Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier: J1u3FG/0F8YENhNbR5hqL8Ooa5mts+oZ4eau6JuziN0=
Subject key identifier: F4:8E:05:41:EB:67:15:89:41:6D:7C:48:4D:67:BF:3F:40:6A:E2:B1
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 01975E381AA0FC5EF942E7F953A31107D62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number: 0D21
Signing time: Wed 11 Jun 2025 09:00:24 +0000
Manifest this update: Wed 11 Jun 2025 09:00:24 +0000
Manifest next update: Thu 12 Jun 2025 09:00:24 +0000
Files and hashes: 1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=)
2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=)
3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: G03f/WjQd93xvQD456sDF/hdljAePp1DA1Ys6natNeo=)
4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:1a:a0:fc:5e:f9:42:e7:f9:53:a3:11:07:d6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Jun 11 09:00:24 2025 GMT
Not After : Jun 12 09:00:24 2025 GMT
Subject: CN=f48e0541eb671589416d7c484d67bf3f406ae2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:fe:52:83:13:37:15:d8:21:f1:5d:15:a7:
73:74:85:98:14:6c:42:05:5d:6c:a7:6a:ad:6c:47:
29:f0:0a:47:b0:df:fb:60:19:3c:8a:40:b1:da:b0:
0c:9f:6d:cb:1b:6a:5c:28:72:fa:76:bd:57:b5:3f:
4b:0b:0a:e3:9d:89:2d:44:d1:90:93:9f:04:65:6a:
74:ba:94:a6:dd:43:c8:8b:dc:eb:db:f3:be:8b:cf:
e1:77:99:38:8f:21:25:64:35:43:0b:bf:9c:95:32:
e4:1d:82:8c:7c:3a:d7:55:30:81:ee:10:97:4a:87:
52:c8:0f:b7:c4:05:8f:00:23:1b:d4:79:a4:2f:f2:
24:90:99:c1:15:0c:53:8b:6a:5c:92:a5:a0:00:52:
51:27:f6:bf:08:49:cc:95:c2:23:6a:76:1d:ff:e5:
c5:7d:1d:e9:bc:c6:d0:41:40:dd:12:ca:4f:a9:6f:
dd:35:09:39:ba:88:ed:71:4e:d7:3c:94:fc:d6:b6:
22:b6:8d:5d:7e:a4:cb:6e:16:27:42:26:1f:4d:54:
f8:16:b3:3d:9c:f7:ff:ad:37:35:ac:6f:83:85:dd:
5c:6d:3a:40:2e:ec:9d:ce:6a:c9:4e:71:93:3a:a8:
99:f0:44:7d:b3:51:44:64:3c:b4:3a:5b:32:74:b3:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8E:05:41:EB:67:15:89:41:6D:7C:48:4D:67:BF:3F:40:6A:E2:B1
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:78:0b:07:37:cf:e0:2d:56:0d:c0:a3:01:97:ec:9e:02:2d:
93:cb:d0:77:28:24:e6:16:cc:93:7d:ea:17:52:c7:62:59:7a:
13:ac:89:fa:3f:a5:19:6b:70:02:c8:39:02:a9:bf:ea:24:b2:
f6:89:2c:b4:9d:40:f8:d7:c2:53:fb:d5:77:45:ca:5f:2e:0d:
f5:d5:ea:63:e2:71:19:d6:94:79:7f:44:dd:d1:2a:af:1e:1a:
6f:23:5d:f7:7d:ab:2d:4b:a2:16:a8:e6:34:43:90:75:71:fb:
36:f7:d7:af:60:06:5e:b2:99:e6:7f:80:3f:6f:e6:a5:21:bf:
35:75:aa:70:e6:43:bb:cc:ae:6a:4a:6d:1a:67:08:23:c0:67:
60:6f:05:4c:ab:74:0f:e0:7d:aa:ae:bb:81:28:74:54:0b:aa:
32:be:0c:53:31:a0:a7:bc:21:e8:51:57:f9:20:17:e8:1d:d5:
d5:60:8d:71:94:c2:0c:b7:2a:0e:ad:ca:76:4a:65:64:5a:a9:
2a:33:2e:1b:ad:91:c3:b5:ab:b6:05:a2:6a:08:d3:6b:7c:5d:
34:bf:0e:1e:15:7b:d1:2d:15:20:0f:46:c7:fc:1a:c6:de:9b:
8d:c9:29:44:4e:22:b6:20:e7:37:56:3e:7e:29:b4:ab:fe:d2:
2b:aa:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:04:25 2025 by rpki-client