Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: lwt2rAehWBNynS2Z4Qq4aeFin5H5pYYukyHMS97wXGg=
Subject key identifier: 71:99:76:74:7B:64:D6:8B:AF:A5:B3:29:6A:BD:AF:D9:EB:3D:89:E5
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019762F085DF779040E86CDBB011F4107405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 159A
Signing time: Thu 12 Jun 2025 07:00:19 +0000
Manifest this update: Thu 12 Jun 2025 07:00:19 +0000
Manifest next update: Fri 13 Jun 2025 07:00:19 +0000
Files and hashes: 1: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=)
2: _Xj2eknSD0ggywf9BvZfFW4ND5Y.roa (hash: lqrmQ5OQaXV1qMgJ8jG3Tq4DJQ0kTl6M/TLRe7MYJpY=)
3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: TBgMDsY07nrfkRZF2GZnie2eIWj1HxYumBO1BkdsUPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f0:85:df:77:90:40:e8:6c:db:b0:11:f4:10:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jun 12 07:00:19 2025 GMT
Not After : Jun 13 07:00:19 2025 GMT
Subject: CN=719976747b64d68bafa5b3296abdafd9eb3d89e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:9b:96:d8:63:77:19:ba:98:86:73:67:b2:
96:d8:d6:dc:e9:c2:b8:15:b2:85:61:01:09:aa:12:
11:8e:8d:90:27:82:3c:64:d8:c1:33:54:b7:d2:c9:
5b:8a:98:23:96:d1:85:32:a7:65:b1:0d:6f:f2:8e:
26:64:99:24:c6:b0:db:62:c0:ad:4b:14:bd:e4:d4:
ff:fc:cf:71:0a:86:6f:ef:98:cc:4b:9f:cf:d4:05:
d4:f7:5e:c6:88:18:71:22:c5:3e:8d:f1:45:d3:97:
30:d7:95:05:d5:00:53:24:d0:4b:95:82:a9:89:7a:
65:e2:fc:49:7e:c8:d5:51:90:4f:71:fc:2d:78:f4:
b5:7a:58:57:e0:c2:a1:61:c5:be:14:d0:fb:3f:46:
10:cc:97:e3:49:09:ab:93:24:ed:dc:6d:0c:1e:24:
38:4b:9b:87:09:33:94:11:61:ac:d1:74:fc:b7:d7:
0f:22:b3:b8:e2:a4:b5:74:75:62:9b:1d:73:95:0e:
a8:a2:4e:17:33:3b:53:a1:38:df:61:6e:7b:d1:cd:
81:6a:ed:ba:04:1d:c1:89:e0:3d:96:b8:05:65:d4:
2b:c3:0a:30:cd:0a:71:a0:b6:0c:aa:62:8f:72:b3:
80:b7:a2:f1:d3:72:c8:d3:f2:8b:13:35:ce:9a:90:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:99:76:74:7B:64:D6:8B:AF:A5:B3:29:6A:BD:AF:D9:EB:3D:89:E5
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6a:c9:b8:af:e6:de:99:cf:57:8e:d7:e0:d3:60:37:39:66:
df:3c:25:83:d4:5f:57:86:fe:fc:0a:12:01:c8:af:b7:44:c5:
07:fa:70:8a:8d:8e:9f:29:19:c9:42:cd:99:96:e1:e5:c2:30:
ca:b1:ea:5d:bb:50:70:4a:a5:9e:16:4a:40:26:0c:c0:3c:f7:
97:3b:e9:34:5e:ba:98:eb:33:e6:b0:11:b5:f5:96:bd:ce:f9:
9a:38:e8:22:21:30:30:5e:b9:02:cf:af:8c:fa:b3:ae:0f:f6:
7d:97:62:36:5b:fb:9e:3f:79:1f:83:98:92:02:3f:42:e4:ff:
5e:be:6d:ee:cd:2f:36:ac:b7:6c:cb:d3:1f:7a:da:d1:53:d3:
b7:16:23:e0:e2:a9:82:0f:6d:4a:39:8a:ed:b2:9c:27:c8:f4:
ed:7f:98:99:75:2b:e3:1c:7e:8d:64:44:44:db:c6:51:06:5b:
e2:ec:93:e2:74:a1:92:94:ad:80:a0:bc:92:3a:8d:e6:6b:77:
81:0c:f3:c0:86:62:f7:dc:88:54:b8:b7:8d:1f:25:97:e4:b3:
d2:c9:81:19:d5:31:bb:15:fb:c4:19:7c:51:0a:39:8e:dc:76:
e0:b4:b7:26:24:53:5f:ac:36:d7:34:81:78:97:83:7e:78:11:
9e:50:9b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:04:37 2025 by rpki-client