Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: x7jhyEunzSQHi/9X5ALIYMMFymJatmMAr7gqhaGVKMI=
Subject key identifier: A8:64:04:5E:39:E2:69:AF:9D:C7:DD:BB:CB:1F:36:92:6F:FF:9D:BB
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 01974FD7B22858D1D83C7121CC0ECA8A1C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 084D
Signing time: Sun 08 Jun 2025 14:00:25 +0000
Manifest this update: Sun 08 Jun 2025 14:00:25 +0000
Manifest next update: Mon 09 Jun 2025 14:00:25 +0000
Files and hashes: 1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: 8GrGYzBl/nOVvDtLJCMuRkK+Lah8gq1VFipInC7mWQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:b2:28:58:d1:d8:3c:71:21:cc:0e:ca:8a:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Jun 8 14:00:25 2025 GMT
Not After : Jun 9 14:00:25 2025 GMT
Subject: CN=a864045e39e269af9dc7ddbbcb1f36926fff9dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bc:a4:c1:29:e0:8a:25:d2:08:86:69:05:dd:
b6:25:a4:e5:ab:17:b7:c9:8a:c2:d2:68:62:58:80:
f0:af:11:00:06:4e:3c:03:1b:04:92:49:0a:23:d5:
37:25:99:26:5f:1c:72:03:23:bc:eb:b0:a7:a5:e7:
7c:0b:db:c3:f9:4e:5c:1c:6e:56:62:29:63:91:1d:
80:c4:cf:ce:b8:10:d4:76:77:89:a4:87:e1:9c:4b:
55:ca:76:5b:3e:5d:f4:b8:cc:9c:26:f5:88:d6:78:
a6:e1:26:26:51:21:af:f4:a7:ba:98:65:06:6c:db:
e3:a8:30:dd:50:74:9b:fc:43:12:10:fb:b6:e4:ef:
4e:c5:4e:ed:50:00:67:bc:63:65:b3:0e:7c:54:aa:
8d:6f:76:a2:be:66:a9:14:c4:22:5b:2d:ee:0c:86:
f6:51:ea:3a:06:82:03:95:80:97:71:68:27:f8:7e:
49:d2:34:be:4d:ca:e7:1a:f6:9c:9f:31:e9:9a:25:
35:f3:d2:91:f8:f2:75:ef:6d:b3:97:4b:77:7d:b9:
68:a4:48:7e:8b:af:ff:dc:de:a8:94:02:9e:5b:26:
1d:f5:37:65:fe:27:c3:12:ae:37:72:4d:41:47:be:
ff:35:3b:e2:fd:25:f6:e7:08:8f:43:c7:19:17:06:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:64:04:5E:39:E2:69:AF:9D:C7:DD:BB:CB:1F:36:92:6F:FF:9D:BB
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:89:3d:f0:16:e8:6e:22:6a:6e:b0:74:21:b7:67:7a:5e:
e3:3f:02:e2:c4:2b:0b:20:d3:2e:74:e8:92:07:32:53:5b:72:
94:86:ab:a6:79:24:1b:7e:15:c4:f6:8b:8e:7b:53:fe:d0:8f:
ae:fe:8b:1c:af:ea:64:c7:71:98:21:7a:3a:9e:63:2b:e8:8f:
63:c8:2e:0b:13:3e:94:7e:27:0a:92:54:1e:67:87:29:fe:cd:
e9:e4:da:0c:e3:c6:2f:07:7d:22:a1:b0:bc:59:a8:69:34:88:
bd:29:2a:2c:6b:6c:96:b6:79:3a:17:e8:6d:15:6e:e0:e0:b3:
fd:e1:c3:61:d0:08:45:9f:8b:c0:ac:80:96:15:ee:74:b9:c7:
41:6b:e1:52:55:81:8e:ad:e4:69:c6:42:ec:f1:f1:2c:80:ec:
ab:fd:ae:98:3c:de:f2:26:31:d9:99:94:93:5a:9a:27:6e:d2:
97:6b:39:7f:1e:b5:47:02:d6:4c:eb:d5:eb:30:a6:43:95:79:
56:93:51:d7:a7:04:55:53:d7:99:af:dc:6b:db:d6:bb:0d:48:
27:ca:c1:6f:7f:9b:62:06:50:12:28:05:5e:db:0d:4c:6d:46:
6c:ba:a6:ce:1e:e9:df:3f:8c:e3:ba:fa:18:43:77:56:2d:48:
9f:d4:30:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:17 2025 by rpki-client