Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier: x5VqpoqPX2swYdPT3sXyuN7QjuOD3qlOHwdM1d+Awm8=
Subject key identifier: 36:7F:10:4A:7D:BC:88:C2:36:3A:63:69:0F:3C:15:76:86:37:E2:8D
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial: 0197526B57E1455AFC69BE664FC96B9B37A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number: 0E
Signing time: Mon 09 Jun 2025 02:00:55 +0000
Manifest this update: Mon 09 Jun 2025 02:00:55 +0000
Manifest next update: Tue 10 Jun 2025 02:00:55 +0000
Files and hashes: 1: IqlpwJ2xW0fAs8ZGPBfSTtIDhwE.roa (hash: qbO1Ww6u5GvjQ0O8Z6mDFqL7l1gHc63dxnum3Lg38lg=)
2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: Y4PjVXw6DDmnCLEL16cbB6EzDUVoNP1TvUvlF1nhHTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:57:e1:45:5a:fc:69:be:66:4f:c9:6b:9b:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Validity
Not Before: Jun 9 02:00:55 2025 GMT
Not After : Jun 10 02:00:55 2025 GMT
Subject: CN=367f104a7dbc88c2363a63690f3c15768637e28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:c8:f5:b3:5b:87:95:09:a5:e5:48:cd:41:
d6:4b:b6:77:01:cb:17:8b:1d:49:ce:24:02:3e:4b:
d1:11:e4:86:cc:e0:7b:46:cf:c7:5b:8d:d0:ec:d1:
35:12:52:f4:5f:c7:dd:12:d6:15:6a:71:58:14:ba:
cb:c0:fd:b3:a3:80:0a:7c:8b:42:76:ff:5b:f6:9d:
16:cd:c9:66:ae:3b:0c:ab:ed:8f:7b:ef:bf:89:b5:
75:02:b7:2e:ed:14:35:fb:e7:52:42:09:96:fb:c0:
6b:0c:99:5a:31:0e:b7:06:54:5b:29:42:c7:1f:ed:
5e:06:c5:59:c6:aa:9a:86:3c:d9:51:2a:a2:ff:fc:
5f:8e:d6:f4:10:4d:c3:fc:da:4f:26:60:07:51:af:
3d:9f:97:d8:41:82:59:d8:84:f2:9c:5e:03:e3:94:
31:9c:ad:bb:0a:a6:f9:16:13:eb:d6:aa:ab:5a:4f:
c8:07:f0:1c:2d:4d:ae:cd:63:36:94:e1:51:d5:49:
7a:45:18:2d:36:29:98:3e:fc:95:90:8e:21:f7:c4:
32:27:41:c8:b4:1b:72:bf:cb:17:f3:7c:e2:4d:20:
ad:24:96:fc:3f:36:07:e9:2f:2e:c7:cd:41:24:17:
a5:18:fd:e2:0b:e8:d5:a5:80:9f:0f:32:1a:ed:6c:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7F:10:4A:7D:BC:88:C2:36:3A:63:69:0F:3C:15:76:86:37:E2:8D
X509v3 Authority Key Identifier:
keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d6:01:2a:7d:dc:31:d2:79:f5:91:b3:7f:6d:62:a6:67:ff:
47:70:a3:06:7a:5f:a2:12:19:d6:cb:f3:5e:3f:a1:42:1e:f9:
11:64:03:27:0b:8c:0e:ee:94:03:63:88:e5:d9:99:36:31:0c:
48:74:1c:ad:2d:08:90:14:36:4b:d0:ac:94:0e:e5:aa:41:15:
ad:54:6c:d7:38:1e:d7:11:c2:f4:8e:23:67:f7:94:a4:b0:88:
37:19:94:01:b8:d9:53:6d:2a:2f:5e:8e:db:f6:89:39:38:ca:
2d:44:50:b3:43:bf:bf:4f:9e:eb:2e:58:31:df:c4:2e:1c:66:
fc:5a:b7:e4:7b:2e:18:56:00:60:93:a6:72:21:f5:41:66:fb:
12:bb:ec:bb:bb:b4:7d:4c:49:3a:7a:2a:9a:9a:bb:03:ea:04:
29:a0:92:0f:dc:6d:c0:9d:24:b5:55:80:e4:10:a2:92:c0:ad:
f2:0b:20:78:45:fb:9c:c2:6f:70:b3:f6:f8:cd:45:d8:28:5c:
d2:30:4c:9e:be:74:b3:61:15:17:f4:96:b1:c0:e7:b7:f3:0f:
10:b6:4c:bc:d2:d2:05:4b:3b:d5:b9:c2:1b:5f:b9:bc:cc:3a:
04:b0:44:cc:20:4c:0c:41:5f:a2:5e:21:2f:ac:0e:c1:96:0e:
49:38:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:35:36 2025 by rpki-client