Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: 5gEMkPH6Ut6jYf7RrCyUzTlDH3qY0Ki4I093g/xDTsE=
Subject key identifier: CC:85:62:EC:63:BA:C7:4B:39:BB:6A:CB:28:05:DB:0E:52:2B:CB:7B
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 01977677E245743314E71E54FE45BDA24E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 1257
Signing time: Mon 16 Jun 2025 02:00:57 +0000
Manifest this update: Mon 16 Jun 2025 02:00:57 +0000
Manifest next update: Tue 17 Jun 2025 02:00:57 +0000
Files and hashes: 1: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (hash: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: u6pkfTGGFvCJnpJoH8dh54QVA7F95j/xK4aRYIhpOU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:e2:45:74:33:14:e7:1e:54:fe:45:bd:a2:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Jun 16 02:00:57 2025 GMT
Not After : Jun 17 02:00:57 2025 GMT
Subject: CN=cc8562ec63bac74b39bb6acb2805db0e522bcb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:d3:97:62:f0:8d:1b:50:f4:95:c1:79:66:
f8:5e:77:e2:84:93:dd:c2:34:6f:fd:d3:33:bd:e3:
7d:a8:ad:09:ea:16:f4:8a:d8:da:a2:47:e9:35:3a:
70:c9:ae:e9:84:8a:f8:29:08:8a:3e:86:75:bb:31:
70:75:cc:0c:9a:c4:ae:3c:91:db:b0:9b:42:d5:c5:
ab:0e:64:b3:d6:10:37:1c:ae:c3:67:74:ff:ae:f6:
ea:dd:d0:ee:0e:53:e0:f9:5f:49:3c:07:7c:4b:d3:
1f:0a:17:04:34:ef:ff:cf:d4:10:56:48:d5:c3:ee:
b4:51:a2:f0:bc:c3:b8:19:5b:f8:d9:19:58:9f:f4:
68:ee:d0:4d:50:cc:85:31:f8:0d:7b:00:d2:57:bb:
98:40:24:a4:1d:fc:b1:74:ea:e0:d9:f5:91:fa:d3:
b6:5c:d4:60:d9:5d:57:d3:de:34:b7:82:cb:a0:1a:
b9:f4:b5:76:be:6c:ee:17:73:7e:8f:6b:23:01:66:
50:5c:ea:7a:38:4f:cb:b7:90:1d:47:94:28:00:49:
6f:9a:bb:76:d5:86:81:83:b5:2f:38:50:70:b9:ec:
25:bf:48:7a:a0:20:e5:35:26:4c:ed:6c:a3:f1:81:
eb:3e:64:6a:fe:cd:b8:d9:46:98:05:b7:26:e7:21:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:85:62:EC:63:BA:C7:4B:39:BB:6A:CB:28:05:DB:0E:52:2B:CB:7B
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:37:6b:06:0f:b3:3f:0a:bf:e6:31:0a:88:4e:a1:7f:67:29:
ef:45:dc:b1:38:c4:14:95:8d:e1:16:11:30:be:be:09:65:ce:
c6:4a:c7:17:ef:be:fd:45:ec:6f:71:62:79:cc:70:e0:32:b8:
50:87:09:c1:e2:df:15:16:8b:41:4c:00:c3:ce:79:09:54:bc:
60:04:eb:5c:23:19:43:9a:5d:c4:51:1f:0f:83:16:fd:55:8c:
06:41:7a:7e:98:35:07:c8:f1:af:1c:79:27:e8:bf:72:a0:46:
b4:67:61:a2:a9:89:29:b8:bf:74:7a:8b:38:89:52:36:2b:04:
bb:2a:88:b6:2a:62:a7:11:19:26:67:29:03:48:74:27:b9:f5:
f4:11:ed:b5:61:b2:f9:b1:ca:4a:8b:9c:1e:8f:80:32:99:2d:
eb:23:9c:e0:fd:08:da:78:a6:e2:8d:dd:71:66:2f:5b:99:b4:
32:c6:6d:47:58:1c:45:1f:24:ed:de:96:8b:89:29:54:e9:41:
96:31:1f:35:57:46:17:a8:d0:20:ba:6a:60:7e:3c:f4:8e:a3:
1f:63:15:25:1e:28:d2:4e:e2:3c:2c:50:58:06:43:d7:1d:01:
a3:e3:a3:23:cb:0c:b9:57:64:f2:45:59:a7:fa:44:07:8c:53:
b1:c8:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:20:01 2025 by rpki-client