Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
File: yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json)
Hash identifier: NgrvqqHZ0Q9CMYJF58L+UlCowpndWcssjDIjn6z3Qx8=
Subject key identifier: 0C:22:A0:E7:10:66:E1:58:17:97:B5:07:DE:1F:70:36:6D:CF:AF:EE
Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
Certificate issuer: /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Certificate serial: 01974F336BA0622713F973E6F7BE79519228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 11:00:59 +0000
Manifest this update: Sun 08 Jun 2025 11:00:59 +0000
Manifest next update: Mon 09 Jun 2025 11:00:59 +0000
Files and hashes: 1: rYX5OSjisXVBgIC77wXTzITcbqs.roa (hash: SPnPR9xhnE7+gAosfCHCqCDCEcNhjAT2MXJYL+lu5nM=)
2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: WFhCiRxCu1j1QWsi1OWhx8dxqVghRDQkyvndkdIg0MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:6b:a0:62:27:13:f9:73:e6:f7:be:79:51:92:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Validity
Not Before: Jun 8 11:00:59 2025 GMT
Not After : Jun 9 11:00:59 2025 GMT
Subject: CN=0c22a0e71066e1581797b507de1f70366dcfafee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:bb:3f:29:58:a5:ac:d7:2e:46:4d:1d:ca:
57:3c:81:77:96:01:94:b1:15:f1:41:36:8f:c6:f6:
b3:c9:7d:06:ae:12:7d:71:73:71:a9:15:d8:84:45:
36:5b:c8:c8:45:4f:72:f0:d7:26:ac:15:a0:ad:2e:
c0:09:43:54:ad:95:88:4d:15:c8:7d:0b:b3:04:cc:
87:90:51:22:bf:13:97:3f:9c:b6:67:44:a4:fa:72:
1d:c4:6d:b8:92:b8:51:a4:ed:54:c2:7f:ec:55:86:
f9:a6:45:d2:07:02:17:be:a1:11:6f:6e:7f:6c:f9:
59:c7:31:b7:0d:2a:eb:93:5d:63:04:13:47:60:93:
3e:c0:63:56:e8:00:ee:68:df:94:ec:8b:8f:14:bd:
17:30:95:de:1b:f7:a9:08:04:62:b2:1d:49:08:56:
de:55:e0:a2:eb:7c:84:ff:48:66:31:db:99:f9:81:
d4:12:a3:23:3f:70:6d:03:08:35:bf:9d:1e:f5:6e:
ee:e5:88:09:6c:49:f6:79:32:2d:78:67:7e:dd:f8:
f8:c1:3d:e5:e8:4f:a1:e3:a4:62:76:e4:1e:48:ba:
d0:63:c2:0e:b7:d6:f9:ef:42:2b:c8:12:8a:a2:79:
68:4e:56:0f:01:46:ec:68:07:83:45:a8:8a:b0:e5:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:A0:E7:10:66:E1:58:17:97:B5:07:DE:1F:70:36:6D:CF:AF:EE
X509v3 Authority Key Identifier:
keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8c:92:56:ad:76:00:d5:d5:93:25:ba:16:c7:d6:48:d3:fc:
80:af:ee:56:2e:4e:f4:bc:31:66:52:5a:3e:2d:aa:d1:65:1d:
f9:23:6d:34:cd:af:7a:43:4f:5e:a6:87:be:92:39:e7:89:6c:
25:a9:17:10:0b:62:e4:f8:ce:ce:ff:ca:b6:33:11:4f:95:f0:
0b:ae:66:2c:26:cb:27:8a:57:2c:f2:bc:4f:78:2d:36:10:e6:
10:e0:86:71:39:17:e3:0a:7e:32:a5:7f:9c:04:91:bc:14:c7:
d4:89:10:78:24:ab:95:c7:6d:ad:36:da:29:12:02:1f:d2:7f:
73:26:12:fe:2c:62:bd:e5:8b:7b:85:c7:e9:89:1f:51:a5:51:
b1:47:af:e7:89:db:d5:42:a6:69:9b:29:b8:e5:20:bb:73:7b:
4e:43:ba:46:ca:4a:3b:de:37:d9:4d:67:66:cb:a2:db:be:5e:
99:f1:29:83:1f:34:51:0f:5d:ee:4d:61:33:5e:dc:a6:90:e1:
16:8c:92:b7:a5:24:a0:fa:56:91:68:18:8b:5a:9d:7c:f4:65:
f3:58:b3:0d:0f:45:52:17:bb:22:98:ad:08:23:15:45:bf:b6:
0e:11:07:4c:25:ff:7b:91:65:d6:40:84:b7:c2:60:01:c0:99:
1f:a5:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:20:19 2025 by rpki-client