Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
File: pYQcxzKsc43B4_5nwS5RBL74Y7o.mft (raw, json)
Hash identifier: 4ncIsNYyLsNO9A3lrBwuWsK2U0U+eF7cZoqrib6SEPs=
Subject key identifier: 3D:CC:7B:93:3A:76:52:47:6A:96:62:28:D7:35:0B:1C:09:48:16:C6
Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Certificate serial: 01974EC4F70D4C430C1680AE93715D938AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
Manifest number: 0B68
Signing time: Sun 08 Jun 2025 09:00:20 +0000
Manifest this update: Sun 08 Jun 2025 09:00:20 +0000
Manifest next update: Mon 09 Jun 2025 09:00:20 +0000
Files and hashes: 1: YFmwVrLg1hwmMKXx_Mm4unlp1Pk.roa (hash: k02tWA3CSFWvzMdYPWtnwp3L9wjqBp2dmnRijw+YwuE=)
2: pYQcxzKsc43B4_5nwS5RBL74Y7o.crl (hash: 3WBpYFwlBEGU2LjC145WKeEt2XrVSf5J5e1ZR4Hw6cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c4:f7:0d:4c:43:0c:16:80:ae:93:71:5d:93:8a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Validity
Not Before: Jun 8 09:00:20 2025 GMT
Not After : Jun 9 09:00:20 2025 GMT
Subject: CN=3dcc7b933a7652476a966228d7350b1c094816c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:e2:20:db:c1:64:1d:cf:4a:e1:58:b7:46:
81:59:e8:9d:a8:a2:56:19:e4:24:fe:d7:3e:3d:8c:
2d:50:6b:f7:6d:95:66:a2:30:ad:0d:05:b8:29:54:
94:9a:98:2b:90:20:90:82:92:59:ed:25:f7:98:d5:
46:f1:cb:e8:6d:a8:00:9c:30:ed:9b:f2:b4:cf:b2:
54:fc:dc:65:98:3f:05:4f:63:6d:f1:3a:2f:df:11:
bb:89:30:56:3f:89:78:35:b4:8a:18:b6:55:d0:5e:
9d:84:29:35:09:f7:81:b3:d9:6b:7f:58:e7:58:17:
b4:9b:2c:79:1e:37:61:bd:81:c9:78:d3:87:cc:58:
2a:a4:57:21:32:a3:2c:ee:71:d0:8d:ed:17:00:1c:
fa:4e:19:45:6c:a6:1c:e7:9e:a0:05:3e:1c:db:90:
78:66:47:8b:a2:7d:04:6d:a7:b9:cb:a6:6e:9a:68:
d9:3d:1b:7e:c9:57:9e:5b:2c:41:1b:e6:d9:8e:7a:
10:50:e4:b7:68:c9:ee:34:9b:33:fb:76:7d:89:a8:
35:38:b3:71:08:79:b4:66:91:24:ce:7f:2a:0f:f2:
d8:a8:b4:0d:ba:52:03:97:c6:56:3a:f1:b7:64:cc:
c9:fa:61:a1:66:dc:76:59:a2:33:64:af:cc:ce:94:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CC:7B:93:3A:76:52:47:6A:96:62:28:D7:35:0B:1C:09:48:16:C6
X509v3 Authority Key Identifier:
keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c4:be:77:81:e3:80:f9:6a:0a:24:43:da:79:38:50:61:00:
88:5c:0a:36:6c:9c:e4:cc:79:67:71:9f:06:8e:3f:17:13:ed:
57:d4:b8:29:ff:ea:c2:a8:9a:6d:3f:7e:e7:ea:91:a3:a9:1f:
a4:9b:54:7c:7d:26:36:2d:68:0c:14:2f:51:5b:d3:1c:71:b9:
a4:d2:3e:bc:e4:79:62:e4:d0:07:77:c1:94:23:a0:20:1e:28:
38:23:a5:d6:4b:c2:91:e0:b2:2c:dd:f8:21:de:05:ae:8e:1f:
c9:5f:54:02:23:47:f6:7c:5f:8d:61:0a:0e:ca:95:82:3c:49:
14:12:8f:74:5f:c9:3c:20:0e:af:a3:38:13:45:8b:e2:80:30:
c2:35:19:3f:9c:98:86:d0:e1:0a:10:03:41:6e:3b:93:14:b4:
0f:e4:23:75:09:e5:13:65:a1:87:91:62:05:b9:93:45:ec:4c:
64:c7:b6:00:69:3f:a3:b7:41:9d:dd:bf:4c:1d:cc:78:c2:f8:
a6:51:f2:78:7c:e6:0d:16:42:35:d1:24:64:51:8d:ba:29:b6:
3c:62:b6:ff:b3:bb:29:18:e6:48:62:74:ff:0d:9b:13:3b:2a:
82:7f:ca:cd:f1:d5:f5:58:2b:c9:ba:33:a2:dd:db:dc:d1:49:
74:85:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:39:19 2025 by rpki-client