Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier: l6d0FrGBaf2aNz0B/88VJxi+EM35P+K4/rUnMqkpNTE=
Subject key identifier: 49:63:5F:3E:0E:ED:A0:0E:D1:1B:48:6A:04:B5:48:7E:34:4A:F5:A9
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 01975CEEFA4F4074B5B787216E46AD1588D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number: 1288
Signing time: Wed 11 Jun 2025 03:00:54 +0000
Manifest this update: Wed 11 Jun 2025 03:00:54 +0000
Manifest next update: Thu 12 Jun 2025 03:00:54 +0000
Files and hashes: 1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: /IpH7SADkbhFNCRuaxpp/AukzF5BYQJv7Y9DcEYL8fU=)
2: ZrBT-LTKncMhVmd9eNZtlw1O86k.roa (hash: tAbiS/EvHuSlDvoKxib2aD63z2PVHysvpp62xqOjuZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ee:fa:4f:40:74:b5:b7:87:21:6e:46:ad:15:88:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Jun 11 03:00:54 2025 GMT
Not After : Jun 12 03:00:54 2025 GMT
Subject: CN=49635f3e0eeda00ed11b486a04b5487e344af5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:4e:21:fa:22:18:31:74:c0:16:14:1b:f2:
6a:28:ca:81:87:6e:a4:32:ef:55:33:e8:7c:da:ed:
33:cd:62:4d:96:f1:45:00:db:49:98:c6:b3:54:c7:
c8:19:27:a3:eb:fd:49:a3:be:4c:06:b7:93:6b:d9:
f2:7b:7f:b7:0d:d8:e9:1e:33:02:0d:08:87:31:d2:
3c:e0:81:96:bc:a8:69:ce:58:03:68:9b:70:15:52:
af:77:a7:46:0f:68:f7:f6:af:62:48:b8:58:3c:06:
c9:6e:01:37:50:d5:e8:93:d7:14:79:1b:e6:a9:43:
d6:27:d7:27:96:41:32:ef:de:58:7d:aa:ed:03:d1:
1d:b8:f2:20:87:ab:5a:14:4d:87:dc:9c:c2:ba:9f:
fd:7b:47:91:a7:16:ea:9b:d1:1e:f3:33:c3:ba:5c:
ef:79:fa:93:e9:bf:bf:82:33:a0:6a:c8:fc:9d:91:
6b:0a:89:14:b2:d1:ea:d2:ca:10:98:76:f1:e0:84:
9d:ae:4a:97:05:c6:50:6e:8a:0f:94:1f:d7:df:e0:
44:8e:de:81:47:4c:f8:c2:b7:08:d7:28:ed:5a:2e:
0f:e7:4f:67:e2:bd:d5:f3:2d:a6:3a:86:f8:10:e1:
8b:a0:a6:29:d4:e4:92:00:e8:b2:31:a0:ac:86:d6:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:63:5F:3E:0E:ED:A0:0E:D1:1B:48:6A:04:B5:48:7E:34:4A:F5:A9
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9c:24:f2:18:59:93:38:87:54:9f:4c:87:47:83:36:cf:2b:
0a:4f:25:cd:f0:ed:10:2b:8f:04:bf:00:2a:0a:d0:e3:48:43:
36:75:55:7e:18:ad:58:91:0f:a5:63:97:a0:22:84:fa:fc:e5:
d2:fa:08:21:6d:55:5f:54:80:f4:a3:c3:e0:bf:6a:d1:f4:07:
c0:19:69:86:af:51:54:d5:4f:ba:4d:c2:27:37:2a:5b:0e:72:
c6:0d:f6:c7:78:a5:f9:7c:40:72:6b:e9:f6:8d:05:23:d1:cd:
b5:49:ab:7f:a3:d1:be:91:03:bb:83:fe:14:45:b5:08:fb:0f:
77:ef:9d:c2:53:8b:22:9d:8c:c9:f7:2d:8e:d2:93:3e:b0:a5:
d0:df:bb:07:45:b0:0c:a6:ed:ce:6b:64:60:09:8d:91:de:2d:
62:81:af:8b:1c:86:79:75:35:fc:31:f6:f2:4b:80:0f:18:76:
0a:90:42:01:6d:05:13:aa:f7:39:e4:09:f4:bf:97:4b:14:23:
85:c5:1b:2d:9b:96:21:80:83:6a:fa:a0:61:f8:62:22:0a:6b:
88:51:dc:b8:4a:30:a3:68:74:88:ab:07:52:44:70:52:b9:da:
99:94:38:52:80:aa:d0:f8:1d:8d:0c:6d:3c:97:ae:f8:35:81:
6c:67:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:04:27 2025 by rpki-client