Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: rPwPkMVZ1YMdImgABxoP/dozso1WiVO7kseOFr/oe+A=
Subject key identifier: C9:F5:13:42:60:7A:1C:69:8C:7D:44:5B:E5:72:70:EF:46:27:64:7B
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 01976214E09C6795DC410517FEA278F572D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 0FD1
Signing time: Thu 12 Jun 2025 03:00:24 +0000
Manifest this update: Thu 12 Jun 2025 03:00:24 +0000
Manifest next update: Fri 13 Jun 2025 03:00:24 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: GnrsSa+938kJyfW9vK4NSc/wpi5TTrJppA7HS6bR5Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:14:e0:9c:67:95:dc:41:05:17:fe:a2:78:f5:72:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Jun 12 03:00:24 2025 GMT
Not After : Jun 13 03:00:24 2025 GMT
Subject: CN=c9f51342607a1c698c7d445be57270ef4627647b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:f1:d1:cc:ce:e3:1f:01:52:c7:ca:17:ff:
d1:e8:50:c3:12:64:42:ff:59:04:98:ef:d0:34:34:
39:ad:1f:d8:89:11:de:c9:bc:f6:2b:12:59:6d:38:
5e:54:64:6e:0a:46:ec:6a:fc:63:ec:fc:45:5d:ca:
87:61:d8:c1:77:c5:65:07:12:02:43:e5:0f:16:b7:
25:09:06:75:a7:14:bb:4a:11:9e:a8:a5:6b:d0:dc:
07:21:c6:f4:7f:5c:a2:10:81:52:5d:5a:58:92:2a:
c3:b9:22:76:6c:9a:b9:44:6a:0a:0d:49:5f:38:24:
5c:8c:ac:fc:1b:43:7f:e3:00:fd:25:2a:41:bc:e4:
39:88:3f:33:d7:b6:d0:b2:98:51:6a:a6:2a:bf:45:
5c:22:d6:b3:f2:d3:df:86:8b:0c:61:2f:14:d2:9d:
40:4c:28:36:7c:03:58:4a:5a:08:9f:a1:00:ab:ef:
12:90:98:51:c5:8b:69:80:d9:56:92:91:f0:ab:59:
90:29:b4:ca:c3:a5:15:89:3c:34:84:e9:0f:0b:26:
17:71:c0:9d:1a:06:5f:cd:df:6b:45:26:3e:d1:ad:
d0:c8:eb:d3:99:00:a4:e2:68:2a:ff:92:c2:2e:b8:
f4:88:7c:16:81:51:29:1b:98:34:71:d6:7f:99:95:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F5:13:42:60:7A:1C:69:8C:7D:44:5B:E5:72:70:EF:46:27:64:7B
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9d:35:9c:43:8c:92:93:5d:4c:19:2d:9e:8a:57:9b:80:c7:
cc:85:11:ca:ba:9b:4d:d7:49:2b:7e:37:10:d5:12:04:c4:a7:
1f:8c:aa:0e:f2:70:bb:18:17:95:36:24:76:2d:9b:84:b1:0d:
30:e2:a9:55:9f:a3:1b:4f:de:72:87:ef:ea:aa:3b:ca:9e:1c:
b6:ee:77:fc:8b:54:95:75:93:b5:4b:fc:52:1c:3e:3d:7f:a3:
08:27:2b:83:94:5f:27:c2:06:0a:0d:08:f6:72:e0:56:53:37:
41:46:c7:1d:92:31:d9:8f:49:32:2f:28:f2:96:97:a9:8f:3a:
1b:47:3f:53:42:de:9f:ef:d9:ff:16:32:24:08:7e:06:57:48:
37:e7:e4:04:a8:52:d0:4e:7a:c7:31:84:e7:33:57:b0:4d:9b:
31:90:fb:f1:83:3f:18:36:b2:e7:01:90:07:03:28:ad:75:b4:
35:66:aa:f3:92:d7:87:d6:96:1e:cf:d8:e8:d1:a3:34:28:6f:
29:9f:b6:dc:47:b9:4a:70:39:e7:67:2f:e6:48:dd:44:1f:02:
a1:26:8a:57:e5:73:75:88:4e:13:85:6b:22:d3:eb:f0:e8:e9:
38:3e:82:7b:28:71:d8:d9:45:b5:50:82:ad:1a:d4:e4:1c:95:
5d:89:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:49:17 2025 by rpki-client