Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: dDxIc0RP4BjGKxCfE1AwunZZm7LXNXAT7q8NRJor+fc=
Subject key identifier: CB:9A:58:DE:D4:F0:26:8D:FA:78:09:A2:75:46:DC:48:7C:0F:8E:BA
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 01975D9388F2A45F0CFFA7AF34B403130E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 158B
Signing time: Wed 11 Jun 2025 06:00:39 +0000
Manifest this update: Wed 11 Jun 2025 06:00:39 +0000
Manifest next update: Thu 12 Jun 2025 06:00:39 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: 5QyyK15GrI8g6+DOJo6dyTY5nPAVg2xD/EyGKQRxLpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:88:f2:a4:5f:0c:ff:a7:af:34:b4:03:13:0e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Jun 11 06:00:39 2025 GMT
Not After : Jun 12 06:00:39 2025 GMT
Subject: CN=cb9a58ded4f0268dfa7809a27546dc487c0f8eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:68:7e:bc:93:d3:96:af:b5:57:71:ee:6b:
d6:9b:41:18:86:b2:24:97:3e:dd:bf:fc:c1:5e:99:
18:88:bb:f4:c2:fe:80:7e:80:b5:54:7a:ab:d3:38:
70:3a:0d:82:87:21:b7:44:f8:e8:a4:dd:f1:8e:60:
da:c3:44:96:b5:76:c6:62:4b:7f:1e:e3:8f:14:1f:
d4:96:68:93:c1:39:fe:a8:dc:f9:73:dd:7c:97:84:
a5:ff:ae:e7:ea:1b:96:25:c1:5d:ea:e1:62:8c:01:
74:d0:ef:cf:2b:7c:84:dc:b4:25:59:c5:0d:56:6b:
76:55:a3:b6:7c:62:d6:33:65:91:35:8b:ca:53:63:
64:51:aa:b5:3d:1b:cc:9c:4c:72:46:4d:d0:f6:94:
73:62:6f:43:9a:d8:6b:16:6c:e0:28:0a:d5:c0:1b:
91:9b:71:c2:ac:1f:ea:63:4a:a5:0e:79:4f:09:b5:
94:17:5d:57:e6:80:51:b4:90:ad:f6:af:63:34:91:
3d:fe:b6:81:4c:56:2a:50:1f:6c:4f:62:d7:27:5b:
d1:b1:54:d4:d6:4a:49:09:72:79:91:53:8d:25:8e:
30:fe:7a:95:7b:66:a3:6e:a7:23:77:3f:a6:68:19:
f2:b1:ff:18:14:27:91:9c:2d:7f:9d:f9:6a:43:5b:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9A:58:DE:D4:F0:26:8D:FA:78:09:A2:75:46:DC:48:7C:0F:8E:BA
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b6:ea:d7:17:9f:93:68:23:54:98:96:a6:e8:f1:ea:28:6e:
be:01:49:b8:a6:2f:da:47:9a:73:db:08:2d:ad:b1:e5:d0:29:
ae:94:da:b5:1c:03:b4:1f:20:cc:e0:b0:9d:21:ec:96:8d:28:
69:c5:2b:6a:83:4a:13:a9:5d:81:cb:60:5a:6f:22:e3:e5:44:
d2:b4:d6:dc:80:ea:33:c1:b7:90:bd:fe:e9:e5:a1:58:14:43:
36:d1:ed:40:f4:9a:e5:da:55:a0:96:e9:49:dd:7b:15:f4:b6:
d2:5d:f6:49:52:2a:c7:37:e2:58:f1:e1:91:74:31:ad:77:21:
0a:c8:7c:4a:bf:8f:bc:ef:61:dc:d5:e3:00:e6:77:8f:66:78:
04:97:f9:52:a0:22:d7:32:8a:15:26:9d:1a:93:38:e9:17:d5:
c3:33:c8:76:95:1a:1e:59:32:08:d8:5c:5c:78:b2:0d:96:e0:
b1:ad:9e:bf:5d:8a:2a:33:00:d1:a0:06:b0:60:4f:70:35:f4:
71:5a:04:40:d3:cb:d5:ae:ce:7a:d5:58:f6:94:b4:64:be:db:
17:93:75:2e:81:82:46:64:d0:53:b8:ce:9e:a0:da:b7:72:b8:
93:ce:38:8b:46:6b:dc:5c:d3:7d:36:bd:e4:ad:d0:c0:71:06:
09:c4:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:34:13 2025 by rpki-client