Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: tXPwXHdI2IXKqohz83/9RS0ZiOqfSmYu4XwjdPodp/4=
Subject key identifier: F1:5B:0B:2E:58:5F:98:BC:6F:E7:2A:2A:B5:BF:42:2B:99:31:65:DB
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 01976DAB38326D018CE478C4D49AFA735D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 0FD7
Signing time: Sat 14 Jun 2025 09:00:26 +0000
Manifest this update: Sat 14 Jun 2025 09:00:26 +0000
Manifest next update: Sun 15 Jun 2025 09:00:26 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: iXESlK5PnNHEFiM9wAMFU9PdpkUsHneCQVJiawi6ih4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:38:32:6d:01:8c:e4:78:c4:d4:9a:fa:73:5d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Jun 14 09:00:26 2025 GMT
Not After : Jun 15 09:00:26 2025 GMT
Subject: CN=f15b0b2e585f98bc6fe72a2ab5bf422b993165db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:11:83:ec:68:35:09:75:0d:3d:62:92:e9:
68:24:8b:16:48:27:fb:7f:bd:a2:d8:19:bf:ef:a4:
70:10:5c:a9:25:cd:16:9a:e7:49:b3:c3:6b:e6:72:
a9:44:12:89:6d:fd:03:1e:47:a4:3d:7e:1b:79:3d:
8c:54:e3:2f:d3:b2:3e:e2:75:a9:69:66:4a:f6:2e:
53:d4:5c:8b:fd:6c:2a:23:11:42:c8:c4:e4:2a:ee:
f3:ce:de:c6:24:c4:a2:c0:fe:64:9a:50:16:b8:49:
ce:35:bf:40:c2:0e:55:06:d5:ad:ed:6c:cd:c4:22:
26:88:dd:3f:cc:e0:a8:65:d2:02:8e:77:ac:0a:0e:
03:c2:41:8f:06:90:61:ed:4d:5e:b2:0e:a1:16:e7:
f5:36:ec:81:aa:d5:4f:99:12:05:51:00:8b:8d:21:
c1:48:8c:a3:f3:e6:3a:dc:99:ce:4e:98:a1:12:78:
85:f7:cc:48:c1:32:ac:4e:f7:10:51:ac:e5:43:ec:
79:a5:cb:5d:48:84:cf:07:bb:e0:bb:18:1a:2c:ee:
e8:9e:ff:db:d0:ad:dc:f1:3a:8d:b2:7f:6e:2e:17:
d4:9c:f0:0c:8a:c2:97:83:89:83:71:3d:2d:18:aa:
89:87:8a:c6:b8:ec:ca:f9:d9:af:4d:17:46:97:8a:
94:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5B:0B:2E:58:5F:98:BC:6F:E7:2A:2A:B5:BF:42:2B:99:31:65:DB
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c4:40:9f:c6:f5:35:3b:dc:94:1e:16:ec:74:5c:e9:80:4c:
a6:69:e7:45:26:b7:18:17:45:bb:60:cc:e2:6b:0f:10:89:31:
90:85:f1:f2:b4:75:28:ad:43:05:03:79:6c:07:4e:6c:c6:e8:
75:64:5c:65:f4:75:b7:22:3c:1a:c1:5b:f9:59:38:ad:ff:87:
f8:43:7d:60:10:13:a1:0f:5a:0b:90:fa:f4:0b:6e:fd:f8:91:
9f:fa:e4:6a:0f:75:73:e3:37:5c:7d:51:cd:2d:95:46:13:f5:
25:4a:93:a3:bf:fd:43:d5:b9:f3:89:41:69:43:a3:2e:f5:2f:
fd:d5:ee:b7:9b:7e:46:45:be:18:16:be:51:f1:d3:f2:31:b0:
4a:f6:af:80:4c:89:fb:4d:48:eb:40:8c:f0:fb:14:cb:af:2f:
5d:9b:3a:f5:a1:bb:59:98:e0:01:21:b7:33:72:1e:79:87:bb:
d0:32:29:45:09:a5:df:4e:d3:ff:78:48:d2:2d:aa:9a:41:9a:
c5:a7:45:69:84:61:c3:db:e7:a1:86:13:7d:cf:c6:ce:88:07:
a5:01:e3:31:c6:f8:fe:0a:07:01:22:37:b3:f5:fd:30:9b:9f:
58:88:c9:09:c2:fc:6a:45:8a:72:33:12:be:20:4f:82:45:ff:
bf:17:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:27 2025 by rpki-client