Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
File: yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json)
Hash identifier: gW3hnZpoPBIN0P98j4Fwld6/IKpaACB+bCOk3DcqDUc=
Subject key identifier: 86:05:5D:4D:F5:FC:E3:A7:9F:18:E2:9D:7D:90:6D:00:5F:4D:64:09
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 019768F2DE635C6AD6226A96167D516AA5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
Manifest number: 02C3
Signing time: Fri 13 Jun 2025 11:00:36 +0000
Manifest this update: Fri 13 Jun 2025 11:00:36 +0000
Manifest next update: Sat 14 Jun 2025 11:00:36 +0000
Files and hashes: 1: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: M+xY/Qdi0+ZTKwu3JJJqGX6ZG0TWTaaQtOuYGaI8Vuw=)
2: z4GL3R9iwn241BwmecTavitjvmk.roa (hash: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:de:63:5c:6a:d6:22:6a:96:16:7d:51:6a:a5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Jun 13 11:00:36 2025 GMT
Not After : Jun 14 11:00:36 2025 GMT
Subject: CN=86055d4df5fce3a79f18e29d7d906d005f4d6409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:bf:12:36:f1:d9:36:66:d2:19:ed:44:29:
fd:63:14:e3:e0:da:13:ee:1a:8e:3a:08:a5:86:14:
d1:d5:1b:a0:fd:2e:f3:f1:d3:fe:88:7b:03:7f:d2:
c2:a0:5f:e9:76:1a:57:22:3a:fe:a9:d2:0d:b0:fe:
ff:4f:f1:c0:94:78:06:f7:2e:0a:ab:42:bb:19:e1:
04:1a:68:6d:e9:60:f6:c4:2d:3f:bb:06:b6:96:15:
72:48:9e:3b:21:bb:d8:40:fa:d7:9a:84:56:ff:a0:
ac:8d:70:59:a5:95:a5:53:ef:6d:cd:59:9c:77:1d:
b3:d6:38:b7:c1:40:d7:7a:7c:12:a3:c6:e8:db:17:
61:6d:e1:74:ec:cb:99:0d:2b:94:5a:4a:12:05:87:
7d:56:d7:18:cb:6b:35:d1:03:fd:a1:05:3a:58:01:
5e:e7:db:a5:aa:8c:1d:ae:d6:02:1f:5a:38:af:fb:
0f:52:4e:fd:e5:b9:e3:98:1e:71:52:ee:d5:a8:3e:
bd:5d:75:07:72:02:78:ac:d0:27:a5:a2:34:c4:c0:
5b:0d:cb:0d:89:d2:01:9e:93:ae:8f:cf:12:03:3b:
5c:30:f0:9d:28:28:d1:f3:b9:f3:e4:f3:bc:84:fb:
6f:6f:93:48:55:11:29:81:f1:77:be:e9:32:9f:c5:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:05:5D:4D:F5:FC:E3:A7:9F:18:E2:9D:7D:90:6D:00:5F:4D:64:09
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:81:b0:c6:55:3b:7d:0c:eb:7b:32:2f:fc:6b:55:29:03:b4:
75:d4:fc:2a:41:be:b0:5f:3e:67:3d:b7:ef:12:21:81:f0:d0:
48:f7:ab:c8:d3:57:ed:43:41:c3:e3:19:8b:9e:b5:dc:70:3f:
1a:a7:d4:b7:6f:d1:16:73:60:8d:ac:62:a0:a8:7e:79:db:7c:
e3:d5:4e:23:b2:7a:80:59:a4:4d:a7:9c:19:cd:85:27:46:bc:
79:4e:8a:b6:d1:17:f5:b1:51:3f:7a:95:d7:cc:72:ca:ee:28:
5b:a7:8b:7f:ef:ba:89:14:98:59:09:b2:6a:ab:92:2d:10:b7:
98:23:fe:39:77:91:41:ef:ed:3e:99:26:81:f1:d6:24:ca:be:
a7:e1:d0:37:29:cf:c9:4d:f5:e1:f1:20:53:8c:3b:85:6b:53:
37:6d:06:95:0f:d3:0b:37:9e:ec:3b:e9:b5:37:a2:73:ab:11:
ea:f7:bf:0f:48:73:41:71:99:f1:d0:e1:32:c4:85:b2:4b:d9:
d7:7f:3e:50:0e:7c:e8:23:b7:0a:f3:46:d3:dd:e3:e9:66:4e:
3a:1c:b7:08:74:50:5f:26:19:e6:ce:91:a3:a0:e4:66:c8:0b:
b5:86:89:53:a8:35:bd:93:c6:2b:ea:fa:9b:b3:cc:a4:10:af:
04:9c:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:49 2025 by rpki-client