Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: Sgok6zarB4EJ45s0PnLeO/Z6pW5f/g1PZZhh5XHWTDs=
Subject key identifier: D7:85:00:66:E1:3D:5F:CF:DD:66:4D:8E:48:FF:27:D7:43:92:90:E8
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 0197499F1B8EB6A7D2B53640233468D3E717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0A64
Signing time: Sat 07 Jun 2025 09:00:53 +0000
Manifest this update: Sat 07 Jun 2025 09:00:53 +0000
Manifest next update: Sun 08 Jun 2025 09:00:53 +0000
Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: Rj7oOSOHnPIg2qnQywZPnxo84FTxGMS5hLTwG3SXmIw=)
3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:1b:8e:b6:a7:d2:b5:36:40:23:34:68:d3:e7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Jun 7 09:00:53 2025 GMT
Not After : Jun 8 09:00:53 2025 GMT
Subject: CN=d7850066e13d5fcfdd664d8e48ff27d7439290e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:43:ef:77:6f:64:17:08:95:47:2c:a3:73:
99:85:97:08:bf:48:5b:f7:e3:3d:b6:ea:d0:57:d5:
19:40:75:42:d1:b9:86:ec:05:24:9e:14:e3:d4:7b:
12:41:a5:ad:dc:ea:c8:3b:a8:3b:57:ff:0c:15:20:
e3:76:4a:13:0e:9b:1b:92:d6:6a:ee:83:24:94:12:
2e:d0:d4:d0:f7:a0:a7:fc:09:95:a8:32:92:63:b1:
ca:40:31:94:20:f0:6c:6c:c3:ba:0e:91:88:e5:31:
56:20:77:a7:5e:3e:b8:59:47:da:35:d3:d1:78:fd:
90:af:b8:d2:f2:d6:8c:07:b4:c9:a7:5e:ba:5c:9d:
0d:35:98:8c:54:f0:aa:1b:6a:99:db:5e:9d:e1:4f:
17:3e:aa:e9:6f:6c:8b:d0:b5:fa:34:ad:61:4a:a7:
05:fc:53:89:42:ee:f5:36:66:3b:ab:fe:b8:16:f6:
44:f8:e8:56:8b:bf:4b:12:45:08:77:6a:c8:d4:a8:
5d:a3:ad:11:08:e4:68:68:40:25:d4:60:b4:1f:c1:
b9:b3:a5:29:2e:40:87:63:db:d2:fb:6c:8d:b3:45:
0d:19:72:bf:fe:81:85:75:79:a0:3e:2f:3a:f6:da:
7a:ab:81:67:78:7d:85:97:32:05:9a:46:6e:a0:23:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:85:00:66:E1:3D:5F:CF:DD:66:4D:8E:48:FF:27:D7:43:92:90:E8
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6b:3d:98:ef:d4:ab:73:7a:b1:1d:ed:88:f1:39:23:f2:14:
c7:ef:c5:68:79:9c:b4:60:00:28:7c:14:a0:ac:75:ac:10:1d:
00:76:12:9e:09:aa:12:2b:43:cf:20:3a:cc:57:25:a5:b2:c5:
1d:a1:90:2c:39:e9:55:a9:4b:7a:bc:60:2a:85:8e:42:39:03:
b7:d1:0a:fb:a7:a1:68:c8:77:7a:b5:0f:5c:67:da:51:d9:41:
ee:f8:0d:8d:0f:8d:5f:81:68:1c:d7:c7:8a:5e:16:02:1a:eb:
eb:b6:95:61:81:7b:f4:ae:2b:09:b7:55:48:d3:1d:a9:da:d5:
30:ee:6c:c0:b0:00:53:e5:47:93:34:1a:e0:78:31:04:a2:53:
f3:d3:70:9d:75:bf:8a:d5:e8:72:05:55:a0:70:62:de:33:db:
7e:06:99:28:59:bf:a3:c5:3d:b2:23:c6:01:19:ad:b4:5e:70:
ea:b9:d8:4b:d9:aa:b1:82:7f:8f:97:e5:2a:4a:c5:19:cb:ba:
79:ba:09:b7:14:0e:b6:c7:72:9a:03:41:f9:fe:a8:68:ca:94:
df:fe:89:5c:4f:16:50:0a:b8:c8:fd:39:f8:78:9c:d0:97:42:
33:4c:04:03:b9:93:56:76:e8:b5:39:c7:99:0d:b7:72:53:12:
7e:88:f3:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnxuOtqfStTZAIzRo0+cXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODc3ZjRjZTBkMzYxNjE3NzI0ZDRiMjg5YTg5MThjNWM2
ZDcyMmQwHhcNMjUwNjA3MDkwMDUzWhcNMjUwNjA4MDkwMDUzWjAzMTEwLwYDVQQD
EyhkNzg1MDA2NmUxM2Q1ZmNmZGQ2NjRkOGU0OGZmMjdkNzQzOTI5MGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBdD73dvZBcIlUcso3OZhZcIv0hb
9+M9turQV9UZQHVC0bmG7AUknhTj1HsSQaWt3OrIO6g7V/8MFSDjdkoTDpsbktZq
7oMklBIu0NTQ96Cn/AmVqDKSY7HKQDGUIPBsbMO6DpGI5TFWIHenXj64WUfaNdPR
eP2Qr7jS8taMB7TJp166XJ0NNZiMVPCqG2qZ216d4U8XPqrpb2yL0LX6NK1hSqcF
/FOJQu71NmY7q/64FvZE+OhWi79LEkUId2rI1Khdo60RCORoaEAl1GC0H8G5s6Up
LkCHY9vS+2yNs0UNGXK//oGFdXmgPi869tp6q4FneH2FlzIFmkZuoCOppQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeFAGbhPV/P3WZNjkj/J9dDkpDoMB8GA1UdIwQY
MBaAFGGHf0zg02FhdyTUsomokYxcbXItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEt
YzcyMjIxN2U1M2I2LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEtYzcyMjIxN2U1M2I2
LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWs9mO/U
q3N6sR3tiPE5I/IUx+/FaHmctGAAKHwUoKx1rBAdAHYSngmqEitDzyA6zFclpbLF
HaGQLDnpValLerxgKoWOQjkDt9EK+6ehaMh3erUPXGfaUdlB7vgNjQ+NX4FoHNfH
il4WAhrr67aVYYF79K4rCbdVSNMdqdrVMO5swLAAU+VHkzQa4HgxBKJT89NwnXW/
itXocgVVoHBi3jPbfgaZKFm/o8U9siPGARmttF5w6rnYS9mqsYJ/j5flKkrFGcu6
eboJtxQOtsdymgNB+f6oaMqU3/6JXE8WUAq4yP05+Hic0JdCM0wEA7mTVnbotTnH
mQ23clMSfojzZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:03 2025 by rpki-client