Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
File: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json)
Hash identifier: PYU9JUo9V1HquA+J+FpMzByLQ7DZJ+CUw4wn4zqjtWs=
Subject key identifier: 5A:8F:26:F4:7F:92:02:97:0E:DE:F1:55:D6:91:14:14:21:D0:54:D2
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial: 0197499F0DB9A278671866DC742ED4366527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
Manifest number: 0120
Signing time: Sat 07 Jun 2025 09:00:49 +0000
Manifest this update: Sat 07 Jun 2025 09:00:49 +0000
Manifest next update: Sun 08 Jun 2025 09:00:49 +0000
Files and hashes: 1: bh_jxWLWM4ERu-tO2W_vtiAaR34.roa (hash: q67OJI4bSTnxGyWpXxOC2jeYAfoLHFvQvpzctzRe0VE=)
2: sibHr2FGPjo5CfPD_x82IFZOyjI.roa (hash: 5o3OHC/8KmGr6JnUosFKoE0TLY9c878SbcJe1V+5e/c=)
3: tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa (hash: dYA2gqzlNnRY/+Z83i04orn08vaFeOTWTefS4wKcEJw=)
4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: BzG1LyhxTWesYNnNAB0jXZRiEvolUBLSqdotcXLrmi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:0d:b9:a2:78:67:18:66:dc:74:2e:d4:36:65:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Validity
Not Before: Jun 7 09:00:49 2025 GMT
Not After : Jun 8 09:00:49 2025 GMT
Subject: CN=5a8f26f47f9202970edef155d691141421d054d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:80:a1:f5:db:0a:10:12:7a:0a:be:24:ed:
6f:36:41:78:ca:f2:ce:da:ef:d4:6b:33:2d:1b:18:
da:6f:f7:83:35:19:56:06:9d:32:af:85:57:21:17:
47:b9:a9:1b:a6:38:97:a5:d0:9d:fa:e2:fa:bc:3a:
0a:9d:8a:6a:44:79:6d:90:b3:53:3a:3a:ec:00:83:
9b:30:bc:35:f6:11:82:08:9e:4d:45:d4:e2:87:7b:
29:b5:e1:17:cb:c8:09:cf:44:3e:a7:bc:60:b7:46:
11:f2:cd:3c:81:26:d3:4b:ec:2e:6a:ce:f7:0f:18:
1b:83:69:97:af:9e:a1:90:22:80:84:11:0e:dd:b4:
01:2c:97:29:3d:00:59:44:95:11:6a:93:a4:51:8a:
60:1d:6e:42:29:1e:33:2d:3f:8c:10:94:22:ec:38:
e6:9d:d4:00:2b:c5:39:da:53:20:ab:bd:4c:a9:ac:
b3:1d:f3:af:90:19:c1:b2:4e:bd:9c:83:c0:22:60:
68:93:fb:b1:11:cb:aa:2a:fe:23:75:0a:b6:d8:f8:
8c:59:ed:42:cb:67:2f:60:85:f5:e9:1e:b3:87:c7:
ab:4e:a6:20:4e:d9:31:22:b7:aa:9a:cd:2d:bb:a1:
ac:1c:17:f1:20:c5:67:bb:b5:15:d6:7b:91:f1:59:
ca:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:26:F4:7F:92:02:97:0E:DE:F1:55:D6:91:14:14:21:D0:54:D2
X509v3 Authority Key Identifier:
keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cb:44:d6:c8:e4:3d:c1:01:11:0f:f6:c1:40:a4:79:4e:a1:
65:3a:63:14:b5:f0:5e:da:46:97:3d:b1:3c:97:85:4b:2b:b6:
90:74:3f:e9:70:40:bd:80:19:f3:ca:37:42:03:fd:9d:74:0f:
de:57:9e:4c:ca:69:2b:db:a4:59:fb:92:7e:41:9a:9a:f1:89:
61:b6:c9:47:a8:42:2c:68:52:cd:6a:be:c1:ec:ea:c0:2e:a8:
d7:89:c8:98:b5:4b:02:92:99:09:50:ed:fe:55:72:37:3a:25:
37:dc:af:22:a1:79:e0:d4:e0:af:59:eb:fd:33:fa:2e:f3:fe:
50:f7:97:5f:a8:2c:89:02:b2:39:d6:68:25:f0:0d:16:6a:fe:
b0:82:a2:05:2c:49:3d:80:18:79:52:0c:7b:5c:67:15:0c:1d:
cc:93:cd:c5:23:06:ce:b7:27:88:1b:da:19:a6:41:a9:86:fd:
3f:03:f6:f5:c8:0b:c9:f4:60:93:bf:d8:c4:18:c2:ec:af:dd:
4a:e0:c6:33:09:30:4f:fd:1f:8c:a9:58:8c:d4:d9:13:64:f2:
ac:44:b7:73:ce:62:05:67:53:52:39:68:99:b2:9e:11:34:45:
cf:03:4c:bd:22:d1:3e:42:8d:a4:19:5e:8b:f5:ea:4b:0c:2e:
ee:d3:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:43 2025 by rpki-client