Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier: HNxYXsrRe2+TgPR1yRbuqqPFumgjg3QL1eXTVOsDZW0=
Subject key identifier: 90:8D:39:56:CD:DD:BC:5F:76:46:FC:E3:1A:E5:0A:B7:B9:72:0A:0D
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial: 01974D7C17022F7871B394AFC8C967C48F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number: C2
Signing time: Sun 08 Jun 2025 03:01:07 +0000
Manifest this update: Sun 08 Jun 2025 03:01:07 +0000
Manifest next update: Mon 09 Jun 2025 03:01:07 +0000
Files and hashes: 1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=)
2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: Whrgf8ElyH+uFeuZRaGK2yYQ78kpSkjdom4wH5Yodx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:17:02:2f:78:71:b3:94:af:c8:c9:67:c4:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Validity
Not Before: Jun 8 03:01:07 2025 GMT
Not After : Jun 9 03:01:07 2025 GMT
Subject: CN=908d3956cdddbc5f7646fce31ae50ab7b9720a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:40:29:47:17:cd:97:d6:a1:7d:4d:66:71:2d:
e8:17:ab:7c:2f:57:dc:9f:8b:cb:c1:aa:5c:aa:16:
0f:51:df:6a:02:58:c7:7d:e5:9e:c1:9e:0a:4e:03:
1f:02:a8:bd:3f:7c:65:fd:9d:52:40:c2:f6:65:ed:
54:23:fd:22:3e:44:b7:4a:68:79:5b:6f:13:85:96:
9e:3a:b7:53:4a:65:1e:91:7b:05:3b:a4:09:da:4b:
e7:b8:22:35:6f:11:e3:7b:e7:e2:23:2b:eb:45:8b:
ba:31:2b:2a:a9:ff:58:92:29:61:a0:39:22:bd:3a:
57:6d:16:90:37:de:0d:45:c0:54:5b:a4:51:aa:c2:
fa:e1:64:d9:19:4e:9f:60:e1:d1:9b:be:66:67:5a:
0e:65:ba:29:c7:6e:a7:72:a2:c1:38:dd:e2:37:cf:
09:5d:ec:2c:6a:05:22:b6:9c:d1:c0:8a:0e:71:58:
0b:e1:eb:43:da:65:78:17:3c:0e:b3:3c:c8:12:f2:
65:e8:48:4b:45:34:f1:b0:e4:f5:b9:dc:f8:0f:34:
f3:0a:af:8b:1e:54:70:dd:dc:86:20:47:a0:44:df:
0c:19:37:64:9e:5e:8d:06:1e:4d:18:82:73:47:c7:
c7:ed:09:15:ee:b2:cb:a4:c4:1d:0c:82:0a:67:ec:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8D:39:56:CD:DD:BC:5F:76:46:FC:E3:1A:E5:0A:B7:B9:72:0A:0D
X509v3 Authority Key Identifier:
keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5b:8b:f7:31:1d:24:d2:bc:ce:c2:c7:82:b2:66:5c:06:9d:
11:46:37:dc:81:e1:47:8a:c5:da:23:30:07:89:fc:1b:9b:f9:
60:9d:bf:1d:e9:4a:e2:a5:76:08:ac:03:70:18:5b:a4:8c:3e:
25:42:c2:ce:74:6a:45:27:65:56:a0:f8:dc:22:05:1c:b9:18:
95:41:b3:93:06:b5:27:46:48:6e:58:85:01:1a:38:a5:46:93:
62:ef:f2:81:16:4a:ef:33:74:aa:65:9d:39:b2:90:fa:c0:dd:
26:7c:a6:6a:04:e0:c1:1a:39:b8:43:83:1e:21:4e:eb:0d:88:
c8:03:82:19:ce:4e:47:50:8e:ca:17:74:00:98:68:0d:ad:98:
ac:ce:09:30:1f:8f:34:4d:82:4d:f9:c6:3b:98:26:d8:ea:b4:
fa:97:bd:31:3c:b6:c4:1c:3d:b0:5a:fc:65:f8:53:3d:5e:52:
f3:72:b4:ad:72:ba:38:28:79:a1:27:f1:ff:1c:e8:eb:8c:4f:
70:37:bc:d4:e4:89:6f:29:06:03:02:ca:7e:ad:50:f2:a3:80:
5c:2b:1b:77:e0:5b:3c:6b:7f:78:a7:af:60:d5:64:9d:e3:6b:
f7:6e:73:5d:e9:c7:d8:7b:86:0d:f7:36:bc:9f:e5:f7:72:b0:
1c:74:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:13 2025 by rpki-client