Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: 1ztUVwIgkEU9IUGFPdnNonK7Jfpq0PQDnzEOeh+J+bI=
Subject key identifier: 72:F9:3E:6F:90:C4:5B:4E:48:A3:52:80:6F:8A:85:97:26:1B:AF:85
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 01974F6A4CADCBE989F8F93E014273D82E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 0D9E
Signing time: Sun 08 Jun 2025 12:00:55 +0000
Manifest this update: Sun 08 Jun 2025 12:00:55 +0000
Manifest next update: Mon 09 Jun 2025 12:00:55 +0000
Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: mr/47Iszb9vbrVqzn1X4C49/4V4YRDUQo+ySXBjZg/o=)
2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:4c:ad:cb:e9:89:f8:f9:3e:01:42:73:d8:2e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Jun 8 12:00:55 2025 GMT
Not After : Jun 9 12:00:55 2025 GMT
Subject: CN=72f93e6f90c45b4e48a352806f8a8597261baf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:a1:27:10:ea:85:72:b8:6e:19:d3:59:a8:
3b:3b:fa:c8:86:a5:f7:3b:ad:16:c0:61:58:73:e6:
0d:3f:8a:e1:e1:74:78:45:04:79:d2:cd:2a:8b:19:
6e:29:0a:b5:1b:76:7c:cb:e2:58:4f:6b:ae:25:5c:
e3:b7:8c:23:b0:db:65:83:61:b7:61:93:e8:0a:58:
9b:ed:36:2d:34:a8:e6:99:7f:9d:e5:52:a7:ff:99:
09:b4:17:55:9d:a6:62:56:72:02:42:93:44:a7:f7:
d0:81:ac:78:89:69:c3:9c:07:ab:b1:4e:af:99:1f:
5a:8a:ab:83:ea:bf:ec:f2:b8:63:f2:4c:ab:38:6b:
59:99:c5:3b:ef:d5:9a:3f:53:51:14:62:80:6f:5f:
8e:ba:ec:74:a7:69:a5:c1:32:fe:8f:55:0e:86:ea:
28:c4:1f:81:c7:49:e1:14:ae:1e:dd:0e:a3:0b:ab:
b3:7c:33:f7:b6:9b:7d:34:1f:bb:f6:f9:ab:7c:ed:
fb:c9:9b:bc:65:58:8f:fa:1f:ce:5b:fe:8d:60:35:
1b:44:79:a4:16:43:99:7a:a0:f4:79:f0:8a:ed:cd:
1f:f6:be:ae:d1:b1:b3:0e:87:4b:5a:66:11:5e:78:
d4:c9:96:6f:a5:f6:e4:ef:27:b0:c2:94:6f:ee:e6:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F9:3E:6F:90:C4:5B:4E:48:A3:52:80:6F:8A:85:97:26:1B:AF:85
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d8:00:59:2a:3e:58:1e:c7:b6:00:02:c5:d9:38:14:7b:78:
c0:4c:d4:a1:12:6c:8a:a6:59:7b:a3:5c:99:96:25:8f:f8:55:
b9:26:4b:30:e4:8c:f8:a7:62:cd:05:2d:d5:74:a6:6d:3f:7c:
13:9b:d1:2b:6c:86:21:3b:d0:46:7c:17:29:8d:41:c2:8b:b1:
53:05:f3:b1:9f:bd:3f:74:1a:8d:84:62:fb:0f:de:37:12:7c:
f2:4c:9c:8a:7e:82:58:b4:b7:b3:fa:fa:ca:b6:33:23:2d:74:
16:ff:02:6f:85:29:99:ee:22:ac:f1:45:e7:da:24:a6:37:52:
59:97:da:91:a7:1e:f6:77:9b:a6:bf:44:e1:97:1f:53:d3:76:
a4:22:82:5d:9f:ce:66:f2:34:d9:63:99:1a:14:57:db:8d:63:
11:57:49:26:07:43:d6:aa:93:5a:69:cb:97:5e:f1:9c:b8:79:
f9:6e:7b:33:74:60:57:42:b2:8f:29:90:86:95:6c:b8:fe:48:
2a:18:91:b5:1d:0c:a4:ef:42:3c:64:cf:43:de:55:23:0f:d5:
6a:0f:d4:16:a6:8a:19:43:0b:b5:88:28:ec:99:a4:70:6e:eb:
3e:4f:63:ef:51:b7:bc:4a:b1:ed:f7:07:66:9e:8f:e1:72:f7:
81:f8:7a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:31:11 2025 by rpki-client