Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier: 9OHS8fzsglRt1k6h16F2tsJo1LRHmMr34acw2DVUEmk=
Subject key identifier: B6:94:6C:1A:C1:B9:ED:1D:02:7F:DC:54:25:DE:0E:A3:C2:98:F7:D4
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial: 01975836610BE9F7E568B295E6DBE841B429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number: 11
Signing time: Tue 10 Jun 2025 05:00:48 +0000
Manifest this update: Tue 10 Jun 2025 05:00:48 +0000
Manifest next update: Wed 11 Jun 2025 05:00:48 +0000
Files and hashes: 1: IqlpwJ2xW0fAs8ZGPBfSTtIDhwE.roa (hash: qbO1Ww6u5GvjQ0O8Z6mDFqL7l1gHc63dxnum3Lg38lg=)
2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: /OV6EhUJWr27c8Zxpgvb3bI5YoBrV+DA0wnlfFij9iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:61:0b:e9:f7:e5:68:b2:95:e6:db:e8:41:b4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Validity
Not Before: Jun 10 05:00:48 2025 GMT
Not After : Jun 11 05:00:48 2025 GMT
Subject: CN=b6946c1ac1b9ed1d027fdc5425de0ea3c298f7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:ad:c3:64:a8:47:a4:af:1a:81:5b:f6:cc:
b9:d3:e1:5d:f1:9e:27:68:6e:85:1e:70:e5:bb:57:
b4:43:fc:b3:1a:1e:c8:49:11:11:ab:a7:8d:f3:3a:
66:44:13:5b:8e:39:94:91:fa:6a:d5:c6:8f:5d:5c:
15:ce:29:40:27:d3:a2:99:f7:c1:15:8c:fd:bc:99:
71:32:29:28:62:56:0c:6e:87:ec:7f:fe:51:38:83:
13:eb:7e:a1:4c:5c:91:23:45:9b:f1:08:0d:19:c5:
15:e5:e6:9c:49:6b:3e:35:4d:4f:1b:6a:7d:8d:da:
c0:ce:4d:f9:71:21:c4:4c:5e:23:3e:ba:48:e8:c6:
59:38:73:f8:49:1e:f3:74:70:e5:28:2b:f0:04:26:
b8:a2:2d:51:2e:0e:cd:95:e6:20:dd:bc:9b:55:f2:
ff:bd:08:18:25:57:1a:06:6b:3c:45:32:2a:49:d5:
5f:8c:60:60:b6:07:70:3e:e6:18:bd:94:75:26:ec:
a9:e8:f0:23:02:4b:32:30:b5:7a:1e:89:47:ca:f3:
08:18:0b:6f:a6:9b:66:fd:2c:f9:58:5c:fd:86:cf:
a9:9f:12:e0:7f:92:b6:f3:a7:aa:91:af:66:93:d1:
d1:0a:73:e9:3a:0f:84:27:31:69:51:6c:dc:c0:dc:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:94:6C:1A:C1:B9:ED:1D:02:7F:DC:54:25:DE:0E:A3:C2:98:F7:D4
X509v3 Authority Key Identifier:
keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d4:69:65:c1:86:f5:95:58:aa:f8:fb:40:db:35:ea:0f:e7:
bb:40:ed:be:bc:0b:24:89:cb:0e:a2:ec:d3:16:1a:f6:d6:97:
d0:15:b7:91:19:40:fb:06:c3:68:54:b8:14:84:ed:fb:92:44:
20:a9:ca:66:de:9b:0a:79:1e:d3:99:8b:7f:fd:83:78:f1:cf:
38:a1:f3:4d:a8:f8:21:7a:b4:34:25:2a:69:98:97:6e:b2:72:
cc:76:c8:93:27:ae:a9:51:28:6c:14:00:a9:be:0c:b0:34:b1:
9d:e4:6d:2f:68:6b:42:b6:ea:94:e3:b5:60:3b:18:18:aa:c5:
e4:fe:1b:ab:7a:63:9c:6e:20:1b:df:3b:dc:92:e1:e9:26:5a:
00:57:93:67:c5:98:fb:b7:f8:e4:a8:f8:36:df:a1:68:95:02:
7d:5f:50:dc:b2:09:e3:81:a7:9a:0d:b9:dc:4e:8d:38:90:f1:
72:64:75:03:c8:bf:46:c2:7d:1b:7d:25:c2:b3:4e:13:c7:95:
2d:a3:22:8b:45:dd:4d:d5:59:ee:ad:52:c3:2f:73:41:07:7c:
be:1c:0b:db:a9:89:75:4b:67:58:1d:59:04:06:b1:ea:1c:7b:
b1:da:2b:e0:68:d7:ae:2b:27:41:77:fa:2b:b7:60:3d:d7:45:
4b:b2:9e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:41:15 2025 by rpki-client