Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
File: _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json)
Hash identifier: fzbxiHu4Zb7Op2JpVyjxwUR0XO6DIgjQtc3tJwAToOQ=
Subject key identifier: 6A:95:F4:F7:2A:8C:D1:05:9C:AC:55:84:0A:E5:55:0C:45:23:5B:DA
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial: 0197507C9BFBC9635C5A66A649916C369BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
Manifest number: 0C10
Signing time: Sun 08 Jun 2025 17:00:32 +0000
Manifest this update: Sun 08 Jun 2025 17:00:32 +0000
Manifest next update: Mon 09 Jun 2025 17:00:32 +0000
Files and hashes: 1: 7voLoVZs2GImQRBCo5BKLZ-Uj7w.roa (hash: 4GwoSbNu+hRTl0Hpw8zq+LaDTkSr14kM179EFGiS8KQ=)
2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: nMnnX8OioDeTqVe5fDmfohR3/V3flGk1LfULjuELSBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:9b:fb:c9:63:5c:5a:66:a6:49:91:6c:36:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Validity
Not Before: Jun 8 17:00:32 2025 GMT
Not After : Jun 9 17:00:32 2025 GMT
Subject: CN=6a95f4f72a8cd1059cac55840ae5550c45235bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7c:6a:96:55:9f:b5:a9:78:63:61:81:bf:dd:
58:de:a4:5a:36:31:ea:e9:bd:81:e5:ca:00:d3:de:
a1:02:61:80:b4:81:f2:83:0b:4f:85:81:e7:96:3d:
10:a7:21:1c:68:c0:3c:99:35:52:10:51:82:60:1f:
3b:9a:bf:7f:0d:ae:9d:1b:de:73:11:e4:4d:92:c9:
94:98:94:0a:42:be:9a:ba:5e:3c:61:10:67:c9:cd:
7e:ff:73:e7:04:a3:02:ef:7f:bc:fa:df:5b:20:13:
20:a4:a4:32:3f:4a:17:6e:3e:d3:db:17:6d:1c:26:
11:fb:d2:3d:58:ed:96:b3:0c:a4:9d:14:5a:a0:60:
48:60:74:74:9e:2e:b9:60:2e:bd:c8:82:b2:25:f0:
66:a8:f1:bb:e4:e3:18:b3:97:8f:2d:72:67:f8:8b:
0d:62:48:8b:48:eb:b0:8f:03:d8:cf:6a:bb:f3:15:
08:9f:b1:55:ba:f2:c4:d2:db:02:8d:9b:d8:bf:44:
a4:fd:bb:18:c8:71:02:1c:f6:b8:66:8a:7d:5e:82:
84:78:5d:3e:1a:57:97:43:95:61:4d:96:b0:31:ed:
75:5e:00:5f:ab:98:59:d9:83:b4:7a:04:3f:4e:e2:
81:3d:12:c8:de:63:74:7f:bc:e2:62:0f:27:6f:04:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:F4:F7:2A:8C:D1:05:9C:AC:55:84:0A:E5:55:0C:45:23:5B:DA
X509v3 Authority Key Identifier:
keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:d8:a8:bd:c0:ca:97:23:f7:22:98:78:ed:e6:3e:67:fc:
e4:27:71:57:4d:11:77:b4:aa:dc:5b:11:c5:15:78:3b:13:c9:
e3:aa:18:4c:07:a0:09:6f:92:b4:6b:eb:7e:c2:a0:8e:78:aa:
ec:b8:d7:17:a5:95:0f:f4:67:3b:bb:36:c6:5c:f7:77:b7:c3:
83:fa:ca:bc:a8:f3:d4:3c:98:e8:02:36:45:b1:70:3a:bf:56:
51:26:62:75:a5:c5:94:2b:e8:e0:44:f5:c5:e5:7f:b2:2d:fe:
3c:eb:c7:fd:92:46:33:6a:bd:79:ea:3d:34:89:43:d3:0b:9a:
b6:8a:9f:02:8a:a1:b8:1c:31:ca:96:e3:53:ee:a6:e9:73:bf:
b7:d0:55:d3:05:89:57:da:b5:9d:40:48:17:69:4f:67:39:cc:
27:b7:0a:54:56:59:96:d3:90:89:03:0e:75:e2:05:4f:24:63:
2b:1c:bc:94:ba:ef:68:20:3f:65:96:60:e7:b5:88:54:35:5c:
ed:c5:b1:70:c2:22:24:54:c2:62:6e:0c:2b:7c:44:2b:35:b7:
d8:66:35:22:b0:44:8d:ac:39:da:9a:83:ca:e6:bc:42:55:46:
7c:cf:f0:92:30:3b:1d:05:f8:c2:be:e9:72:aa:cc:13:22:a5:
4e:d8:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:33:43 2025 by rpki-client