Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: M24SI6vvMLjuYMCRRQZKq3gAGhXordY/hZ9Qzf4eW2k=
Subject key identifier: 59:90:46:1A:BD:0D:C8:EF:5E:8A:98:E3:94:3D:9C:08:2C:5A:C3:AE
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019765BAAE79623BE3FCD1EB17C56BD62CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 151D
Signing time: Thu 12 Jun 2025 20:00:22 +0000
Manifest this update: Thu 12 Jun 2025 20:00:22 +0000
Manifest next update: Fri 13 Jun 2025 20:00:22 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: ps+MQEI6ujdBIhk8jqO482g82ftG91ZjZxbe57npbIw=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:ba:ae:79:62:3b:e3:fc:d1:eb:17:c5:6b:d6:2c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Jun 12 20:00:22 2025 GMT
Not After : Jun 13 20:00:22 2025 GMT
Subject: CN=5990461abd0dc8ef5e8a98e3943d9c082c5ac3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:51:60:ab:45:cf:e3:21:78:3e:8a:73:d1:
b1:8d:2d:2a:d6:f8:28:24:b9:5a:bb:36:31:2e:c7:
51:96:95:a5:7a:12:c8:36:f0:8f:c4:b4:95:ee:7f:
24:93:d8:0c:14:74:8f:f5:a6:2e:b5:0e:27:5c:fc:
44:98:4d:ec:6f:ba:0e:6b:3e:5b:28:75:ba:c5:ed:
7f:1b:e9:bb:ad:57:81:19:96:6e:79:40:14:df:f9:
32:8e:c9:b4:b9:c9:c8:ba:1e:bc:33:01:02:14:9e:
6e:6d:6e:aa:e3:9c:62:48:50:99:61:da:03:0d:1a:
cf:41:5d:d6:7d:bb:ef:e7:f7:e4:69:b5:f1:ba:5c:
0f:81:74:da:ce:b2:1e:ce:16:43:dd:12:3f:ae:a9:
c4:15:53:85:64:55:30:c6:4d:35:7d:90:7a:4e:49:
a4:ff:40:4a:7d:fb:73:b4:cf:e5:df:57:b7:94:cc:
2d:fb:82:a7:cc:50:fe:af:bc:18:36:2b:47:eb:bf:
be:ed:1d:81:5d:1a:4f:df:01:92:d7:6d:d6:1e:64:
74:d9:00:2d:96:59:44:f3:d3:26:b8:2d:8b:3b:01:
f2:a3:bd:d2:28:80:c8:a1:e6:b4:24:e6:17:65:97:
2e:9e:ca:25:bc:a7:d2:a4:5d:de:9c:d0:14:a7:bb:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:90:46:1A:BD:0D:C8:EF:5E:8A:98:E3:94:3D:9C:08:2C:5A:C3:AE
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b8:89:58:42:80:c9:a8:8f:24:97:ab:8f:cb:94:04:f3:7b:
da:32:a6:c7:c9:a5:3a:f1:32:1f:9c:38:b7:41:9a:ec:4a:4a:
97:2a:f2:ba:53:20:5f:af:08:1d:2b:80:b8:80:33:b0:9b:81:
45:70:0d:fe:21:eb:f8:fd:f1:e6:8d:0b:d0:f0:94:de:3f:26:
e7:e7:de:7c:2a:54:7b:59:bf:5e:49:3c:d9:cc:66:cf:e6:e4:
e5:c7:ad:09:97:ee:0b:a2:1c:68:18:18:3b:ca:00:78:55:88:
b8:4e:97:3e:1b:d5:64:b4:ca:5c:d5:c8:16:c4:7e:65:46:78:
92:e7:95:cf:ea:e9:ce:8e:c6:42:00:59:c2:fb:80:53:c3:b2:
a7:c4:98:df:e6:1a:b9:77:69:a2:a2:65:ab:0a:da:7e:29:2b:
a2:da:f6:2b:7a:6b:6d:6d:a0:8b:8f:ff:25:c9:d9:52:9d:66:
0b:94:e8:e2:b7:5e:b6:a3:fc:83:64:89:ce:5c:1e:c6:86:db:
37:52:89:ed:49:00:0e:bd:e0:ac:5f:43:b7:a8:14:94:1c:fe:
9f:8a:01:91:b2:3a:77:25:d2:8d:3c:ae:7f:90:22:bb:65:3d:
25:1e:63:0d:d1:0b:8f:4b:f1:e8:3f:34:59:45:bf:38:af:ed:
5f:d6:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:29:23 2025 by rpki-client