Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: 4wP87kcigQ5v9AtLzdqB3djrlR7VvoUIRDqatEYNQ8s=
Subject key identifier: 3F:FB:43:D8:F2:AD:B5:65:C3:A5:58:A1:85:3A:ED:9F:0F:C3:98:E2
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 01976D3E06E4254E3122F5CE640378789BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 05AA
Signing time: Sat 14 Jun 2025 07:01:10 +0000
Manifest this update: Sat 14 Jun 2025 07:01:10 +0000
Manifest next update: Sun 15 Jun 2025 07:01:10 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: tJTnOwH8VxOVqRQ7irGMVJhYjxuGItbYf923V4Czo+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:06:e4:25:4e:31:22:f5:ce:64:03:78:78:9b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Jun 14 07:01:10 2025 GMT
Not After : Jun 15 07:01:10 2025 GMT
Subject: CN=3ffb43d8f2adb565c3a558a1853aed9f0fc398e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:ea:3d:ac:eb:40:4b:64:ef:2b:12:ec:51:
83:10:f7:cd:c9:51:af:58:57:47:74:40:b0:cc:02:
07:63:5c:0a:8e:63:de:df:43:bb:1b:e4:91:d5:93:
84:cd:f4:99:f2:01:10:2f:40:02:6d:1c:44:b5:fb:
29:ad:0e:61:72:b8:69:17:1b:45:2c:82:a5:0d:77:
a4:14:30:84:f5:29:ec:eb:87:6e:66:37:39:45:5e:
d0:16:42:b6:e2:27:a3:d8:80:2f:ae:63:76:36:8d:
fe:53:55:2e:17:64:30:e7:bb:5c:72:9f:ee:f2:72:
5b:53:88:5f:47:74:ec:0c:b2:f7:ff:1f:34:f2:a5:
ea:12:92:f2:c0:04:6a:d0:62:62:50:a2:59:e4:13:
3e:94:c0:2a:42:10:78:bb:96:0f:79:3e:10:0c:60:
cf:ff:6a:e2:9d:7e:7d:3d:a2:15:a4:34:0e:c1:51:
bf:da:92:d4:ca:6a:04:4a:01:a2:0b:42:4a:48:07:
bd:66:30:6f:86:cf:c4:b0:87:5f:77:e1:19:6c:0a:
b7:03:50:a7:68:86:e3:84:8f:96:36:23:80:9d:2b:
6c:21:41:1c:1d:52:64:30:9a:38:67:c3:be:50:a3:
56:23:da:eb:d9:ee:e2:4c:be:3f:bc:94:90:bc:d0:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:43:D8:F2:AD:B5:65:C3:A5:58:A1:85:3A:ED:9F:0F:C3:98:E2
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ae:ab:3b:33:a4:22:e2:a5:04:0f:a6:fd:7d:63:eb:75:15:
bc:ed:00:27:8e:00:e8:2b:a9:49:7b:f4:b6:46:5a:78:bb:ad:
cb:33:4f:0a:1b:73:5a:20:b2:36:78:5c:53:c2:82:06:aa:a1:
56:d1:43:3d:cf:93:79:87:6d:c7:16:80:26:8c:d7:4c:da:3e:
19:02:1d:68:af:b2:14:0c:92:16:8a:dc:f2:43:6f:91:05:62:
17:2f:21:7f:0f:85:af:da:5d:c0:40:37:a0:e0:b8:bd:1f:c9:
9b:a5:e0:91:5c:5f:cb:2f:94:5f:a1:45:86:37:ca:6f:ee:9b:
f8:e7:13:54:03:a4:fc:db:10:3a:66:6b:a9:98:96:c8:74:8c:
40:04:31:c7:2b:a5:fd:bf:72:09:bf:63:db:9e:98:33:c9:18:
5a:62:2a:a6:94:c6:9b:85:1a:2f:06:ee:34:b8:7a:fb:6b:ed:
84:d9:61:7b:87:da:6f:30:cb:7e:29:d5:3f:27:bc:2d:63:36:
76:dd:34:85:0a:d4:b4:40:86:92:3e:ff:9e:86:8e:46:23:29:
e7:a5:64:dd:70:46:b2:84:b5:93:13:88:a9:a1:90:db:ef:28:
d7:cd:64:e8:32:3f:a0:84:d3:cb:28:b3:aa:44:bc:a8:94:9c:
39:81:d2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:32:01 2025 by rpki-client