Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: xfZJO59Iriom8TEl1PP3Et91gTXM8XwTwrl/sOltYyw=
Subject key identifier: 82:9D:42:AB:8B:57:5C:99:2F:1F:B0:63:84:67:02:C5:8F:10:4E:3D
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 01976F99A7414868B5F5F473B7AA1F3AD92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 0D87
Signing time: Sat 14 Jun 2025 18:00:30 +0000
Manifest this update: Sat 14 Jun 2025 18:00:30 +0000
Manifest next update: Sun 15 Jun 2025 18:00:30 +0000
Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=)
2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: 2bD8WoghAtdlSo6IstGoFX7V/YUV+qZ6UlXeDRpb4RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a7:41:48:68:b5:f5:f4:73:b7:aa:1f:3a:d9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Jun 14 18:00:30 2025 GMT
Not After : Jun 15 18:00:30 2025 GMT
Subject: CN=829d42ab8b575c992f1fb063846702c58f104e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:0b:5f:15:ec:80:5d:fa:66:2b:94:b5:8c:
2e:b6:8a:19:a8:67:58:7e:26:d1:8e:44:e2:dc:9a:
0e:30:dc:48:c6:39:c9:64:4f:68:55:37:8e:1b:b6:
0a:5a:4e:1c:52:54:11:ee:2f:8c:2f:cb:e1:b8:df:
f1:ff:48:16:25:62:7f:46:8f:72:79:0a:89:72:02:
91:ff:0d:af:f0:a7:b3:c5:84:24:fc:0d:2f:4d:d2:
98:32:c8:47:0e:0d:ef:bb:cb:28:f3:bb:f5:ea:cf:
8f:eb:e5:96:d0:59:1d:b1:cf:3e:c0:57:1c:5a:97:
e1:a1:49:85:f7:14:52:98:be:e0:f5:0e:a8:b9:89:
83:13:7f:54:eb:4f:af:12:0d:44:14:36:af:08:da:
89:a8:30:64:e1:78:56:bc:32:82:29:8a:38:8d:af:
f3:9e:fe:ae:dd:9c:30:43:b3:ab:1b:c2:e7:31:a7:
9c:3b:30:ee:c6:a2:72:a5:79:ee:87:ff:e8:33:a1:
a7:0d:92:e3:da:d8:54:64:63:93:14:70:91:00:2b:
36:5c:b4:f5:cf:8d:46:23:ff:40:76:d6:9d:d1:39:
1d:93:f5:6d:c4:c9:4b:48:64:31:62:2b:74:50:81:
03:27:fe:11:aa:9a:1d:40:20:11:fd:d4:10:39:fb:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9D:42:AB:8B:57:5C:99:2F:1F:B0:63:84:67:02:C5:8F:10:4E:3D
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:0d:37:e3:90:58:04:66:db:c5:68:2e:2e:4f:6a:42:36:
7f:08:fa:1e:c5:66:04:8e:cb:30:32:ee:f6:42:0b:cd:b7:ed:
89:0f:b4:bc:3e:af:ac:ce:a3:9a:f8:d2:31:53:5b:8d:4a:54:
9d:87:94:ab:5b:ac:39:0b:b2:0f:60:31:ca:1e:10:9a:bb:af:
ed:29:95:de:84:5f:34:b7:aa:3b:95:78:2e:cc:5d:b9:3d:a8:
6e:11:6d:c8:4a:2d:f4:f4:81:83:e9:e7:66:ec:51:2d:56:87:
55:3a:1d:e1:3e:97:b7:8f:a6:0c:6d:2f:a6:54:68:fa:9e:62:
58:83:29:54:66:53:ee:4e:8e:fe:60:6f:e8:1a:32:2a:be:39:
16:1e:dd:ee:ad:b1:af:e9:65:83:02:89:36:a4:8c:a7:bd:f1:
e2:bc:4e:cb:ff:e2:d6:71:3e:1c:c9:e8:39:51:b6:fe:25:91:
92:69:cd:18:05:4f:9b:f7:f1:6c:2f:1e:9b:a0:61:27:7b:80:
ba:91:bb:ec:36:6d:1e:d5:a5:39:f0:e6:8c:08:c5:80:e7:dc:
13:b8:9a:3d:e7:34:26:52:ef:c9:16:39:9e:23:d8:39:14:20:
8f:f8:ef:d5:3a:df:0c:7b:47:e8:63:5f:51:66:72:a7:d3:38:
12:99:39:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:09:29 2025 by rpki-client