Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: LGmQNIksPqyu8sNGoTRYZnU5/ObdKiWxqb4zm76sNzw=
Subject key identifier: 72:5A:B9:88:72:A0:A9:7F:B2:7D:79:18:47:D0:4E:45:78:3D:84:9C
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 01975D93A5C5CA19291A587D9519A51912FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0B84
Signing time: Wed 11 Jun 2025 06:00:46 +0000
Manifest this update: Wed 11 Jun 2025 06:00:46 +0000
Manifest next update: Thu 12 Jun 2025 06:00:46 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: vnA3TZ64InTdwCTMA6LzsXz+Jkp+y9McqF4qyLnrnD8=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:a5:c5:ca:19:29:1a:58:7d:95:19:a5:19:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Jun 11 06:00:46 2025 GMT
Not After : Jun 12 06:00:46 2025 GMT
Subject: CN=725ab98872a0a97fb27d791847d04e45783d849c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:60:7e:23:75:98:a7:88:e5:12:cd:7d:2b:
3e:72:50:50:70:7d:95:f3:25:71:a1:9b:68:bb:48:
54:d0:73:f2:ab:69:23:00:13:37:6f:cc:f2:06:bc:
e0:58:8a:4a:4b:33:5d:90:e8:58:47:60:54:7b:65:
f1:55:c5:a2:ef:cd:2a:8e:c9:26:70:d8:7d:70:a0:
68:ac:88:97:fe:78:6c:bd:8b:3b:6f:66:2a:4b:1f:
44:ad:d6:d3:55:d9:62:ac:6e:8d:bb:5c:67:41:e6:
45:58:c8:24:9f:ae:ae:36:f5:65:c9:86:02:66:4c:
6b:8f:e8:97:35:df:47:d8:a3:a7:1b:d6:47:c3:ef:
fe:f3:07:eb:8f:cf:b1:c1:b0:1c:a6:6f:87:af:8d:
3d:d5:37:e9:d9:1c:5b:3b:d3:8a:cd:95:7e:6e:d1:
df:7d:4c:28:a3:57:0b:71:d9:9a:18:1a:46:1a:6f:
45:e9:f7:2e:17:6c:18:2d:e1:ce:ce:2d:ca:25:20:
e3:36:a3:4f:2f:b3:af:e3:3b:67:5d:03:85:82:5a:
6a:78:6e:8f:1f:7b:ac:0e:38:ab:be:67:9f:2c:c8:
f1:05:02:18:24:55:a4:37:d1:3e:f7:f2:ad:eb:53:
73:7a:de:66:21:f0:15:3a:68:7a:74:b6:b3:95:c7:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5A:B9:88:72:A0:A9:7F:B2:7D:79:18:47:D0:4E:45:78:3D:84:9C
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b2:e2:79:0e:0d:05:3a:99:51:c2:c4:96:d7:8f:a2:2a:75:
f1:7b:6d:fa:b6:68:0a:88:7d:c8:d9:53:21:d2:36:72:b4:6d:
56:fc:b2:c2:49:a2:ec:99:25:01:ce:93:e8:d2:ac:7c:09:fb:
21:9c:37:aa:3b:e1:2d:55:17:59:5d:93:88:c3:e1:6e:e7:7b:
bc:a1:4f:26:b6:0e:65:e2:97:c6:8b:6b:39:d1:e7:79:eb:50:
53:a2:09:7b:66:9e:8d:e4:dd:65:d8:c6:a5:a2:e0:42:10:a4:
54:05:49:33:29:2d:5b:65:e1:57:5a:d5:6b:0a:00:c1:70:10:
9f:64:24:2d:0b:51:e9:41:3f:15:c8:26:b6:44:03:3c:40:39:
3f:a8:ed:a7:f3:d4:6b:37:76:58:17:e8:ca:2e:57:e1:ef:9d:
c4:08:cf:ca:2f:2d:27:a1:b0:06:51:29:f7:9b:df:81:df:55:
6f:5a:ac:1a:82:01:dc:ff:15:f5:cc:2c:94:be:54:df:ab:73:
b0:80:94:2d:e2:aa:06:94:08:22:c8:6a:ba:6c:5f:5e:68:4f:
8f:a3:fb:c7:cb:89:97:b8:55:b8:f8:3c:8e:d9:63:0a:c6:0c:
db:f0:07:98:a4:27:7d:55:db:b2:23:fc:67:08:94:11:e2:95:
c5:19:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:10:26 2025 by rpki-client