Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: KJZpJ18LL9vgn0XYD2gcZMwsO9FgrXNWbbSh55vPJho=
Subject key identifier: 9C:E6:FB:4B:78:B8:9B:DA:83:AA:E4:74:45:72:2A:5E:C9:7E:90:9E
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 01974630112CDA757C4E1F12236E28EB5AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 17:00:44 +0000
Manifest this update: Fri 06 Jun 2025 17:00:44 +0000
Manifest next update: Sat 07 Jun 2025 17:00:44 +0000
Files and hashes: 1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: m8gDOlxTEDIFr3KW24Q4rQjuympvmZM+WGk8pXpS5oU=)
2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:11:2c:da:75:7c:4e:1f:12:23:6e:28:eb:5a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Jun 6 17:00:44 2025 GMT
Not After : Jun 7 17:00:44 2025 GMT
Subject: CN=9ce6fb4b78b89bda83aae47445722a5ec97e909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:08:2c:47:78:04:5b:ec:3c:41:3f:07:b3:
f4:c2:ca:3e:21:b6:3f:df:d2:cd:75:e6:bf:07:cd:
43:ab:c9:a6:d1:d4:09:4f:f9:30:cc:b9:79:fb:08:
38:4d:bb:9e:c1:d9:b5:96:12:43:61:af:65:a3:ee:
33:e9:e2:42:a6:4d:dd:15:17:6b:c2:a2:c6:90:7f:
7a:e6:d9:8f:84:2d:c0:93:7e:27:16:fc:28:e1:e3:
60:90:55:ed:52:d1:df:10:d9:9d:dd:26:12:09:22:
9c:c2:70:49:90:f6:2c:2b:4e:58:7a:6a:33:3a:55:
8c:56:9e:fd:a6:1e:f4:41:42:9c:57:21:f4:ea:fc:
1b:51:76:05:da:f6:c8:34:77:74:4e:0f:66:65:6d:
47:40:0f:c4:a3:c5:61:8e:55:05:8b:b6:85:5d:e2:
52:a0:e1:2c:71:86:1b:3c:c5:57:d4:f2:6f:bc:26:
a6:41:e3:b0:5c:47:3d:24:c5:39:ab:fe:c0:08:2c:
a2:7d:18:c7:cf:40:a7:e4:b8:d5:3b:8b:8a:35:93:
03:fe:5a:87:c1:d9:fa:b0:96:cb:b1:ef:a0:69:17:
20:4b:cc:51:e5:42:9c:81:18:bd:c1:ec:b9:10:73:
32:71:cb:2b:46:8b:39:8e:ef:94:45:e8:35:62:51:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E6:FB:4B:78:B8:9B:DA:83:AA:E4:74:45:72:2A:5E:C9:7E:90:9E
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fb:a5:9b:74:8f:e0:66:da:f2:58:fd:d4:11:a9:07:a7:89:
fb:23:b6:c3:38:a5:c8:91:fc:24:c6:d6:d0:fc:31:46:3d:4c:
08:b2:66:20:70:52:cb:be:a1:a3:e2:bd:8a:75:eb:21:9e:56:
8f:f6:ee:17:33:c0:ab:69:dd:c3:ff:57:d6:89:85:ab:2b:d1:
43:a4:0c:bc:b4:a5:e5:d2:1f:55:51:4e:31:b0:a7:a0:34:2c:
39:e7:31:08:7a:62:06:e7:63:01:f2:7b:02:65:4d:0d:77:8b:
af:d2:d5:da:1d:49:5e:cb:5e:d8:4f:bf:85:d9:71:98:fa:e2:
9e:41:18:3e:bd:5e:1f:f0:08:17:f7:a0:8a:ed:aa:f5:10:17:
bf:64:d9:2d:26:99:bd:af:9c:c6:76:aa:73:5c:19:26:23:27:
35:2c:28:0a:74:26:5c:6c:6d:d1:a4:bc:a4:ce:73:41:38:e5:
b6:93:ba:00:e0:70:8d:92:91:76:15:c2:08:da:b6:8f:3c:af:
c1:79:99:71:35:1e:d6:df:c4:8f:55:62:0b:86:4a:b8:a1:13:
cb:ea:3f:3c:50:a0:cb:6b:18:26:be:55:54:f5:fc:4f:31:9e:
c5:d5:d0:da:85:b1:d8:e7:53:4a:da:f6:69:db:4a:f0:15:e6:
63:ad:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:15:31 2025 by rpki-client