Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: JWRyP79OoNUd7o6gJMCwpKwP972K9QmeGOzdQrqIMqI=
Subject key identifier: 9D:F7:76:33:E8:63:0C:DA:9B:48:4C:C9:68:5E:3D:78:4C:3D:1F:B3
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 019741AE9FB5E66E2BBAB3CAEDE592B423CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 03A0
Signing time: Thu 05 Jun 2025 20:00:52 +0000
Manifest this update: Thu 05 Jun 2025 20:00:52 +0000
Manifest next update: Fri 06 Jun 2025 20:00:52 +0000
Files and hashes: 1: 8tq6vUxikXVafkdQNOumeQjFfpc.roa (hash: UpmsMokgr2OHdk8MVVsUZdaiVZYh5g21JKYfdCc4ZA8=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: 1m/eCxJduJUy+1C0cTCB07y32/SwOjse8eaZPV71pXM=)
3: j89ASOslTb0sA8qPaNCnvdarbHI.roa (hash: pTH6+0WVaBMdNBqgh83yrPXmlHTEaPDbAotvSzt0CT4=)
4: vSrVfCiFhwuThaFge_HlQGTrHjk.roa (hash: Bc63krCzWLaf7LOD/k916HgQOiH2H7M6asbeefYBGos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:ae:9f:b5:e6:6e:2b:ba:b3:ca:ed:e5:92:b4:23:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Jun 5 20:00:52 2025 GMT
Not After : Jun 6 20:00:52 2025 GMT
Subject: CN=9df77633e8630cda9b484cc9685e3d784c3d1fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:6a:fe:47:0a:36:6f:27:52:90:79:84:ee:
a7:2b:6a:17:f8:65:14:b8:bf:52:33:ac:e7:70:74:
80:e0:f3:81:5c:6d:6e:57:8b:69:89:da:67:2e:14:
75:43:2d:6c:98:fa:c4:13:0f:c5:b2:48:f3:ac:c6:
22:52:69:af:23:63:b9:6b:20:4a:41:7b:11:a0:3f:
37:e9:92:ce:b4:dc:bc:42:87:a0:d4:8d:83:b6:4c:
af:bb:ce:22:d4:85:16:6d:88:b3:4a:45:c5:02:00:
fa:23:15:ea:ee:a6:5f:42:04:c3:1c:95:23:61:14:
3a:f8:89:4b:bd:f3:9a:ec:d5:12:b9:4c:60:82:f4:
f9:2e:60:62:1f:2a:3a:7b:89:cd:ec:be:b5:5c:fa:
2f:2b:4c:9e:15:30:22:7f:cd:54:4c:a6:76:57:79:
45:3d:6f:73:7d:3f:0a:e9:ff:21:ff:1f:36:da:b7:
39:26:fa:d0:02:7f:4a:bb:52:bf:a3:75:cb:b7:d6:
1f:7d:cc:68:d4:ae:b1:70:bf:14:0d:53:1c:37:eb:
ea:aa:c1:fa:b0:32:a0:bc:55:ab:5a:d8:c1:60:ba:
8e:64:a3:78:01:1a:5d:47:85:f3:73:14:25:d5:8f:
24:28:cb:87:dc:b6:b0:d7:82:1f:75:f4:22:b2:fd:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:76:33:E8:63:0C:DA:9B:48:4C:C9:68:5E:3D:78:4C:3D:1F:B3
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:86:03:94:2d:41:31:5f:31:e2:51:83:2f:01:2b:30:39:fa:
d2:45:4d:95:9f:53:9a:c1:26:91:a9:6c:8d:dc:fd:6e:ad:22:
42:27:ab:e0:c6:03:7b:06:97:2f:92:ac:42:5d:c4:e5:6c:f0:
29:2b:e0:23:83:88:cc:d7:0f:ba:22:43:2c:ab:6b:0d:0e:b6:
dc:75:40:2a:f4:0b:3e:0f:65:5b:f3:d3:d7:0d:d9:10:85:85:
eb:25:5c:d8:af:34:f0:2e:89:97:e1:15:3f:51:51:ca:ad:72:
8d:fd:d8:33:34:5e:77:69:3b:9f:0a:87:4c:7c:cf:05:56:17:
95:d4:0c:10:d7:73:3a:8c:f4:6d:5a:2b:1e:57:1f:90:51:55:
bf:32:16:bb:9f:aa:0e:1a:2b:bc:38:27:3d:1e:3d:33:ff:1d:
d9:84:cd:48:78:a3:8f:d9:a1:25:f3:74:33:62:f5:4e:05:9a:
d9:27:93:e2:dd:fb:39:7c:3c:b7:ff:63:64:6b:fc:c7:ec:24:
0c:66:36:fe:4c:e9:5f:72:28:3d:75:40:a3:b2:69:30:ef:0b:
13:1c:26:7f:30:53:7d:a1:b4:32:03:61:3f:5f:30:ea:21:d4:
7b:02:82:70:95:1d:8e:e5:56:9e:26:41:10:a5:35:f3:77:09:
e2:b2:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:11:58 2025 by rpki-client