Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: RioFA3ODSehE42wcZ6pBmprhzKwFXFI+NcSCW8i1GKg=
Subject key identifier: DF:11:BB:A0:7D:E8:99:5F:89:06:0A:C3:98:89:6F:4E:54:56:D3:D6
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 01976C988E59729F829B8FA3A3A50D28E47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 04:00:26 +0000
Manifest this update: Sat 14 Jun 2025 04:00:26 +0000
Manifest next update: Sun 15 Jun 2025 04:00:26 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: lAbe7zzYqXpjesctbEbw1mijGpjiZqqJ1N+iHX6Xz3Q=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:8e:59:72:9f:82:9b:8f:a3:a3:a5:0d:28:e4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Jun 14 04:00:26 2025 GMT
Not After : Jun 15 04:00:26 2025 GMT
Subject: CN=df11bba07de8995f89060ac398896f4e5456d3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6b:d8:4c:37:72:50:3c:9e:df:10:c1:d7:25:
5a:0d:ca:13:ab:76:9e:e4:04:09:a5:19:a8:5b:03:
e1:10:f5:fe:74:a6:85:b8:57:02:5e:10:2e:48:a2:
11:43:03:cf:b8:cf:a2:69:ba:0f:dc:d0:84:df:cb:
91:d1:51:86:48:cb:80:6c:e0:ad:fb:8c:4c:ad:89:
54:a2:10:9d:a6:42:74:a5:86:13:f5:35:7d:9d:30:
8f:c9:12:3f:85:81:db:81:32:09:49:07:c8:13:86:
f2:9b:28:78:7d:82:50:b4:ee:ce:65:3c:83:60:ad:
5a:f3:a6:20:e5:1a:85:92:76:1e:01:f1:d0:88:85:
e0:e2:5a:a2:ea:91:ee:02:73:c6:bd:74:2a:0f:60:
46:25:34:e9:bc:99:85:60:a7:05:a4:48:f7:bb:19:
57:83:10:e2:7c:da:8b:12:a7:1c:38:7a:0e:c3:73:
4f:04:fa:6b:5a:db:39:4f:ba:c1:ec:2c:8d:42:b2:
7a:2a:ed:25:01:ed:f6:7e:6c:51:ad:66:b0:85:9c:
eb:50:8b:22:49:a5:03:b0:53:32:12:0f:04:82:b9:
20:34:08:5d:32:61:f4:bb:f5:2b:71:cd:e3:f7:71:
92:be:8d:d4:f6:7e:da:41:bb:4a:bf:35:b3:43:7d:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:11:BB:A0:7D:E8:99:5F:89:06:0A:C3:98:89:6F:4E:54:56:D3:D6
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8d:aa:d6:3b:57:e3:b6:c1:20:06:ce:2e:c9:e0:f0:e3:ab:
57:e4:91:fb:a1:70:0b:b3:78:f7:4d:31:ab:13:a8:ae:d5:4b:
8f:1b:30:72:3c:ca:c1:e8:6a:d8:20:81:76:3d:de:b8:b9:98:
81:5f:92:5b:71:55:14:06:d6:85:f2:02:25:4a:13:e7:fd:21:
2b:e7:d5:6b:50:b9:38:50:10:a8:0d:bf:e7:af:37:ec:cd:dd:
6d:6d:16:6f:0b:65:f5:1d:a2:1b:ae:a4:40:49:2e:a0:77:f6:
6b:58:90:c1:07:c5:24:18:28:26:f6:9f:10:77:8e:1c:04:03:
fa:74:dc:7a:61:5c:b8:72:aa:a2:90:32:de:6d:fd:9a:95:f2:
6a:27:7d:ad:22:cc:ee:62:60:88:9d:60:9c:dd:cf:e7:8e:dd:
6b:78:fc:26:7e:1e:ad:69:4e:02:ae:8c:e8:f2:c5:9c:ad:e3:
6e:59:6b:88:b9:b1:e0:2e:1a:3c:4c:4f:6c:90:b9:34:c8:60:
63:47:5d:ff:27:37:b4:e4:80:f8:d9:6b:da:ec:50:ee:02:96:
8b:19:b8:d4:84:3a:d8:ff:a3:87:7b:8b:ee:73:ec:fc:09:67:
4e:ed:70:02:40:90:26:a8:e4:ef:08:57:76:3b:90:7b:65:dd:
39:5c:ad:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:34:26 2025 by rpki-client