Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
File: YddkoENCcsEymumSiNCSvD7yIo8.mft (raw, json)
Hash identifier: qWPe1YAFWpf0eUJvbQqIHbanSpuO8/AwWIaQghyy5LU=
Subject key identifier: 35:E0:CA:CE:6C:40:8B:EE:0C:74:6F:8B:EE:07:2A:18:32:41:FD:93
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Certificate issuer: /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial: 01974C9FFB3A371EF11D6DA63E490B326419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
Manifest number: 14D6
Signing time: Sat 07 Jun 2025 23:00:42 +0000
Manifest this update: Sat 07 Jun 2025 23:00:42 +0000
Manifest next update: Sun 08 Jun 2025 23:00:42 +0000
Files and hashes: 1: REqtYQmRREKLJc9dQnOchbRCd38.roa (hash: CsFmG2TMLbA2Znbnw8r80UkQYTzgJ0VzpR3kBwBlHwY=)
2: YddkoENCcsEymumSiNCSvD7yIo8.crl (hash: yCjSnDmepS6DArm6gmmq7I9jZduQzrk5RF/QLbpSZeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:fb:3a:37:1e:f1:1d:6d:a6:3e:49:0b:32:64:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
Validity
Not Before: Jun 7 23:00:42 2025 GMT
Not After : Jun 8 23:00:42 2025 GMT
Subject: CN=35e0cace6c408bee0c746f8bee072a183241fd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:8f:a9:cf:fe:49:78:d4:73:a0:1c:d5:df:
b4:72:f7:e8:2b:e5:4a:45:a1:cc:45:6e:0e:17:9d:
37:23:52:60:a9:52:03:a2:a6:bb:e1:84:d0:fd:9a:
59:20:73:8d:04:4c:29:8d:cf:ff:08:2a:6a:17:a2:
f1:07:a4:70:98:6a:99:7e:95:f8:48:13:40:16:4a:
04:75:d6:12:79:0d:dc:c2:44:00:ea:3a:b9:94:93:
49:26:57:97:3c:2f:60:7c:00:62:2e:75:41:79:62:
db:30:43:77:1c:7e:0c:75:3f:d7:01:3c:50:d5:e0:
28:51:79:14:ed:43:c3:f2:33:6e:02:9f:e3:4b:8b:
10:e8:fc:1e:b3:4a:87:ac:aa:95:e6:85:96:f8:c4:
ef:86:c2:b1:d3:a8:58:78:ae:dc:cf:6d:6d:7d:46:
19:fe:78:ea:50:48:05:e8:15:e6:92:fe:51:1f:97:
34:92:17:c6:a4:66:8d:c0:33:34:8d:f1:a6:6b:04:
b5:58:af:9b:27:d0:e4:7e:81:c2:55:69:ea:2f:5d:
ec:8e:6f:1e:22:8a:f4:d3:77:f4:d6:7d:22:c8:80:
ff:bc:1f:72:06:a4:71:ae:ab:42:21:3c:d6:c3:62:
fa:0b:02:6e:5a:56:aa:42:99:bb:21:52:7d:b0:6c:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:CA:CE:6C:40:8B:EE:0C:74:6F:8B:EE:07:2A:18:32:41:FD:93
X509v3 Authority Key Identifier:
keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:43:ab:f7:05:67:23:74:bc:6c:f7:bb:80:83:b7:eb:30:21:
f2:64:ff:c2:1b:30:ad:d5:85:80:16:3f:80:af:b4:c0:70:6d:
1b:a1:e7:7e:b1:1a:90:d1:6b:bc:ab:fa:ce:d0:f7:48:98:53:
57:93:a5:7b:15:01:36:03:63:25:4e:0f:d2:85:ea:a4:fe:5d:
4a:ce:74:e3:ae:c1:34:fc:9e:10:12:aa:3b:ea:23:29:b4:21:
d2:ab:f2:79:e6:47:6d:60:c3:3e:c8:29:04:3b:fd:48:2a:7e:
02:13:ca:48:c0:66:55:18:fe:60:07:f5:b7:19:5c:c7:d5:1f:
7a:d3:18:95:68:33:4b:ea:64:db:34:1f:0e:d8:6f:6a:27:ad:
8a:5c:6d:d3:a8:98:a5:8f:92:1e:6e:7f:3b:a3:ab:44:ef:bd:
5e:23:31:73:70:12:b7:4e:7d:ee:b8:92:b4:c5:9e:5f:9f:e3:
65:68:b8:6d:d5:0e:f8:af:c3:93:a8:0f:e2:f9:f9:fa:0d:16:
3f:07:b1:23:ad:8a:63:81:5d:64:c5:42:06:c9:9c:52:2b:ed:
06:2e:ff:86:da:82:e9:ac:af:f3:28:65:39:42:e3:13:3b:34:
df:1e:1e:b5:81:69:4e:ab:f1:16:46:28:02:b3:1d:89:ff:e3:
c8:35:b3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:01:20 2025 by rpki-client