Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: eU3zEuruNPBzhCAMTdzbLiRFYNsFLH//LjHr4JAWMLs=
Subject key identifier: 5E:B6:BA:37:36:66:44:C5:E9:19:4A:F8:AC:56:DE:E0:CA:2A:B6:EE
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 01974C69B2A9F316D13D5A4992E3447463FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 04CD
Signing time: Sat 07 Jun 2025 22:01:24 +0000
Manifest this update: Sat 07 Jun 2025 22:01:24 +0000
Manifest next update: Sun 08 Jun 2025 22:01:24 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: mQUV2wuG2gkcTc3eL3PhBUcX2ZX/w/ttMMEvuhxfhz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:b2:a9:f3:16:d1:3d:5a:49:92:e3:44:74:63:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Jun 7 22:01:24 2025 GMT
Not After : Jun 8 22:01:24 2025 GMT
Subject: CN=5eb6ba37366644c5e9194af8ac56dee0ca2ab6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:aa:62:39:40:b2:29:da:d5:a1:c1:bb:8b:
84:97:aa:37:f1:69:f4:34:d1:7a:ec:04:5b:6f:0a:
e5:03:ea:84:aa:44:01:62:d2:66:fc:59:5e:39:c3:
b5:19:ce:be:8b:cf:48:de:00:dc:30:7d:a7:b1:af:
91:59:e3:44:3c:33:bc:f1:49:ba:c3:90:63:d6:38:
14:0c:cb:c7:a0:b8:0b:2d:e9:92:98:db:eb:4a:8f:
a4:a1:b5:73:27:ca:c8:16:71:19:28:1d:64:df:8c:
d2:fb:c6:8b:c2:0e:28:c3:ef:3c:01:7b:77:50:19:
62:a1:1e:47:5c:1a:13:69:15:f2:5c:33:f7:d2:88:
7a:53:a7:dd:a7:60:e9:05:4d:45:be:a2:6b:8c:aa:
43:32:8e:45:56:70:8f:c3:51:9b:f8:9e:d2:01:f1:
24:47:c8:4d:d1:71:88:7d:bb:1d:9b:58:6e:e0:98:
91:05:77:da:cb:f9:92:50:9c:22:19:5a:3c:14:d9:
2b:c2:21:51:3f:b9:cd:e7:fc:35:6b:3f:f3:3a:8e:
1d:c7:68:78:55:54:b1:f9:66:e8:81:23:3a:43:2e:
3a:ab:34:f7:8d:00:6f:e8:86:e6:3b:e1:96:d9:98:
3a:9b:b5:de:c1:93:64:f4:6b:97:9f:56:1c:a9:cf:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B6:BA:37:36:66:44:C5:E9:19:4A:F8:AC:56:DE:E0:CA:2A:B6:EE
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f8:11:43:fa:c9:f4:6c:cb:1d:aa:a9:84:a0:59:6a:88:8f:
f0:f1:82:0a:6c:69:c4:c5:00:11:d8:be:b5:b5:a2:13:61:24:
44:ba:69:2a:5c:41:41:bd:71:55:6c:b6:c4:47:a6:25:b9:90:
41:cc:8f:1b:92:39:98:87:cf:fb:f3:a5:b8:7c:b3:e3:37:c5:
69:9f:ea:06:0d:6d:cb:94:04:1d:44:90:0d:0f:bc:b5:bd:66:
ba:a2:d3:a6:2f:60:d1:ed:db:ae:f8:be:46:87:70:58:a3:7c:
47:65:b3:4d:25:22:78:28:6c:3e:61:0d:1e:7d:b6:38:d6:6f:
2c:f0:31:83:50:64:f9:9c:84:24:42:5e:70:06:4b:04:f1:53:
06:d2:aa:f3:9d:87:ab:25:c7:24:6f:5f:eb:39:9a:fc:7e:d8:
18:5c:cd:f5:20:01:a8:13:40:60:e4:71:2f:17:34:48:5d:01:
b0:42:b0:33:49:22:a6:00:bc:3b:e1:ce:8a:5c:1d:e6:5e:aa:
36:a5:d9:14:39:8e:90:6d:b5:f3:14:73:53:60:3e:04:fd:6e:
10:79:7b:83:64:68:32:49:17:e6:f9:1f:78:7d:72:ad:46:2f:
8c:c0:b2:f5:aa:c7:78:9e:9c:9f:ca:7b:22:d1:5f:64:49:e1:
0d:7b:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:28 2025 by rpki-client