Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
File: yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json)
Hash identifier: ejtBt9s9odmekt0q/Wgh0rvPqtY0CeLOilOgenG6qvs=
Subject key identifier: DD:6C:C3:31:63:BE:9C:91:35:7A:C7:F6:CE:E5:37:86:D3:F0:F5:52
Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29
Certificate serial: 019752D8EBDAF35A82382772A955E64252C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
Manifest number: 10C5
Signing time: Mon 09 Jun 2025 04:00:37 +0000
Manifest this update: Mon 09 Jun 2025 04:00:37 +0000
Manifest next update: Tue 10 Jun 2025 04:00:37 +0000
Files and hashes: 1: juTNVsKtR118cxI6QcWd767caRM.roa (hash: MCsaWupCkvlIsE0i3wi2ave3G1GEJt2KTaWMIAFFXxI=)
2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: hNwi0tlo8w8LOZhM9I3cMOhh/sTgt/Yc+A7lXLU+lGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:eb:da:f3:5a:82:38:27:72:a9:55:e6:42:52:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29
Validity
Not Before: Jun 9 04:00:37 2025 GMT
Not After : Jun 10 04:00:37 2025 GMT
Subject: CN=dd6cc33163be9c91357ac7f6cee53786d3f0f552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:54:d4:c0:b1:93:37:74:f6:9f:ba:af:24:1d:
6e:c1:5f:3d:39:58:a7:be:0a:96:fa:41:ca:94:ba:
91:89:0c:4e:a4:60:bd:50:32:5c:78:dc:21:51:10:
fd:fd:c1:8d:62:23:b2:0e:97:f7:26:87:e0:aa:94:
03:51:43:bd:09:a6:7d:3c:be:50:17:bf:aa:28:7b:
fb:1a:67:4b:1f:c4:52:4c:9c:37:ba:25:ad:4a:0c:
e4:89:78:c9:d9:a6:a0:24:a6:24:eb:8d:64:95:70:
f9:36:95:8d:c3:82:12:aa:0e:02:9f:4b:75:94:68:
33:19:ce:de:c7:6d:f8:39:67:1b:22:c3:9a:27:b6:
e2:42:d2:4a:49:18:c6:12:34:1f:4c:67:65:45:de:
b6:60:d5:aa:12:27:9e:c9:e7:83:06:e3:01:b9:9d:
b7:62:7a:06:a4:da:66:71:3a:11:a5:70:65:78:e5:
89:a9:59:9c:75:1b:24:70:ab:36:ec:4b:ee:74:aa:
7d:ab:f1:24:3a:40:29:5c:41:8e:6d:ea:17:5c:7a:
b2:9e:2b:b6:b9:04:fe:87:de:77:44:a3:34:32:ba:
ac:0d:64:79:2a:9f:ae:c3:ed:07:96:39:e7:a3:8b:
a4:43:9f:cb:b4:f7:ca:a0:f7:d5:20:d0:72:66:b1:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:C3:31:63:BE:9C:91:35:7A:C7:F6:CE:E5:37:86:D3:F0:F5:52
X509v3 Authority Key Identifier:
keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:27:3a:80:d9:a4:21:62:8c:5d:a9:e4:ac:c6:43:a3:ac:42:
ab:07:bf:9d:bb:52:b8:e7:3d:12:38:9a:76:da:85:41:a8:5e:
71:2e:b7:72:d4:ef:1b:99:3e:db:2a:bd:76:4d:36:08:91:c3:
bb:72:b2:7c:89:6b:c2:c9:35:00:f4:17:bf:e9:28:4e:cc:67:
92:cb:c8:3b:e2:36:a9:ac:2e:1f:ab:b8:b5:68:b6:58:31:24:
23:d6:3f:ca:f6:cc:85:20:fc:2f:d4:d5:d5:f1:2c:21:1f:08:
e8:be:41:b3:4f:d5:a8:00:b7:05:f3:01:6d:0b:45:05:40:01:
f9:91:c9:01:df:d0:e5:06:38:4c:cc:bd:fc:a3:89:3b:30:0f:
97:51:cd:6c:8f:c7:11:96:bc:75:58:23:e3:5c:dc:33:47:44:
e6:10:7c:af:c3:9d:36:f1:f7:90:57:f2:bf:28:57:44:7d:2c:
9e:56:5d:bd:eb:ba:d3:bb:bf:23:c8:29:cb:37:8b:c8:0c:ab:
d4:e2:25:7b:47:36:fb:77:1c:75:10:50:a9:d2:db:8f:39:9b:
a4:2f:0c:a0:81:08:15:cb:53:a6:2c:86:bf:1b:5d:ae:f1:04:
d3:17:7c:50:df:9a:3a:b6:9a:3f:1c:6b:55:a6:8e:d3:46:ae:
2b:33:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:30:45 2025 by rpki-client