Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File: yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier: JzZCjgH9r+KusXoC7dtMJzf5XGbkVqwpXd8dOvMGSYc=
Subject key identifier: 6B:54:33:8D:FB:B7:0D:F5:C1:F8:5B:F1:96:28:9D:97:90:DA:39:6F
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 019744415C998DEA1A960A404072D1FC710F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number: 024B
Signing time: Fri 06 Jun 2025 08:00:23 +0000
Manifest this update: Fri 06 Jun 2025 08:00:23 +0000
Manifest next update: Sat 07 Jun 2025 08:00:23 +0000
Files and hashes: 1: 9G61nTw40oudLW3JOC_FQ0aHHQs.roa (hash: PZHJFgFZ1M5t+8j0But6rI9U9bsojNq5vU54p68gWrI=)
2: AdoLpxkGdJU9MVB2mFDieYW6JUM.roa (hash: M3306US/H6B4VGXvtuAxz3jajRvPMjKiTsFnDjT1Itk=)
3: ajlhxYNtAPzeTPjXCJjwu3u7DCY.roa (hash: IqXuM6//Ku9jh4JzK+2CUndK/ugkLqCne4Oz+cOP1rE=)
4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: 1sdTAvp0wEzAd3XXol3h1JiNQPlx/RStwrJQaU0heXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:41:5c:99:8d:ea:1a:96:0a:40:40:72:d1:fc:71:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Jun 6 08:00:23 2025 GMT
Not After : Jun 7 08:00:23 2025 GMT
Subject: CN=6b54338dfbb70df5c1f85bf196289d9790da396f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:4c:f7:00:1e:b8:b4:b5:80:d8:17:a5:92:
f1:2a:5e:7f:05:09:2f:6e:96:96:87:f9:b9:28:7a:
89:f7:d9:4d:b3:8b:45:74:65:f2:b4:20:b9:51:d7:
3f:6a:1a:1c:8c:79:04:a7:42:73:ff:8b:52:aa:31:
f7:51:b2:d8:ee:f9:3c:5e:a9:51:1f:85:67:ea:50:
a0:b9:e3:ee:f1:11:c1:e8:40:7a:52:57:ad:a2:44:
c7:7f:5d:5d:41:bf:16:43:01:15:ce:01:49:c8:d1:
f7:74:4c:16:16:7d:16:b2:70:f3:d5:fc:9d:16:64:
68:89:d5:6f:c9:d0:fb:b4:d3:3c:68:94:43:b5:6b:
76:87:76:b4:be:6b:6a:da:74:d0:64:4a:eb:17:9d:
80:7e:a4:ec:f9:64:12:e3:a1:c2:d1:3d:8c:94:ec:
c0:c7:8d:8f:58:ad:e2:06:c2:76:96:68:15:55:26:
34:b5:a7:e7:ec:5e:23:7a:72:5a:49:9d:11:b2:ad:
c9:d3:b5:8b:35:fc:26:6a:e9:76:a8:cc:c4:47:ff:
11:c2:df:a6:9c:5b:61:44:24:70:cd:7a:5e:02:0c:
0c:ee:c6:3b:38:7e:36:6b:88:56:ff:3a:be:18:d2:
71:9d:4d:d3:73:e2:5b:60:79:59:04:73:fc:3c:ce:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:54:33:8D:FB:B7:0D:F5:C1:F8:5B:F1:96:28:9D:97:90:DA:39:6F
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:1a:38:95:b8:69:8a:e1:75:8b:b4:82:bd:ee:c8:7e:79:
d2:20:74:43:89:d2:38:f5:be:01:88:94:5d:d9:55:1e:06:66:
e4:a4:d3:6f:4a:17:9e:a8:3f:95:e9:b5:e9:7b:ee:a2:69:cf:
26:36:5a:87:16:e8:59:7a:1b:67:cc:1e:82:fc:a3:7f:ca:f6:
67:d9:81:1f:13:0f:5b:74:43:15:0f:00:f7:25:85:36:26:75:
ce:0c:75:b1:1d:da:5d:33:32:46:8e:72:f7:16:a8:f9:1c:21:
9c:88:58:7f:83:50:98:43:6a:fd:6f:9d:09:0f:1e:14:ef:62:
d2:28:59:1c:c1:0f:04:f1:f4:f5:2c:f8:4c:2a:09:f2:f7:79:
26:ea:c6:87:a4:b3:ac:10:fb:cc:2e:9d:90:5b:8d:2f:1f:71:
52:50:5d:65:00:12:58:62:0e:d9:83:01:40:a3:54:fe:a6:ae:
2f:c7:43:fc:0f:e2:6a:ef:f4:f2:f3:7f:ce:cf:b6:47:a3:c2:
84:60:dd:50:7a:ec:eb:fc:12:0b:20:d1:b5:32:1d:7a:5b:78:
38:11:21:04:c4:0c:cc:44:fc:82:07:f6:56:1c:e8:af:d8:25:
97:87:ec:e9:23:31:76:a8:58:17:cb:09:3d:5a:47:8d:b4:84:
0a:35:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:38:00 2025 by rpki-client