Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: D3PkEAJKICoHjJuCAFYci/jd/qbn8TCtED2d3ZT2vMo=
Subject key identifier: AA:22:BD:BE:1A:AD:32:86:BA:80:09:DB:DB:53:FB:40:FA:87:62:7A
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 01976C61CBCDEBA04C420B330047CABBF986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 0DEA
Signing time: Sat 14 Jun 2025 03:00:37 +0000
Manifest this update: Sat 14 Jun 2025 03:00:37 +0000
Manifest next update: Sun 15 Jun 2025 03:00:37 +0000
Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: 4ENxmBPJy9VpJp6ENFg/n9V/P4iOM7J0CvRrm1a/oL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:cb:cd:eb:a0:4c:42:0b:33:00:47:ca:bb:f9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Jun 14 03:00:37 2025 GMT
Not After : Jun 15 03:00:37 2025 GMT
Subject: CN=aa22bdbe1aad3286ba8009dbdb53fb40fa87627a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:d9:8e:a9:5c:9b:94:16:b6:32:97:e4:11:
cd:2d:42:a6:5f:28:88:96:1b:0c:10:6f:bd:58:b5:
2b:e9:d0:39:0d:bf:a4:4a:5f:b5:94:df:fc:cb:3b:
1a:25:3d:da:0b:ae:af:3f:7f:15:57:a1:97:f7:3c:
b4:38:43:87:3c:52:bf:5c:bc:47:1c:d8:11:e1:34:
ff:2d:f9:f8:b6:3f:68:27:7a:87:46:7e:c9:2e:0c:
8b:5f:b1:9f:5c:ec:78:60:47:8c:96:bf:51:d6:d9:
8a:1f:b8:bb:db:a2:17:b6:26:30:c0:39:b3:18:ac:
d9:57:04:b5:15:52:91:19:7c:30:81:fc:8a:97:a9:
9b:bc:29:ed:9a:56:cf:53:22:3a:bd:1b:89:fd:e0:
69:6e:4e:39:97:e9:98:87:7e:37:19:2e:ca:0a:98:
7a:c6:40:3d:5a:e1:95:b5:2b:e3:8b:35:8e:f3:b4:
ae:fe:cb:3a:a0:c7:61:1d:a8:5e:0a:af:34:eb:4a:
65:7b:a6:00:f8:6e:15:ec:b0:2d:f1:84:75:55:1a:
ec:0a:10:95:fe:80:41:b3:e0:1b:e4:fd:1f:ea:a7:
7c:55:da:5f:bc:d9:bf:5b:a3:2f:d1:c1:b7:df:26:
34:f2:7d:0f:95:40:94:24:26:2a:f0:20:e8:96:52:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:BD:BE:1A:AD:32:86:BA:80:09:DB:DB:53:FB:40:FA:87:62:7A
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:67:bc:ca:4c:b1:fa:ee:2c:2e:4a:54:d8:77:2f:d3:86:11:
4c:00:e4:e4:8c:da:ff:7e:c0:d6:23:ef:59:50:02:1e:06:54:
1e:b1:ff:a4:eb:d6:35:05:29:b7:88:81:50:60:c1:76:d0:79:
4e:da:df:e9:63:5b:33:ec:4a:00:6a:9e:b1:d9:5c:fd:90:85:
2b:7d:3d:b9:96:de:3d:0e:0c:1b:d9:ad:d8:3a:d5:74:86:51:
bb:14:5c:1a:1f:63:61:81:3d:90:1c:14:7d:a6:ae:d5:b3:8e:
93:2a:fd:fd:43:91:6c:e6:ae:3c:ce:ee:b2:b6:d2:42:22:e5:
9f:18:02:a8:ba:3e:fc:6d:bd:48:59:a0:81:08:42:37:79:f6:
ff:8b:1e:f6:fd:32:f6:76:8f:1a:5b:fe:94:71:83:80:d9:ed:
bc:32:f5:66:c2:db:69:bd:a9:e0:b9:45:33:3c:34:9e:20:94:
39:35:31:62:05:74:66:bf:df:5e:ec:88:5b:0a:b7:20:8c:be:
79:7f:b7:1b:81:93:f6:f8:e4:41:3e:ee:cc:ac:c8:9e:c3:78:
cc:5f:4c:55:89:27:b8:ed:95:b8:ad:7e:37:31:32:03:e8:3f:
b6:09:10:f0:f9:08:49:b3:83:aa:d3:31:8b:9a:cf:aa:f6:22:
44:94:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:00:24 2025 by rpki-client