Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: /vRSeeJ4L1JI7ekGosVDR9hxodwdpsNSItHSG/Zvzgs=
Subject key identifier: 97:19:59:83:E7:69:0E:8E:25:B0:92:E0:76:8F:AC:DD:28:92:D1:71
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 01974E20629342B8E69B3482AECC17E1E166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 03B4
Signing time: Sun 08 Jun 2025 06:00:34 +0000
Manifest this update: Sun 08 Jun 2025 06:00:34 +0000
Manifest next update: Mon 09 Jun 2025 06:00:34 +0000
Files and hashes: 1: nGn_W0gSwBrRPKhat5R4cEQoqhY.roa (hash: XVU8sWeUw+6VazizBI8PMCmNF85+iRw+0SNowFdIf08=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: 83xlo+xLyzz9sy5VG1D50seTrWQfOYsqF7GdAtXoHlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:62:93:42:b8:e6:9b:34:82:ae:cc:17:e1:e1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Jun 8 06:00:34 2025 GMT
Not After : Jun 9 06:00:34 2025 GMT
Subject: CN=97195983e7690e8e25b092e0768facdd2892d171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:9e:61:16:be:da:0d:94:0b:b2:4b:dd:8a:
66:94:97:83:90:26:6c:ea:ca:0e:aa:55:25:c8:36:
16:fe:91:c4:22:99:ea:d5:03:54:40:1d:9e:85:46:
8d:8c:68:33:5b:6b:74:0a:be:e6:c4:18:ae:81:91:
9a:68:10:fd:24:2f:a2:30:f3:9e:a3:84:a8:b3:1f:
d3:29:51:47:e9:1f:56:ca:82:3d:db:85:f3:c3:56:
db:53:11:b1:4e:7d:c6:c0:2d:f8:7f:c8:af:41:b1:
bc:b4:2b:06:0c:fa:42:50:8d:ea:6d:53:ed:e2:84:
6e:d5:82:a7:81:c3:b3:34:5c:b3:27:1f:6b:bd:0b:
3d:12:b6:d5:fd:54:75:f0:e9:a7:bc:63:c6:66:cc:
81:4d:9e:d2:29:5e:65:46:5e:ef:a8:ee:31:78:f4:
ee:e5:53:1e:8d:a9:54:6d:b2:10:66:a8:5c:e8:03:
6c:ae:13:75:e2:dd:07:12:58:e4:3c:c7:af:f8:34:
19:94:62:59:ec:7d:d2:60:cc:fb:8b:89:1b:74:75:
43:8a:b9:52:fb:44:bc:f2:e0:b7:9a:55:38:47:8a:
80:c5:18:eb:f4:3a:31:bd:e7:95:13:d1:b2:db:d7:
10:bf:46:09:92:4b:c1:b7:db:98:e1:f8:1b:5d:56:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:59:83:E7:69:0E:8E:25:B0:92:E0:76:8F:AC:DD:28:92:D1:71
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7f:8d:07:e2:f7:9e:0d:b0:2d:76:cb:70:ff:82:e9:5e:1e:
7a:6d:2f:49:27:8b:e6:38:89:42:15:e4:45:a0:8f:08:ba:40:
06:9b:1a:c2:0e:55:c7:1d:a2:57:db:8e:b4:cc:d1:30:c7:64:
06:53:d7:c8:f4:69:de:68:f5:50:6d:87:0c:d7:c0:e4:e8:e1:
f0:df:7f:0c:f8:f4:39:e3:39:29:d9:b1:f0:28:d6:a4:bb:74:
82:98:c8:5c:a8:41:a5:36:a7:df:12:66:d7:a9:07:76:4f:fc:
85:8d:b9:88:8c:a5:d3:36:65:4a:f8:b7:cf:f5:db:8a:ff:7f:
c4:2b:42:97:1f:18:58:9d:b8:9e:e4:60:e5:f8:69:1f:71:ca:
60:b8:7a:c6:76:70:77:d5:2f:26:5d:2c:13:21:cc:a2:ea:54:
70:58:86:47:fc:6f:08:70:3d:3c:71:76:08:47:ca:2c:ed:b7:
ec:69:c0:72:a3:f3:fd:4a:be:4d:47:99:1d:9b:d6:2d:c0:81:
d1:57:2c:68:cc:93:7a:27:c3:b0:d1:db:28:80:37:41:25:9c:
e3:2d:86:6d:98:d2:01:cd:14:bc:43:12:e0:7e:c7:20:7f:4f:
1d:ee:70:32:9d:9c:fe:66:db:d5:bd:7b:49:b2:ce:92:a8:51:
d5:37:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:34:28 2025 by rpki-client