Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
File: yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json)
Hash identifier: ED11cjliXwuDghQ6EZIePOAKXKEN/8FRwq6UWZSo+ng=
Subject key identifier: FB:B8:D0:02:C9:18:ED:88:54:6E:13:FD:A9:51:14:9A:9A:60:AE:F1
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial: 01975F4B19A5070A13A0EB143852022BB4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
Manifest number: 0A09
Signing time: Wed 11 Jun 2025 14:00:46 +0000
Manifest this update: Wed 11 Jun 2025 14:00:46 +0000
Manifest next update: Thu 12 Jun 2025 14:00:46 +0000
Files and hashes: 1: DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa (hash: 2p6cZB/6xzzCJ7jeUbBrD5Bf0hcHEh4tn/vPl+35cnU=)
2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: tvCr3p67ktBEDbcYxMjG6T7umXHzmzUKZ3qez68frX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4b:19:a5:07:0a:13:a0:eb:14:38:52:02:2b:b4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
Validity
Not Before: Jun 11 14:00:46 2025 GMT
Not After : Jun 12 14:00:46 2025 GMT
Subject: CN=fbb8d002c918ed88546e13fda951149a9a60aef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:62:62:5c:13:66:2d:84:16:e7:73:16:78:
17:ca:0f:1c:c7:a1:52:58:62:6b:30:12:f1:4b:59:
aa:77:08:32:b4:f4:d0:f7:37:0b:23:0a:97:e2:3e:
26:a2:ea:1a:62:c4:5f:ea:0d:4c:f6:56:0a:30:95:
ef:78:f2:2b:be:8c:0e:20:2a:36:8e:64:ea:f1:76:
ff:2c:ff:e7:c5:a5:b6:c5:f5:c2:00:d0:66:ca:ec:
90:97:b0:ae:b0:08:07:eb:f4:95:31:1f:c5:19:be:
0d:95:01:74:1f:b2:1a:fa:67:92:1d:b1:df:38:4b:
0d:f8:0b:b4:39:d7:71:bb:9e:96:e1:77:aa:df:62:
a9:f0:b4:f1:4d:39:0d:3e:05:b3:1e:6c:35:60:66:
97:47:19:ff:fe:c2:40:84:22:eb:49:50:cc:9e:3d:
e9:52:25:79:c7:bd:38:55:54:a5:08:23:e5:1f:f4:
d6:bb:25:b7:67:d5:2a:1e:9c:1d:bc:55:0a:dd:8b:
9c:5c:dd:99:29:87:14:b8:88:d9:ac:cc:04:ea:18:
62:a4:d7:bd:0a:7c:45:38:90:42:fb:08:95:04:52:
16:c7:3e:5e:28:a5:9e:c0:f8:95:d7:0a:66:a1:0f:
ba:94:8b:f5:d0:ca:7d:8f:4d:1f:36:72:0b:0b:94:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B8:D0:02:C9:18:ED:88:54:6E:13:FD:A9:51:14:9A:9A:60:AE:F1
X509v3 Authority Key Identifier:
keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:54:68:54:f9:34:7c:30:bf:a8:a9:8e:a6:74:71:47:63:b6:
5b:4e:7a:b3:2d:e0:d4:bd:24:a1:09:d5:ce:c1:ca:de:f6:35:
25:46:6f:1b:60:0d:e2:e9:6f:05:84:12:0f:24:31:4a:44:e6:
e8:23:6e:45:60:86:f5:ea:80:82:83:69:c1:5e:62:55:a8:2a:
ae:d5:76:84:fa:72:86:a9:61:fc:e0:19:bf:c9:60:95:f8:5f:
45:55:34:26:87:56:36:a5:98:71:cb:cd:fc:11:02:e2:3d:1c:
68:f7:15:21:3b:fa:52:d5:f8:d6:ea:ca:d4:57:65:15:a7:b8:
b2:af:11:ce:d9:5f:22:0d:f4:84:1d:30:10:3b:39:af:aa:76:
6f:40:30:f3:68:07:57:1a:d2:61:78:4c:7e:cf:a1:81:1b:f9:
e1:66:c1:3d:1d:b4:79:76:50:d4:54:14:15:04:24:4e:94:cd:
2d:de:52:c1:37:5d:5c:a5:29:28:f3:fe:e4:45:ff:05:80:0b:
32:2f:c8:e1:64:ce:73:1c:d4:7d:37:f0:bd:02:0e:3c:90:f1:
a3:9f:05:e4:e7:59:86:09:85:ac:e6:29:5d:c4:60:ea:01:9d:
cf:28:1b:63:80:3f:72:6b:91:e0:ab:29:46:31:f6:46:0a:d1:
a5:30:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:30:44 2025 by rpki-client