Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File: YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier: +Mwz5C13pcemrEW63A0MZ82Y4n67veMc9dVhHSg7huQ=
Subject key identifier: 29:E0:37:18:FA:A9:F7:98:E4:42:71:48:A3:0D:30:27:D9:91:96:8C
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial: 019849654F85EF4F4BFAC7477CD20748202E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number: 033C
Signing time: Sun 27 Jul 2025 01:00:32 +0000
Manifest this update: Sun 27 Jul 2025 01:00:32 +0000
Manifest next update: Mon 28 Jul 2025 01:00:32 +0000
Files and hashes: 1: Q0gUuxATATDf6JEQ9fzt1u3IZsc.roa (hash: 3y/S39XmNPx0DoVA3l0EHWQrU4S+Z88s+G6ph2XRAwc=)
2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: mrkKacGBt7OerSwNPWtBiuCy5hJYkzsgww0fCjTQX1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:4f:85:ef:4f:4b:fa:c7:47:7c:d2:07:48:20:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Validity
Not Before: Jul 27 01:00:32 2025 GMT
Not After : Jul 28 01:00:32 2025 GMT
Subject: CN=29e03718faa9f798e4427148a30d3027d991968c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:78:75:c9:16:1b:52:1c:32:24:59:a2:70:
4b:7c:44:d7:dc:8d:e4:88:47:4f:66:b6:ec:27:be:
1c:00:66:5c:00:a3:cc:ae:e2:7b:35:68:f2:12:f1:
a0:75:ba:e6:63:4b:03:35:d8:f5:ca:53:04:d3:33:
2a:d3:23:a6:d1:34:38:92:76:ef:91:a4:8c:c2:c0:
cb:7a:ef:d9:18:e8:ba:79:f7:04:25:32:88:79:f8:
80:f6:a1:00:2b:2c:6b:fd:6b:0f:2a:68:6e:6e:79:
05:39:2a:3c:95:0e:7c:36:5a:0f:7b:a7:2d:bf:bb:
c9:49:5d:99:98:6f:a4:d9:1c:a2:39:f3:ef:59:42:
81:8a:be:80:96:eb:f8:3d:f6:1f:91:29:c8:a2:af:
a6:f9:a5:a3:b6:2f:01:f3:8a:33:73:8f:a7:05:80:
12:31:93:3a:0e:f0:02:01:ff:07:f9:4e:94:e0:c2:
15:83:ff:3c:84:3e:c9:15:73:8d:54:34:82:b7:da:
26:13:73:f2:fe:ed:ff:fb:6d:bc:b7:78:60:b8:a3:
63:a1:8f:6c:e7:7a:bd:aa:f2:e1:5a:0f:8f:6c:80:
9d:77:c5:5b:7a:ed:c6:7b:83:71:ac:fd:da:77:4d:
bf:5f:70:80:15:45:6e:b7:3c:ad:97:bd:f8:03:95:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E0:37:18:FA:A9:F7:98:E4:42:71:48:A3:0D:30:27:D9:91:96:8C
X509v3 Authority Key Identifier:
keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ae:1f:a4:27:c7:00:e9:54:07:9f:45:50:b3:16:18:1b:40:
b6:2d:81:04:56:96:94:15:95:d2:d0:28:54:5b:87:3d:77:97:
78:32:dd:dc:19:54:60:f7:4b:ff:aa:3c:fb:fa:28:52:9d:19:
e5:32:63:0b:68:95:6f:ba:18:39:e8:1d:22:da:db:4d:0e:82:
6f:51:1f:e5:8f:ff:23:19:79:02:96:43:e4:d4:85:84:d2:69:
44:2c:1c:62:6c:4c:6c:d7:d0:4a:a1:54:9d:1d:6d:e6:73:3f:
4c:91:48:58:b0:77:20:3e:84:d4:48:41:68:df:49:ea:f0:ab:
01:ca:ce:10:cf:41:52:c6:d6:b7:31:c8:37:59:9c:5b:9f:c1:
78:2f:05:24:c3:d9:2b:be:b9:d1:a7:11:30:da:d2:ec:5d:c7:
c7:90:ce:7b:65:ba:a2:56:71:06:f0:43:81:2b:d3:60:d8:e1:
7f:7a:8a:82:8e:df:11:91:06:7e:b2:da:35:b9:be:a4:2f:0c:
fb:74:9a:f5:e8:d4:20:be:c8:fb:61:5c:5b:bc:bf:1a:4a:db:
a6:6a:5d:ac:d5:41:b9:a2:c1:ff:d0:e2:44:8d:c3:7f:cd:d6:
7e:1b:8b:ae:ea:d3:62:6e:6f:71:62:40:4f:ab:5e:ae:7f:e3:
75:8f:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:20:43 2025 by rpki-client