Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: AUXC6O6eW8oh2kbKicEPoHuBvYtGalXVrontj6HHTG4=
Subject key identifier: 1E:D6:D7:2F:A0:82:A4:07:21:53:2B:90:D8:25:57:6A:FC:1B:7F:85
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 01974AE8D13FE67AE869456B177F45A13154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 105D
Signing time: Sat 07 Jun 2025 15:01:01 +0000
Manifest this update: Sat 07 Jun 2025 15:01:01 +0000
Manifest next update: Sun 08 Jun 2025 15:01:01 +0000
Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: th9gbyPsAq+CHkqQQ2EJcOTUOKit2SWVq8gakbyCwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:d1:3f:e6:7a:e8:69:45:6b:17:7f:45:a1:31:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Jun 7 15:01:01 2025 GMT
Not After : Jun 8 15:01:01 2025 GMT
Subject: CN=1ed6d72fa082a40721532b90d825576afc1b7f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:53:58:a1:b6:d1:22:8a:6c:46:14:bf:78:
72:65:a8:e4:01:2b:89:a9:22:67:e0:f7:00:44:d2:
5e:41:c2:1e:08:be:aa:c1:2e:26:18:be:92:26:78:
9b:07:95:db:1b:b9:61:a9:32:91:aa:44:b2:40:cc:
98:d6:2e:ab:f2:bd:f8:46:f4:70:dd:2d:ff:d2:c7:
fd:82:1f:72:98:cf:35:a3:d4:7d:7e:04:5e:5e:ac:
5c:36:46:1c:27:da:31:a4:47:cd:cf:06:b2:44:1d:
3e:31:7a:02:57:46:4b:1d:2b:80:9e:7e:3d:ba:98:
09:96:eb:0e:11:b9:62:38:58:0f:df:bb:01:10:7a:
53:c5:82:91:7a:cc:bc:be:08:d3:09:87:42:02:5a:
47:9c:e6:cb:14:ab:92:98:28:5c:86:95:2c:bd:e7:
99:14:ff:d3:5e:9b:02:4f:69:6d:b4:5d:5a:87:a9:
6d:1d:ae:cc:f1:df:3e:de:22:e5:0d:a0:03:a1:42:
70:9c:62:c5:0e:8e:e9:a8:ad:f4:1c:53:b4:15:c1:
fb:bb:1c:47:cf:51:14:93:54:48:e7:b0:0d:86:0a:
e5:20:47:b9:98:73:6f:34:ab:d6:43:d7:a5:a4:f5:
5e:44:66:d5:6b:23:3a:c2:22:47:c2:d8:7b:de:ac:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D6:D7:2F:A0:82:A4:07:21:53:2B:90:D8:25:57:6A:FC:1B:7F:85
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:93:8f:71:2f:5c:42:ef:a3:cc:40:e8:b9:ff:28:89:06:c1:
a3:53:24:c7:fd:e4:05:7a:ad:e4:c8:fb:16:43:ad:46:0e:0a:
12:23:54:d0:e9:7d:93:b5:36:c3:56:ca:2b:92:7f:e7:ca:01:
f3:1d:d3:02:d4:c4:43:18:42:40:c8:9a:28:2f:e8:c3:dd:fd:
6e:ca:0d:24:e5:03:ed:cd:03:82:84:39:dd:3b:55:12:12:f4:
7d:c2:6f:22:25:a1:fb:b4:6c:1f:d6:14:56:95:f6:e2:a1:c5:
56:80:6f:27:8e:85:c0:d1:7d:42:28:19:16:84:29:24:52:a7:
64:2e:39:e9:b2:c5:84:b1:95:47:85:de:5d:c5:8a:86:f5:7f:
44:f5:3a:57:e0:f3:fb:77:e9:bf:43:e5:5a:fa:44:bf:b0:f2:
60:b7:d4:e0:79:e8:34:81:a6:45:c7:6e:b1:0c:3b:e7:45:c1:
f7:80:21:51:a7:bb:d0:8d:e2:d3:d5:63:07:be:b2:54:42:59:
c5:04:6b:01:eb:74:cc:7c:27:ad:7d:c4:db:5a:17:7a:49:25:
bb:41:4e:d3:12:72:a1:60:62:e9:43:d1:19:c6:b7:bc:e9:18:
6b:a2:22:9f:ba:7b:4e:7e:e9:d0:4c:34:b4:4d:cb:c3:e9:2c:
5d:35:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:36 2025 by rpki-client