Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
File: ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft (raw, json)
Hash identifier: 54CzoJvpkMW2LP5jWfH5Q/pYQ8N2Ng8juiSnJeQ3ORQ=
Subject key identifier: 15:24:2C:6E:54:BB:0E:0E:ED:2C:25:7C:99:48:6F:32:C7:FE:FA:EE
Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Certificate serial: 0197C9F05BCC6E5B4C0BAF822911B8996B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
Manifest number: 37
Signing time: Wed 02 Jul 2025 07:01:01 +0000
Manifest this update: Wed 02 Jul 2025 07:01:01 +0000
Manifest next update: Thu 03 Jul 2025 07:01:01 +0000
Files and hashes: 1: Blt---jsIFQZ1r2IAxC-z0fx3gA.roa (hash: WMXyefoTuj2dAlvEBS8JjIjWNUd09eEAuE+gYKf1VT4=)
2: ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl (hash: Hb9cTvhG6/gdMRmHPYAzo0tjdGkTEG7tpv5NLf0A/Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:5b:cc:6e:5b:4c:0b:af:82:29:11:b8:99:6b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Validity
Not Before: Jul 2 07:01:01 2025 GMT
Not After : Jul 3 07:01:01 2025 GMT
Subject: CN=15242c6e54bb0e0eed2c257c99486f32c7fefaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:38:6e:a0:b2:80:e7:72:22:1c:49:77:29:13:
43:9d:81:67:af:da:cd:86:a9:e3:7e:1a:a0:20:de:
43:52:e5:fd:2e:03:77:e5:97:bb:91:7f:ba:cf:36:
59:a2:eb:f9:a8:99:8e:2f:00:59:76:1c:42:28:0e:
be:83:36:8a:54:62:dd:94:51:70:84:47:65:e1:54:
1b:e0:7a:00:fb:ef:3a:b8:06:0e:a8:29:89:cb:bc:
6d:34:15:3c:5a:10:ce:95:2e:ad:12:70:56:44:7b:
90:c5:90:89:86:0a:36:08:e9:86:85:32:c4:80:ca:
7b:d9:8c:57:e3:59:91:6c:c4:22:7f:46:cc:95:74:
f9:c7:94:39:4d:3c:46:b5:24:40:02:ea:8c:16:bb:
8f:8c:a3:5a:08:5d:fa:e4:48:fe:b8:cf:bb:85:a0:
eb:ba:59:19:97:13:34:a2:bd:63:02:16:3b:4b:94:
50:c1:b5:30:e6:6c:a8:45:19:96:e3:2a:33:1f:fb:
53:0b:84:0e:21:29:d8:71:b3:e0:37:f3:b5:56:4a:
ce:4d:ae:4f:5b:c4:35:4d:44:e5:d1:b7:ae:ad:d1:
f8:55:2f:cb:8f:48:a1:a9:59:9c:47:2e:6d:f3:64:
b4:06:38:7d:0b:17:0c:82:69:f3:f3:0b:7b:b8:c3:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:24:2C:6E:54:BB:0E:0E:ED:2C:25:7C:99:48:6F:32:C7:FE:FA:EE
X509v3 Authority Key Identifier:
keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:81:08:39:f4:a8:6f:01:8d:6a:c3:74:40:fc:67:31:ba:39:
c6:b2:b5:d5:e5:93:d7:d4:a5:70:a5:07:a0:f6:76:ee:af:a0:
3b:3d:71:2a:50:64:98:ad:fe:61:c5:05:9c:15:36:f8:10:97:
17:67:29:cd:22:eb:16:37:c8:17:d4:91:56:0e:32:2e:a5:92:
c6:ee:f5:3a:55:0e:04:17:a6:90:41:f3:24:ca:6c:de:d7:2a:
83:1b:06:be:f6:53:0a:6a:0a:0a:05:da:38:04:a2:ca:91:a3:
3b:e8:ed:59:e3:0b:00:5e:a0:e2:db:e6:1c:5c:2f:d1:b6:54:
57:c3:e4:2d:37:b5:56:f0:f3:7e:89:c0:5b:58:c6:94:0d:d7:
e7:26:90:a9:b8:3a:5d:67:d1:71:53:54:65:2b:4d:a7:d7:a1:
fb:12:17:42:bd:5c:26:99:b1:1b:90:33:96:a8:1d:db:2f:01:
bf:9c:f3:b5:3e:60:d6:a9:91:a8:8b:ff:89:7e:1f:4e:d8:9a:
bd:19:21:5f:e0:2a:76:36:1e:c0:5a:c9:16:fa:e8:af:73:a8:
50:53:a1:be:bf:a5:4e:89:b5:de:06:87:2a:f7:0d:ea:c2:da:
62:84:8c:eb:53:ae:a8:e9:29:a0:51:53:e4:5e:09:f1:1e:37:
7a:17:54:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:51:08 2025 by rpki-client