Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: WxMkSlrRlhZn2jvJmgX8pMD5YLokP9XgKzTpc8WtAB8=
Subject key identifier: 89:52:74:00:36:B3:9A:DC:63:0C:F6:CF:4A:CB:C1:E3:12:7A:18:8A
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 01977075AAF141FFA19FDB4E41F7E4B3D50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 22:00:49 +0000
Manifest this update: Sat 14 Jun 2025 22:00:49 +0000
Manifest next update: Sun 15 Jun 2025 22:00:49 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: mjXJ2dA9Taf7H9Sev2mspD5nk8n8UimOv00yVKp2bo0=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:aa:f1:41:ff:a1:9f:db:4e:41:f7:e4:b3:d5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Jun 14 22:00:49 2025 GMT
Not After : Jun 15 22:00:49 2025 GMT
Subject: CN=8952740036b39adc630cf6cf4acbc1e3127a188a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:4b:a8:0d:0d:58:56:87:38:42:bd:fb:ac:
75:3a:47:df:f3:b5:bb:c0:18:92:58:d5:a9:28:ef:
b5:93:04:c3:fa:77:f9:f7:16:58:93:71:4e:6d:4d:
90:ce:ec:95:a3:04:a2:fe:37:17:3b:59:55:fe:db:
65:fc:38:7a:66:58:4d:4c:c2:5b:d7:ae:6a:a0:ac:
6f:24:7e:af:0c:05:82:d5:ca:08:14:76:65:ed:62:
17:47:c2:a8:c5:cc:95:4b:60:9d:49:8a:3b:cb:31:
fa:26:a5:ec:b4:f4:1c:0a:79:d9:a7:55:4c:bd:bf:
1f:7c:cb:d6:dd:cc:48:aa:1e:6b:9d:c5:59:2c:d2:
98:1a:c9:7a:23:79:31:d3:20:6b:51:e7:eb:99:ae:
04:92:0c:0b:54:70:62:b1:b2:62:ab:19:6d:13:ec:
a0:48:e1:99:30:f7:b3:11:05:93:e6:c8:8e:60:16:
d9:af:34:4d:ef:b4:5c:09:eb:b7:ca:80:bc:61:da:
24:dd:cc:ac:09:5f:85:24:3b:9c:a8:ea:7b:ba:84:
52:39:87:a6:a9:c0:c7:77:00:fd:6e:e2:99:e3:43:
97:b0:92:43:9e:87:9d:35:e0:54:b4:6b:03:f6:a8:
40:35:3b:0a:f3:8c:f9:5d:a9:45:84:33:ef:3a:26:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:74:00:36:B3:9A:DC:63:0C:F6:CF:4A:CB:C1:E3:12:7A:18:8A
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c0:78:b7:b3:59:35:01:bb:b6:17:40:c0:7d:ae:58:83:7c:
3b:65:64:20:54:63:7d:e4:bd:07:4a:57:84:7c:75:7f:58:49:
89:2e:26:4e:89:4a:2f:8e:70:e1:82:5e:e3:f7:ec:9f:39:d3:
a0:fe:c0:67:ac:7e:51:6d:29:8d:49:2b:c5:c6:17:ab:09:2e:
9d:db:be:ad:a7:c3:47:23:96:f9:d7:ce:84:96:41:60:0c:38:
ca:9c:88:86:3a:29:3e:6a:4a:c0:31:88:2d:cb:62:ee:f6:bd:
6b:0a:4d:5f:87:35:65:dd:a5:6f:b9:b3:92:1d:59:57:99:14:
08:38:f0:44:c4:30:09:f2:94:ac:e2:a4:db:ac:f8:a6:5c:3d:
c2:1a:de:4a:c9:9d:d4:0e:8a:ad:50:18:cf:d9:a2:3a:83:77:
b7:97:53:98:f6:50:8d:08:bd:76:35:57:0b:9d:6e:aa:27:82:
51:3d:fd:a4:e3:d4:8b:a2:42:b1:43:cd:a8:de:38:76:55:9d:
0b:a4:e7:22:a4:65:91:49:7f:7e:c3:38:3f:9e:17:0c:bc:c0:
3d:ff:06:6c:24:fc:93:48:b7:6e:13:13:a4:d6:71:e3:12:0e:
34:01:44:84:c7:e8:75:da:da:f0:98:57:68:a5:52:8b:f5:93:
38:9c:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:07:06 2025 by rpki-client