:b2:8b:f2:fc:16:56:ba:f4:bc:f2:70:08:00:e4:71:e3:
9c:73:c3:1d:f5:57:54:69:9d:c1:83:0b:d1:72:52:9d:a0:bf:
f7:8c:59:73:1e:9d:c3:a6:7d:de:a2:51:b0:87:6b:e4:9b:9e:
d3:fd:74:4d:7e:28:23:d3:72:6f:b4:50:20:ab:11:be:84:6d:
2f:73:61:30:59:92:df:34:d6:2a:c7:38:16:05:59:55:8e:e0:
8d:65:f3:94:56:25:3b:0a:e4:c9:b2:b3:52:a4:f2:2d:00:44:
ad:24:c9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:30 2025 by rpki-client