Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier: zXaXfUrBM+EPW5NDXAPgZRhNZWTlehzKalPrhekVFVM=
Subject key identifier: 0E:14:3B:58:26:40:39:6F:26:AE:60:53:8A:AB:97:DC:2E:00:9B:1F
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 019749D5CF08E52BF145E7A70DCB53F37EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:38 +0000
Manifest this update: Sat 07 Jun 2025 10:00:38 +0000
Manifest next update: Sun 08 Jun 2025 10:00:38 +0000
Files and hashes: 1: BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa (hash: rqwF60FwzB+zZQwtQI8AX0k6qPeHy+PObyrOxNB5ovY=)
2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: A3jcobJ9/wdGgt97vZ6tV4E6E4hxzsOZ9pWxCabivgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:cf:08:e5:2b:f1:45:e7:a7:0d:cb:53:f3:7e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Jun 7 10:00:38 2025 GMT
Not After : Jun 8 10:00:38 2025 GMT
Subject: CN=0e143b582640396f26ae60538aab97dc2e009b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e1:e6:d3:5e:a2:56:32:c0:67:69:ad:ae:da:
ee:94:74:19:c7:89:6c:ba:dc:ec:3e:35:19:da:99:
9c:7e:1a:78:8b:bd:62:4b:3f:f8:c6:5e:d5:fc:c6:
38:5a:c5:2c:48:ad:20:b0:fa:8c:5a:bd:5a:40:f9:
78:e3:a2:7e:c5:57:f6:ec:8c:b0:2e:31:a9:49:c8:
7e:9e:ae:d2:22:8e:9d:c4:6f:2e:48:13:aa:4f:2a:
dc:c7:1e:a7:1c:05:7f:36:fd:93:b9:e9:21:02:bf:
e4:db:43:e1:a0:f1:e4:cb:f1:2f:9e:fc:8a:0b:9e:
5b:0f:89:a9:23:4f:cd:b8:00:0b:2d:f1:e3:ca:0f:
2a:68:66:9a:d2:e2:84:88:c9:ca:52:24:d6:e7:96:
d1:05:ae:1c:d6:ac:99:fb:11:8f:04:24:b5:0e:74:
63:54:22:83:5e:d6:eb:93:1a:b5:cf:6e:38:b6:ef:
af:c6:aa:2d:96:72:36:cd:0a:a2:99:83:f7:0b:20:
11:00:e8:92:b9:be:ec:09:17:92:1d:b7:ab:6b:63:
77:37:7c:19:84:5b:d0:e6:98:b6:0c:3c:96:49:95:
77:41:68:b7:d9:ca:a6:dd:af:8d:88:32:0b:40:a1:
f9:93:25:7f:55:dd:09:f9:68:bc:b7:cf:78:6a:6b:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:14:3B:58:26:40:39:6F:26:AE:60:53:8A:AB:97:DC:2E:00:9B:1F
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9b:5a:ed:01:b8:e8:f0:93:34:22:99:25:0b:66:be:e4:67:
96:88:1a:b6:a1:49:b3:00:0b:db:dd:1b:c6:45:0c:b6:7f:36:
56:2e:b9:61:c8:cb:51:1e:cd:41:60:b4:bd:50:fb:bc:e0:dc:
29:b1:cf:fa:7c:fd:5b:ed:fb:48:6d:67:f8:ee:f0:1c:53:6a:
e4:d0:e1:74:8b:f4:0d:58:45:e7:65:c7:64:8c:75:f0:78:3b:
14:22:85:43:91:07:9b:99:0c:44:51:b7:c9:e3:a2:ac:12:3c:
5c:3c:26:ee:b5:09:b4:13:78:1d:11:8d:7e:01:c7:fb:c0:e6:
8b:a2:8c:52:21:51:50:4b:e7:23:82:bc:38:11:20:fd:31:5c:
a8:b2:3b:83:95:4d:1a:17:a8:45:9c:de:72:4a:18:15:3e:40:
87:4e:0f:83:a3:77:c1:17:8c:91:3b:e7:27:38:61:8e:61:6e:
4c:ec:c6:dc:4d:e2:02:a8:0d:17:0c:30:ce:a9:00:d0:f0:17:
d8:c2:25:5b:b9:c6:0e:00:46:57:bf:a1:5a:4c:53:41:2d:4e:
4a:e3:6f:f1:c6:b7:d0:6d:12:e7:08:dc:d3:69:19:93:35:20:
87:93:04:cb:a2:d1:72:70:ba:3f:0b:3c:75:84:61:bc:5c:ff:
12:8d:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:24:21 2025 by rpki-client