Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: h+2NdDxlnCFa2OM+nRrpHIkxTCJZwDO1VKjsfNekZXs=
Subject key identifier: 8F:C9:E0:A6:22:F5:D3:AB:57:52:E3:5D:ED:A6:65:9C:99:13:3D:36
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 0197488D33F94CCB011CF8F862E64133FFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0C5E
Signing time: Sat 07 Jun 2025 04:01:42 +0000
Manifest this update: Sat 07 Jun 2025 04:01:42 +0000
Manifest next update: Sun 08 Jun 2025 04:01:42 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: MF+X1tzpAdPnzDeuNEvejO4snD3SfPT/F1Gzy5JSJw8=)
2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:33:f9:4c:cb:01:1c:f8:f8:62:e6:41:33:ff:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Jun 7 04:01:42 2025 GMT
Not After : Jun 8 04:01:42 2025 GMT
Subject: CN=8fc9e0a622f5d3ab5752e35deda6659c99133d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:c5:00:42:7f:cf:e7:04:bd:9b:5e:21:b6:
48:2b:d2:ee:3a:14:59:82:53:b4:f9:9f:62:d3:76:
7e:c9:5d:d7:e9:bf:82:0a:3f:af:47:9d:cf:18:40:
9c:99:f8:87:e8:17:31:10:de:9b:1f:05:f7:15:c1:
58:5a:35:65:d8:b6:8a:e1:7e:9b:3b:68:df:11:72:
e0:b8:a5:7c:35:cc:ea:9f:81:e3:94:0c:52:a6:b0:
57:74:e8:d1:5d:69:46:e9:81:b3:a2:44:b4:b9:4b:
fe:a3:27:06:a1:95:fa:78:1b:8d:9b:e1:c6:a8:94:
59:9e:46:f0:a2:d9:1e:bc:b4:09:ac:03:9c:8c:13:
27:bb:6d:bb:54:9d:dc:33:1c:00:59:a9:b0:cf:a9:
a0:28:28:60:7b:68:fa:55:58:31:3d:aa:69:87:a4:
86:a9:e9:ec:25:b7:e2:6a:87:df:1c:5f:d4:ce:60:
ac:15:ee:12:3f:cd:7d:e7:0a:fa:f2:07:d2:29:30:
63:40:1c:20:62:ae:e1:ab:81:67:cb:03:16:e8:94:
dd:f5:21:59:28:2a:7b:b6:a5:b8:d3:19:d1:e8:31:
db:e8:f6:d8:07:98:13:48:1a:7c:ae:fa:fc:78:e7:
2c:3e:17:91:1c:a9:a9:ec:3e:6b:d3:ee:cc:35:26:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C9:E0:A6:22:F5:D3:AB:57:52:E3:5D:ED:A6:65:9C:99:13:3D:36
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2a:d5:49:08:f4:ba:82:44:63:b1:dc:16:04:87:a0:af:9a:
42:cd:4f:a6:a4:cd:f8:49:63:ef:29:07:8e:a4:17:cb:2f:3a:
28:79:96:4c:b4:e6:9c:38:59:56:cb:2e:ac:37:1d:78:30:60:
9f:d5:13:16:51:dd:cd:16:26:7f:b0:4c:19:74:cf:ad:de:06:
97:77:98:24:1f:2f:9c:9e:23:fb:94:9b:7b:92:4f:3d:f0:47:
1e:ae:6a:f7:d6:d4:bf:a7:36:84:b1:01:44:0c:38:f5:3f:ad:
2d:32:11:b5:39:66:09:e5:c3:7a:e6:5e:9e:28:e9:07:0e:df:
80:ea:2e:92:e2:82:83:1a:ee:49:dd:41:97:b4:e6:f3:3b:f8:
bc:91:ed:a0:0f:05:9f:eb:e6:45:88:7a:b5:2d:c2:d2:a2:91:
e5:13:44:df:8a:d3:33:22:da:8e:28:05:74:78:1c:48:7b:eb:
01:b6:78:b0:d2:07:2c:6f:2f:e5:4c:e4:b9:a6:42:cc:f7:90:
f2:75:b6:bb:e0:21:58:f3:b7:45:4f:3f:b4:d5:a1:87:72:ce:
ed:8b:84:27:0f:bd:c5:22:0a:7a:f0:05:4d:ab:2e:7f:65:ae:
c4:2e:7e:d5:7b:7f:26:4a:5d:f6:79:84:2c:0e:95:c4:b2:98:
4e:76:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:53 2025 by rpki-client