Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: d/NceOeLcOqNzhA8bJYUnTUCPannuYeKR15B4xPbN0I=
Subject key identifier: FF:1D:80:E4:2F:17:7C:7C:00:11:DE:58:BB:9B:7A:E8:F1:67:BC:5A
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 01975C12F69303B4E38BE06A8512136F92FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 02DF
Signing time: Tue 10 Jun 2025 23:00:36 +0000
Manifest this update: Tue 10 Jun 2025 23:00:36 +0000
Manifest next update: Wed 11 Jun 2025 23:00:36 +0000
Files and hashes: 1: Rui0sD0wI3PFIXuSgFCUVWy-M9k.roa (hash: hbv5XThLS6CFQJgStPKrJAlPn/du5JdwcgW0fJRsYnU=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: Ei4QM6UFfG1OZ4/kQr1ozBC7wXJ4u6aoD9itULUr86o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:12:f6:93:03:b4:e3:8b:e0:6a:85:12:13:6f:92:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Jun 10 23:00:36 2025 GMT
Not After : Jun 11 23:00:36 2025 GMT
Subject: CN=ff1d80e42f177c7c0011de58bb9b7ae8f167bc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:8f:95:2c:4a:50:6e:3b:9d:57:a2:84:69:
3b:34:70:1e:9f:f4:b3:ea:55:d3:8a:93:f3:3e:ce:
3a:fb:da:63:68:c5:b7:1c:91:2a:79:f6:c9:2b:24:
37:0b:72:7d:a6:a0:c1:a2:1f:7e:44:15:c8:11:8c:
63:ad:8b:3f:4e:69:a9:fb:5c:08:a0:86:82:7f:46:
14:9c:a1:e3:b8:ab:6d:8c:aa:22:a1:91:a4:d2:13:
ff:e8:76:3b:23:be:13:c4:f8:3b:39:0c:dc:5f:02:
04:b2:7b:a2:49:cd:06:8a:9c:cb:4b:16:91:92:e8:
b7:0d:b5:47:de:22:1e:be:5b:62:a6:14:e9:05:9e:
ce:ab:01:1f:18:6e:83:81:4e:a7:aa:dc:73:2a:36:
9b:8d:63:f6:74:52:09:56:d6:37:4b:4a:89:95:bf:
cd:c8:a9:d5:7f:17:62:95:2d:18:b3:48:d8:be:bd:
30:21:e8:71:92:d7:2b:30:af:38:f9:4a:d1:73:38:
9a:82:37:10:b3:b9:63:ae:c5:ed:e0:b4:bc:cf:37:
7d:8b:79:8f:08:a4:00:ea:0e:15:f6:64:af:f0:fb:
84:29:d3:5a:fd:a9:60:8e:1e:12:c1:8d:4d:ae:d2:
bd:29:0d:64:6f:7d:84:f1:8f:c1:78:45:d0:3f:5e:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1D:80:E4:2F:17:7C:7C:00:11:DE:58:BB:9B:7A:E8:F1:67:BC:5A
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ef:5c:02:b5:e9:81:33:05:91:35:34:bf:8e:85:27:8f:28:
53:d6:b9:b5:8b:45:ed:a9:09:42:f4:10:cc:25:d0:d6:34:e5:
a6:e1:4b:45:5a:7f:ff:14:7a:a0:00:d6:0a:f7:f1:5e:cb:35:
70:b2:68:5f:fa:fe:37:da:65:06:8f:47:3d:ed:e9:47:96:fe:
58:8a:3f:e3:e4:d6:03:6e:51:93:36:81:4f:ae:ba:41:f5:39:
0f:e4:af:8a:49:69:0f:6e:88:a2:ce:73:71:c5:ef:75:a2:46:
79:b9:25:22:b2:84:1f:62:7d:c3:fc:91:3d:f4:04:05:03:03:
09:6a:7f:62:bd:fe:83:27:73:93:b4:ce:65:53:0b:1b:bb:0a:
3e:37:bd:a7:a5:c5:c3:11:2f:25:f4:be:e6:05:7c:11:2c:6d:
78:97:9b:58:24:c7:71:0b:e0:ff:b3:6a:bb:d6:83:9f:52:fb:
b3:ce:10:a2:ea:7d:1b:be:2e:1d:a0:6a:27:0c:d5:60:27:6d:
72:30:eb:a0:e8:42:ae:df:bf:02:a7:90:22:1b:e5:f7:5d:92:
a4:c7:f4:2d:bc:aa:e8:0b:b5:4b:26:13:de:6c:fd:2e:e2:81:
f0:4a:86:b1:6b:2f:ac:3b:69:ca:11:22:5f:cc:12:4f:35:94:
37:92:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:56:13 2025 by rpki-client