Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: YIG1uBq6zOkSBemv+7OOYOMGAjVmM5jM4e8lWr8jZr8=
Subject key identifier: 65:F8:2E:89:13:EE:FC:E3:83:28:57:AC:24:62:09:15:D0:EB:30:CB
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019746D4E4F2CD29D8B92C5A8A05E9E4F856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 0E61
Signing time: Fri 06 Jun 2025 20:00:46 +0000
Manifest this update: Fri 06 Jun 2025 20:00:46 +0000
Manifest next update: Sat 07 Jun 2025 20:00:46 +0000
Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
2: OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa (hash: Nbt+Vb6iqoAZa8JSy2lqdMELR5I1GGwPOjEC79BMqrA=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: nSTL0HN0yBqL9vSr8d7noHOTaObksG8/NJM69bFenfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:e4:f2:cd:29:d8:b9:2c:5a:8a:05:e9:e4:f8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jun 6 20:00:46 2025 GMT
Not After : Jun 7 20:00:46 2025 GMT
Subject: CN=65f82e8913eefce3832857ac24620915d0eb30cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:92:d0:21:9a:56:de:71:df:cd:e6:77:82:
2e:db:53:b1:18:0a:af:a3:85:5f:c8:bd:08:a8:c4:
87:ce:ae:cf:7e:c6:00:43:ea:2c:4a:18:f3:24:1e:
c6:46:41:e7:e8:0d:39:a9:cd:f8:a1:ea:96:3a:14:
41:80:13:b1:c1:6e:7f:82:d7:77:62:69:2f:d6:ee:
61:61:93:66:f2:4f:5b:e0:bc:c6:48:c4:1f:cd:5d:
ee:a8:bf:c6:d6:dd:69:00:90:42:41:a3:ac:f0:bc:
05:e5:6e:7f:76:e7:80:52:16:6d:05:d1:24:05:b4:
ee:f8:40:17:75:32:57:9f:f6:a9:49:6a:26:19:ae:
55:3b:4c:e5:1e:2d:41:bd:20:9e:ed:54:a2:c2:54:
93:bc:51:e9:9e:cb:5a:bf:2a:1d:35:aa:50:6c:06:
50:e9:b3:ff:b3:b6:1f:21:fb:1f:ba:72:25:25:3f:
c1:48:09:15:3f:c4:ff:94:70:dd:cb:ef:fb:03:0e:
d2:f6:eb:b3:16:2a:4e:af:b8:61:4e:e0:83:ac:5e:
b5:8e:d4:83:c0:56:83:1f:7a:65:14:95:90:d7:c5:
b1:c0:6e:e1:3d:4d:95:c0:91:fb:71:a1:4d:8f:56:
6e:dd:ea:6c:c9:64:39:29:2e:23:dd:9a:b5:2c:cb:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F8:2E:89:13:EE:FC:E3:83:28:57:AC:24:62:09:15:D0:EB:30:CB
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:df:11:d8:a6:8c:f8:da:5a:b8:bb:e5:50:0b:9e:91:12:7a:
ed:92:d8:0e:23:ec:01:8e:73:17:ba:82:6d:9d:47:b8:5d:69:
03:f9:b5:e6:eb:b8:dc:a1:c2:54:f3:da:91:f7:be:c9:f4:e4:
18:da:de:0a:3a:63:0c:a7:50:e5:da:f2:b5:4c:58:57:7e:2d:
2a:2f:c6:2c:a7:0f:48:a2:ee:5e:8f:2e:af:42:f6:84:b5:56:
d9:4d:eb:b6:5c:0e:4c:39:99:e6:f2:38:81:b2:ca:a9:44:54:
9e:cd:72:73:75:53:d5:18:82:23:0f:3e:dd:90:73:b9:d7:39:
7e:36:bd:b1:42:a9:e4:f5:ac:ab:e2:d9:3b:ae:e3:61:e1:f1:
7f:83:94:03:72:18:62:0d:dd:e9:3b:50:7e:37:a7:32:b2:cd:
9b:18:23:15:d5:2c:33:e4:48:75:da:6b:d0:fe:80:8f:97:81:
de:7a:89:28:7f:d4:54:b1:51:74:41:4c:f4:55:be:7d:38:66:
ad:a7:66:72:05:5b:0c:a0:9f:cd:5d:e6:f2:7c:c4:b3:84:10:
8d:21:ef:24:ab:ab:d5:1e:25:81:1c:ce:23:a1:6b:8e:e7:c9:
2b:79:82:89:9c:5d:20:6d:d5:1b:e9:45:99:0b:f3:53:4c:27:
0b:85:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:50:33 2025 by rpki-client