Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: ZDA2bhvLh0Q6ZFJCejCQF00J76hpjRdK4RIigzG3g7k=
Subject key identifier: 43:0E:CD:85:46:F0:99:AF:AB:20:D5:36:42:34:02:50:2D:2E:BF:43
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 01976C98BED9332EDDC0390D8A7A8EADD036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 159F
Signing time: Sat 14 Jun 2025 04:00:39 +0000
Manifest this update: Sat 14 Jun 2025 04:00:39 +0000
Manifest next update: Sun 15 Jun 2025 04:00:39 +0000
Files and hashes: 1: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=)
2: _Xj2eknSD0ggywf9BvZfFW4ND5Y.roa (hash: lqrmQ5OQaXV1qMgJ8jG3Tq4DJQ0kTl6M/TLRe7MYJpY=)
3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: ixzagwmY77XhM83nf8HbPKhwFzP1veBRpPyCU3+bcA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:be:d9:33:2e:dd:c0:39:0d:8a:7a:8e:ad:d0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jun 14 04:00:39 2025 GMT
Not After : Jun 15 04:00:39 2025 GMT
Subject: CN=430ecd8546f099afab20d536423402502d2ebf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:d3:80:2f:48:f4:07:a1:aa:ac:a2:1f:62:
7e:c0:86:a0:9b:0f:19:8e:1c:fe:05:55:70:db:ae:
48:4a:64:78:85:5b:3d:00:0e:36:23:e1:0d:56:61:
ba:ca:79:06:81:c7:b5:1c:01:7f:4a:80:1f:db:07:
49:02:5d:87:ea:9d:bf:43:e6:0d:38:7c:b3:c0:fb:
95:41:03:b4:95:5c:ed:08:34:db:68:a1:2d:56:08:
37:f9:2d:9b:cd:0b:dd:22:01:f5:3f:b2:50:c3:07:
da:44:f4:ef:e1:1d:d3:d2:3c:44:31:2d:99:59:af:
af:94:5e:75:12:12:52:2b:0b:00:dc:bb:6e:31:b5:
cf:00:8a:5f:96:9e:4e:14:09:ab:14:b0:ba:ee:b3:
54:f1:c2:13:84:8f:0a:6a:8f:7b:80:48:0e:85:ec:
7b:f8:ee:8d:18:4b:a1:8d:c3:44:b4:6d:f2:d7:36:
6b:56:86:f1:f2:e8:48:85:cd:b2:a5:f8:62:8b:82:
f8:ae:0d:30:c2:77:b5:03:93:48:5e:38:3b:87:79:
e9:eb:a3:a2:76:1b:39:d7:1e:38:19:6e:4f:33:4c:
bb:f8:d9:75:55:e5:dd:2e:5d:9a:8a:53:4d:83:e7:
de:b6:8b:13:c2:f7:11:3a:45:5d:8b:93:d7:44:c5:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0E:CD:85:46:F0:99:AF:AB:20:D5:36:42:34:02:50:2D:2E:BF:43
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d1:44:e0:83:d9:7c:3a:1e:11:4b:15:50:c8:3c:ac:b3:01:
2f:06:bf:21:3b:b1:33:9b:9f:4e:45:39:2a:93:92:87:98:6b:
c8:26:af:c0:a9:eb:63:47:22:1f:2a:79:f5:0c:43:d6:0e:6d:
c7:2a:64:29:ab:a8:4d:6c:9d:fa:78:8e:1a:b6:4d:f9:88:64:
c3:ab:95:31:73:c5:3e:2e:ff:ba:48:88:68:de:7a:bd:b5:f9:
19:70:71:ee:c0:99:ab:38:b3:27:4d:03:a1:f7:cb:e0:a6:03:
df:72:8f:7a:61:37:89:e9:21:af:2f:db:7a:91:fd:3c:25:ef:
4c:4c:a2:74:ac:9a:f3:f7:72:d6:eb:53:07:dc:6a:f2:e4:24:
7b:37:e5:ea:fe:fd:e1:82:94:68:15:12:83:c3:44:fc:88:b6:
b5:c6:00:5e:1d:6d:cc:43:a6:86:fe:a8:76:a6:5b:46:df:8d:
e5:99:80:40:a0:57:2d:96:a5:12:d0:bc:64:1d:de:2b:43:45:
df:be:62:d3:d7:3a:cb:ad:69:17:68:53:d4:08:91:cc:bb:fe:
cf:99:84:93:76:30:62:b7:9a:fa:b2:62:12:d8:b4:87:c9:0a:
0a:13:2f:cf:67:21:ef:79:94:81:11:b5:c2:be:0f:8b:5f:8e:
6f:6b:95:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:59:39 2025 by rpki-client