Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: JmGZ7v9OOs9C6Y6/dtoqEm5zYW9KCQNdfgbr6CDBCD4=
Subject key identifier: CA:18:FE:09:2F:BD:28:76:BA:F1:88:19:4D:72:29:4D:B6:61:37:32
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 01973E09120C1F3469BBDBF16C6475EF835E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 0B30
Signing time: Thu 05 Jun 2025 03:01:11 +0000
Manifest this update: Thu 05 Jun 2025 03:01:11 +0000
Manifest next update: Fri 06 Jun 2025 03:01:11 +0000
Files and hashes: 1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=)
2: qQtVwx26Q11uVtNfnJzbmJUlIFc.roa (hash: Us6KZhFay/pkNMEXF/JAjIY/J6B0ztmxrmyXEzSbCqU=)
3: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: iUwVr0/+5dqh6kWOCuTlefY5xIsFdeSSfa6Xaw5GOZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:09:12:0c:1f:34:69:bb:db:f1:6c:64:75:ef:83:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Jun 5 03:01:11 2025 GMT
Not After : Jun 6 03:01:11 2025 GMT
Subject: CN=ca18fe092fbd2876baf188194d72294db6613732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:be:5b:83:08:56:16:4d:e4:7e:8b:91:71:
5f:45:6b:ba:2e:f5:10:dc:30:9e:71:c7:9d:5f:84:
ab:9e:71:ad:93:a2:b7:fb:d8:ab:24:33:4e:50:6b:
f5:c0:99:9a:37:a4:ce:0d:c7:09:dd:f7:38:ba:74:
fb:d0:70:80:28:c6:d9:0d:be:12:87:77:29:03:de:
f8:dc:59:93:0b:95:24:60:83:c1:f2:e6:6f:28:41:
8d:26:36:16:b3:96:9d:03:1f:df:da:3d:de:ae:0c:
99:69:c1:fa:7e:c6:e2:f9:73:9d:1b:6e:71:d8:79:
47:0d:12:d5:64:b6:71:f3:71:25:17:a8:18:b3:b0:
ee:30:ad:ec:71:d1:c8:66:fc:71:60:cf:75:33:55:
5e:74:9c:d0:ae:3e:c2:85:57:62:d8:71:db:95:16:
34:10:11:cd:bf:6b:0e:68:b0:4c:7c:bd:3c:75:55:
58:c5:bf:a9:8c:19:35:5e:9e:24:20:69:e7:41:4b:
cc:e2:19:32:5a:ba:d8:68:77:d6:a1:32:08:a5:ff:
df:f8:9e:05:6e:38:0d:c5:2b:f2:aa:94:d8:57:4f:
f0:dd:7a:cb:e6:54:a8:3c:33:09:4a:a8:ba:6d:5e:
ee:14:56:2a:16:8b:f9:3c:28:ef:e2:04:f3:fd:7b:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:18:FE:09:2F:BD:28:76:BA:F1:88:19:4D:72:29:4D:B6:61:37:32
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3a:4e:7f:23:bc:8c:be:d6:88:c5:06:ca:e2:b2:f0:a9:63:
0f:63:44:2c:34:dc:39:78:99:1d:d3:1a:37:23:e5:77:f6:23:
b3:f5:02:29:35:b7:87:8a:0a:36:d7:85:88:ae:9e:7b:f3:bc:
86:67:45:b3:be:24:49:91:46:19:80:5e:b3:78:85:33:4d:eb:
8a:38:e5:af:ea:27:6d:8c:5f:06:38:15:73:3d:85:48:c5:ae:
8e:a8:5b:2f:3a:cd:fc:11:91:90:b8:b8:89:84:f1:c7:dd:96:
cc:b9:bb:d9:b1:ed:d1:28:2d:fd:20:ea:fa:b4:14:b0:69:a5:
d3:72:01:d0:8f:11:87:a0:46:23:37:05:cf:c8:e4:b6:3b:d4:
76:84:65:69:40:a5:ba:62:2f:0f:3d:62:28:40:94:db:05:77:
f7:f5:4d:df:5d:b1:eb:e4:2b:ae:63:46:98:d7:ba:80:f2:e1:
59:a2:ba:13:df:d4:4d:2e:ce:6d:b9:fe:4d:2c:d3:d6:5e:b5:
f9:7b:f7:60:b7:e8:63:aa:f9:0c:ce:65:09:b6:5d:68:18:f7:
22:cf:4a:09:d2:f6:dd:b9:7b:30:0a:33:d6:44:36:35:e9:bd:
33:fe:4d:c0:2f:b8:f2:70:5a:ce:1c:35:26:2f:48:92:d2:0c:
ed:c9:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 08:42:45 2025 by rpki-client