Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: jcbiSp0W/XTAQS9Ej8lyQv6Q8tIeUL1777SS5srumRs=
Subject key identifier: E7:99:56:B3:88:9E:18:A9:0F:88:0D:53:D8:90:97:7D:70:22:97:75
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 019748FA79F7287A3738A1FE842CAD9DF613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 01E9
Signing time: Sat 07 Jun 2025 06:01:04 +0000
Manifest this update: Sat 07 Jun 2025 06:01:04 +0000
Manifest next update: Sun 08 Jun 2025 06:01:04 +0000
Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: annU6hwwTWlaMYcI6x5lDGpX+1AnmGbgVytT9ajHfug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:79:f7:28:7a:37:38:a1:fe:84:2c:ad:9d:f6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Jun 7 06:01:04 2025 GMT
Not After : Jun 8 06:01:04 2025 GMT
Subject: CN=e79956b3889e18a90f880d53d890977d70229775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:f3:18:34:07:d8:83:2c:2f:db:14:f9:2a:
50:e0:5c:05:4d:5d:67:9c:62:c2:f7:0b:9a:7c:c3:
50:cd:5d:9c:68:ba:00:80:2c:1a:35:8a:37:61:66:
a6:71:3e:a5:dd:84:c4:8b:1f:d9:ed:33:7d:e9:f9:
a8:83:ec:2a:5d:22:e1:28:a7:0c:64:52:35:82:c8:
fc:a3:a3:87:fc:a3:15:37:ec:12:50:96:1c:d3:96:
80:a1:d6:62:b2:6e:44:1a:2f:65:99:ff:20:08:16:
13:0c:4c:db:e1:d0:0e:22:e7:a2:4b:b5:ca:12:78:
b4:9c:e6:94:61:d7:3d:4b:ee:cc:66:3d:c9:87:65:
14:3f:00:31:03:bd:41:41:ba:fb:08:a9:79:25:01:
a4:93:2c:48:9e:60:0c:bc:91:0b:ea:2a:91:8a:e2:
69:5a:02:ab:04:47:66:c0:e9:07:66:75:67:3d:17:
31:85:9e:5d:77:26:32:96:71:90:d4:a5:85:0b:e5:
04:c3:70:71:3e:21:40:7e:e4:aa:52:af:0d:36:2c:
2d:06:75:4b:bc:f6:b5:f8:2e:3a:5b:aa:49:a7:f1:
87:c6:e8:40:58:73:d6:75:91:89:44:bd:73:21:84:
83:db:44:b9:2f:41:ac:f7:14:9d:d5:e7:b6:a5:01:
0e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:99:56:B3:88:9E:18:A9:0F:88:0D:53:D8:90:97:7D:70:22:97:75
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9b:e0:6a:a2:46:fa:bb:f9:20:8f:10:b5:22:69:89:20:97:
a2:c8:82:3f:50:a1:88:ba:c8:81:16:8a:79:d8:00:c2:27:6a:
6f:c9:0d:62:d0:5c:73:4e:43:f0:19:43:81:d6:38:72:f0:65:
2d:51:2f:6f:50:15:d0:2e:d1:49:f7:c4:46:ac:75:6a:cd:da:
f2:e7:8a:5d:ab:d2:3d:63:e8:5a:ae:cc:e7:41:9a:23:1d:c5:
59:18:f4:6e:0e:b0:ec:38:20:b2:ff:34:0d:ad:f5:9a:b6:c6:
6c:4a:28:3e:17:66:ac:56:89:50:de:7a:43:21:8d:a5:a3:bf:
1d:55:d1:61:07:6e:e3:b3:98:de:af:2d:88:b1:59:e4:9d:9c:
6b:51:51:de:6d:91:c1:55:8d:a8:9d:12:37:2e:e6:62:30:49:
ef:8e:a5:b0:e7:2e:f6:ff:7e:22:c3:e5:72:f9:94:e6:27:f2:
ac:3f:ef:8a:c5:55:3e:af:ce:a8:08:3c:0b:4a:7d:81:75:94:
e5:8f:bb:e5:d4:5c:5d:93:e1:d1:05:53:50:78:53:05:13:c3:
04:99:4c:51:7f:6f:33:2d:b5:a3:ee:58:e9:23:5e:45:8a:70:
1c:8f:8f:d7:41:df:fd:7b:56:31:6b:ce:fc:cf:cf:f8:84:0b:
89:d0:6c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:13 2025 by rpki-client