Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
File: yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json)
Hash identifier: fOeA4b9FuJj1DzaComrXv7YIkrAg8C94B5pKvS/iR08=
Subject key identifier: C6:6F:C2:4D:8B:BC:53:0F:E0:7D:BA:EB:E3:85:88:4A:7A:75:EB:8E
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial: 019759801D0FF9EB356B6D4C5EFFD118A8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
Manifest number: 0A06
Signing time: Tue 10 Jun 2025 11:00:57 +0000
Manifest this update: Tue 10 Jun 2025 11:00:57 +0000
Manifest next update: Wed 11 Jun 2025 11:00:57 +0000
Files and hashes: 1: DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa (hash: 2p6cZB/6xzzCJ7jeUbBrD5Bf0hcHEh4tn/vPl+35cnU=)
2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: TKJxSCpPdA0CVgULDP0CWaRaGZ7qxNMInBEoj+RFCMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:80:1d:0f:f9:eb:35:6b:6d:4c:5e:ff:d1:18:a8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
Validity
Not Before: Jun 10 11:00:57 2025 GMT
Not After : Jun 11 11:00:57 2025 GMT
Subject: CN=c66fc24d8bbc530fe07dbaebe385884a7a75eb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:a7:90:92:cc:73:0c:12:9e:98:09:ee:5a:
09:30:78:49:cb:f9:ff:ae:35:c1:77:35:62:a7:99:
57:e7:88:15:66:36:62:1e:d9:d2:b1:ee:52:03:10:
76:ae:60:8e:b0:4d:e2:45:06:cb:1a:62:63:15:6e:
5f:a9:86:2a:f6:1d:ec:28:ed:22:e7:69:a8:c4:a3:
01:12:81:c7:aa:3e:ec:51:30:3c:53:e5:c9:b4:80:
c2:2a:24:a5:1a:e4:bc:be:08:29:25:9b:b5:23:17:
2f:46:7c:e6:78:5e:ab:82:29:23:c4:db:10:d4:f8:
27:bf:be:e7:10:a5:32:89:50:84:18:b7:7e:5d:b5:
74:a8:48:53:b7:7e:23:9b:0e:61:a7:54:56:21:61:
b1:78:f1:7a:8d:49:ab:6b:62:fa:f7:38:88:06:bc:
04:78:a3:3e:34:6f:4b:c9:4d:d7:fe:f0:41:43:62:
1f:68:e1:0c:3e:46:00:bb:97:95:f2:4d:5d:c6:d3:
d5:b3:ed:e1:46:e2:66:6c:c7:8b:82:63:86:45:22:
93:d4:e1:06:bd:4a:9f:99:21:00:b5:d9:71:2f:61:
46:ac:16:ab:54:01:bd:25:dc:c0:32:b1:b1:82:2a:
c6:5a:24:93:53:60:27:96:fa:03:89:db:a1:00:54:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6F:C2:4D:8B:BC:53:0F:E0:7D:BA:EB:E3:85:88:4A:7A:75:EB:8E
X509v3 Authority Key Identifier:
keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a2:5c:c9:4a:7a:7a:bc:eb:8a:eb:bd:d5:95:bf:d8:19:4c:
52:56:30:1f:98:cf:ff:62:1c:23:09:08:92:2b:98:e0:c9:5d:
c4:24:73:f0:7f:4a:7c:d7:26:01:84:a3:f1:65:14:76:65:7b:
a8:ff:c3:6e:b4:c1:eb:6c:55:41:ad:e7:d5:6f:59:f1:24:5e:
f3:15:2f:d6:40:d2:53:af:2c:e6:f6:4f:2a:5d:a7:b9:e1:3c:
b0:e2:59:20:5d:0e:a2:f5:0d:83:f1:b1:8f:4a:21:e1:c4:4e:
85:2e:02:7a:d8:f4:fe:fd:e6:1d:3d:f0:57:36:99:d6:e8:63:
b7:ff:5d:d3:fa:04:bf:b3:54:54:12:ba:e0:12:2e:6a:c9:33:
2d:99:65:51:54:5c:8e:dc:1e:21:a1:1c:c0:27:08:02:61:e5:
1b:32:54:be:36:4a:7d:6a:90:78:e3:f4:4b:8b:9f:ae:90:e9:
da:61:82:09:ff:6c:98:78:e3:75:80:63:15:6a:c8:b2:b9:63:
08:8c:a3:11:a0:e3:9a:21:bd:2f:f2:f2:ce:fb:1b:a5:da:1b:
bf:c3:68:2c:37:71:a7:6b:f1:8d:e3:63:4c:7f:09:d8:d4:6b:
49:47:89:49:cf:d2:28:9e:75:a3:2b:7c:f1:83:3a:7f:0f:db:
27:d4:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:32:07 2025 by rpki-client