Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: AmJw8MX+RwVilxEoJjwlKitNIBzNfIBVLc9sO9WLEaI=
Subject key identifier: E0:7A:90:D5:DD:BA:FD:49:14:2D:11:B8:49:06:EF:D0:FF:2E:5E:48
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 0197715168F54E94847B79C685B205E15EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 0E77
Signing time: Sun 15 Jun 2025 02:00:50 +0000
Manifest this update: Sun 15 Jun 2025 02:00:50 +0000
Manifest next update: Mon 16 Jun 2025 02:00:50 +0000
Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
2: OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa (hash: Nbt+Vb6iqoAZa8JSy2lqdMELR5I1GGwPOjEC79BMqrA=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: L0T5TWser3cg3HaHpaU2DYQWJPRBpNBpXWgSeOlYwns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:68:f5:4e:94:84:7b:79:c6:85:b2:05:e1:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jun 15 02:00:50 2025 GMT
Not After : Jun 16 02:00:50 2025 GMT
Subject: CN=e07a90d5ddbafd49142d11b84906efd0ff2e5e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:30:fc:97:b4:e5:c0:e7:7d:31:13:03:88:
26:bc:8c:ea:21:08:f9:44:e0:d2:8f:7d:8e:a9:df:
bd:53:fb:bd:64:d2:43:85:49:12:20:53:3d:2d:cd:
f3:b0:0d:00:2a:73:05:da:0f:33:f5:37:c8:5b:89:
16:62:46:00:23:97:04:02:41:92:99:68:a3:9b:58:
34:81:68:b6:f1:35:9b:4a:66:e0:17:f4:84:b4:68:
af:60:c6:a5:75:95:64:73:8c:04:69:78:4b:ea:ae:
72:ee:a6:06:cc:30:24:1f:4f:8d:b5:28:c3:18:9d:
2a:7f:57:06:9e:80:86:27:94:f0:dd:cd:5c:38:a4:
de:41:bd:0b:6f:27:8e:69:d6:77:90:30:6d:fd:00:
29:4f:30:6b:f6:74:3e:ec:5c:c5:73:3c:27:fc:0a:
9e:cf:2e:68:af:3c:03:75:2d:43:fe:79:a2:50:26:
30:cf:ea:d0:e0:6f:e1:aa:15:a8:eb:d6:ed:39:e9:
67:a4:db:6f:ce:e2:9c:19:19:3d:87:94:bc:e6:3e:
83:00:b1:60:b0:90:a5:93:fa:9a:88:ea:50:16:ee:
c5:05:22:59:c7:9a:d0:9f:c1:00:c8:d0:0c:65:10:
f5:de:e7:dd:e7:79:23:97:4d:4c:30:dd:eb:7b:f9:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7A:90:D5:DD:BA:FD:49:14:2D:11:B8:49:06:EF:D0:FF:2E:5E:48
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:33:23:41:50:65:08:9b:37:39:96:55:c5:57:8c:8c:32:e4:
e6:a8:f6:66:4b:d9:6b:23:cb:dd:31:ed:fa:5d:6c:4a:16:10:
96:41:94:e0:ff:1a:70:00:46:89:ba:44:eb:92:67:c5:c1:90:
9c:55:2e:40:eb:c0:e8:7d:35:ab:f6:8a:e2:6a:3d:e5:ba:78:
a7:b0:62:61:c2:b7:76:0f:82:88:a1:36:25:24:a2:5a:21:be:
8c:d9:a5:88:b6:cf:e5:74:ab:c3:84:bb:02:04:b1:2a:9b:02:
ff:71:48:6f:c2:1e:37:bf:bd:da:06:55:f0:01:98:47:32:5c:
d7:3b:76:67:f9:33:50:f1:b6:d3:58:9c:93:52:b1:62:5b:53:
57:0b:55:ee:87:42:a9:ad:7f:a6:f8:a3:d4:9c:cc:2c:f2:44:
e6:20:33:7e:9b:4c:67:ce:b9:b8:0d:41:bb:66:95:86:c3:ea:
f9:ca:2e:1f:46:03:e8:4d:dd:44:cb:ae:5f:97:70:78:cf:31:
50:1a:42:eb:b7:35:e3:9a:0c:aa:a4:05:1b:c3:e5:01:44:ef:
4e:65:f5:a2:33:83:35:58:6a:f3:42:cb:26:51:66:9d:f7:ea:
8f:e0:2d:8c:eb:0d:0c:c2:1c:c8:2e:e6:09:e3:21:f3:9e:ca:
16:f2:0d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:10:20 2025 by rpki-client