Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
File: YhuOSG7srmEk3hBJT9OROe1KN8s.mft (raw, json)
Hash identifier: +ptkbUMQyhvJxPGdfz1Is5mqNdwpSuKDk+HdMe49dIY=
Subject key identifier: CB:2B:F8:AF:DF:F3:12:3D:8F:F1:EB:28:3A:81:62:A3:65:74:01:F9
Authority key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
Certificate issuer: /CN=621b8e486eecae6124de10494fd39139ed4a37cb
Certificate serial: 01974AB167A3CDC201D5DFEF1CA03DE519F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 14:00:29 +0000
Manifest this update: Sat 07 Jun 2025 14:00:29 +0000
Manifest next update: Sun 08 Jun 2025 14:00:29 +0000
Files and hashes: 1: YhuOSG7srmEk3hBJT9OROe1KN8s.crl (hash: 0+QOVCeoF4l75Kk8YGHY6/YwgpF+IjGlNRnIGI45oX8=)
2: eKGme1_RE2Cve029wfoTPnjkx8E.roa (hash: 7e5ken09Fa398flHkK+xPpARVfWAIKVd53mQhTUCt6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:67:a3:cd:c2:01:d5:df:ef:1c:a0:3d:e5:19:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621b8e486eecae6124de10494fd39139ed4a37cb
Validity
Not Before: Jun 7 14:00:29 2025 GMT
Not After : Jun 8 14:00:29 2025 GMT
Subject: CN=cb2bf8afdff3123d8ff1eb283a8162a3657401f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:4e:5e:ac:30:8b:f9:cd:2a:03:a7:95:cc:
e1:80:31:f2:44:4a:cf:97:2a:e1:90:ad:12:5a:ae:
b2:d9:55:87:f7:0b:0a:cf:f7:ac:ca:46:92:25:07:
50:02:97:5d:5e:1d:32:da:39:97:34:ac:8a:93:99:
09:48:ce:ff:ca:72:80:95:65:f9:0c:59:0e:b0:09:
4e:41:3e:74:73:f1:ca:ce:cb:b4:8b:1b:d2:11:3c:
41:71:f1:8a:9a:2a:3b:c4:37:e6:63:56:81:a1:a9:
3a:07:c1:ab:c9:55:9b:be:06:b8:bf:ce:74:e1:ff:
98:0d:7c:af:e9:82:f9:24:f4:dc:46:10:4f:ed:81:
84:ce:91:e9:cd:05:ce:af:ed:a5:7e:05:3a:8c:5a:
fa:88:7c:7d:7b:81:ec:c2:76:c4:48:1b:93:eb:7a:
60:7f:07:11:dc:79:71:76:41:a0:c0:26:a2:78:b1:
dd:aa:fd:a0:f0:94:c2:87:9b:1e:81:05:71:f9:a2:
90:3a:69:b1:a7:41:42:19:08:41:20:4b:a0:35:2f:
f0:7f:56:76:0d:17:a7:0a:ca:69:4e:1c:0a:09:15:
a7:ca:90:26:e3:36:c1:45:5a:0e:b7:9f:e8:5e:ba:
fe:35:0f:58:bb:ea:0b:7c:18:95:58:23:06:ad:dc:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:F8:AF:DF:F3:12:3D:8F:F1:EB:28:3A:81:62:A3:65:74:01:F9
X509v3 Authority Key Identifier:
keyid:62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:eb:30:f7:f5:ef:7e:0c:3c:f1:c1:6d:38:54:56:a8:a6:9e:
eb:34:bb:e6:c3:cd:b5:94:4a:51:6a:da:3f:af:a8:4a:04:ff:
21:3c:e7:06:5c:cd:6b:61:47:df:ea:91:c5:55:47:09:ce:ce:
8b:00:9e:f5:1c:e5:ff:f6:4e:c4:88:2c:fb:0b:70:38:10:93:
f3:6a:df:d9:3f:00:01:aa:c8:da:1e:c0:2c:0c:30:cb:7c:96:
64:ae:08:2c:9c:fe:df:ec:40:74:02:a6:b2:a6:cf:da:a8:27:
05:00:24:69:ca:cf:9a:c7:32:3a:b8:19:7d:73:9e:e5:d1:1c:
ce:05:04:36:8a:e8:4f:35:50:ac:b3:45:e8:1d:19:f7:52:57:
ec:41:92:12:58:00:47:11:b1:c9:32:55:fd:fc:bf:66:6f:e9:
b5:fe:db:4d:61:78:a8:ee:8c:76:32:d8:bd:be:97:dc:2c:a9:
f7:69:81:72:c7:95:af:d3:71:79:1c:89:23:82:7b:7b:57:d1:
f5:ed:ad:44:60:4b:71:fa:b0:eb:9c:e2:85:3f:ee:1d:90:84:
12:bb:ab:6e:62:66:e1:da:10:fe:4f:c2:c0:4b:b1:73:66:4b:
f6:c3:07:db:4d:c6:7b:c3:e1:eb:d2:98:7e:ca:09:7b:ee:5d:
f2:35:ec:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:03 2025 by rpki-client