Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File: yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier: XdJKC3+HPtKql7c/+e+Sh0LG7Ye2NdFhQBMBcajcPak=
Subject key identifier: 65:95:E1:55:77:4D:CB:86:0F:08:0B:D1:08:1A:C9:3A:79:3E:EF:20
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial: 01977150FAC809C37CE9551FB1E96518BAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number: 0C71
Signing time: Sun 15 Jun 2025 02:00:21 +0000
Manifest this update: Sun 15 Jun 2025 02:00:21 +0000
Manifest next update: Mon 16 Jun 2025 02:00:21 +0000
Files and hashes: 1: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (hash: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=)
2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: AIhVhEzM64CNoA2TfECOqkvr33d7si4R/dPNKYGH70I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:50:fa:c8:09:c3:7c:e9:55:1f:b1:e9:65:18:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Validity
Not Before: Jun 15 02:00:21 2025 GMT
Not After : Jun 16 02:00:21 2025 GMT
Subject: CN=6595e155774dcb860f080bd1081ac93a793eef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:4a:b5:8d:15:84:73:cc:03:b8:61:e3:5a:
e5:ac:37:73:c5:1c:22:8e:49:46:db:0e:e0:47:bf:
9d:ec:60:8d:f1:95:2f:78:28:2a:5b:1e:4b:22:ab:
7a:67:5f:6e:3b:49:11:30:27:4f:4c:03:86:fb:63:
54:2b:12:72:22:73:71:38:7e:21:cb:eb:39:bf:fe:
1b:04:0f:8b:14:da:14:a8:87:d7:c7:8d:2a:77:c0:
f4:d9:33:3b:20:2a:a7:09:80:b3:10:dd:f3:de:5e:
c4:fb:db:47:65:f4:3f:f4:14:d5:cc:ae:c9:a9:de:
79:a6:28:d7:7e:22:c7:00:84:4a:68:f7:2b:39:50:
7e:96:9e:a0:88:91:fc:ee:e7:c3:c5:9b:ac:3a:06:
b8:ab:ea:43:5d:7d:90:3e:59:d1:75:a1:cc:fb:e5:
85:64:78:3f:c8:ef:5f:99:ac:b7:13:85:8c:cf:17:
51:c4:70:35:3e:d9:dd:4b:a1:c3:c2:18:33:b0:ae:
9e:dd:16:dc:87:4d:0d:73:95:44:6b:bd:1d:5a:b8:
2a:58:10:bd:6a:30:68:bc:86:8f:01:25:52:4f:69:
4c:78:b6:99:c1:43:4d:62:4f:3b:c8:4a:cc:40:99:
68:89:22:9e:14:2f:9a:cf:e5:6f:a3:67:42:d1:ed:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:E1:55:77:4D:CB:86:0F:08:0B:D1:08:1A:C9:3A:79:3E:EF:20
X509v3 Authority Key Identifier:
keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:01:f0:9a:3b:4f:b6:b4:8d:e7:65:e6:df:5f:a4:34:a0:60:
32:b3:ac:66:8b:5e:d2:bc:8d:bb:77:d1:f9:50:7c:9a:21:81:
6f:cc:fb:73:47:93:67:ac:1b:b1:7d:a6:c9:b0:38:88:eb:01:
5f:6d:97:38:1b:e8:67:d4:d1:66:35:92:da:d7:47:3f:9a:88:
a0:fe:56:8f:bd:27:41:64:31:cd:58:a3:9b:bc:47:39:b9:5c:
64:c3:c5:61:15:96:84:f3:da:d3:b3:0c:bd:14:3f:bd:1a:52:
c5:b2:c7:24:7b:3f:e6:ef:34:87:0c:b2:c8:d6:b8:01:7e:57:
6b:20:02:a9:d2:3e:f2:47:2a:c3:84:01:d7:81:f9:9c:55:75:
e4:7d:a7:1a:90:a8:cf:af:75:8c:5b:90:16:99:13:91:b8:f7:
f3:e5:3d:12:ea:52:dc:3f:36:14:0c:6a:5e:1a:8e:c7:8a:9d:
8e:cb:33:cc:13:0d:e1:73:c0:5f:f4:7b:36:b1:4d:f6:3a:e1:
1a:9c:89:e5:41:0e:b9:92:96:ef:cc:1a:ae:ce:13:f4:40:c3:
d1:63:07:d2:09:d0:2a:bb:4f:33:1d:d5:3a:e3:75:61:86:d7:
df:3b:e9:7e:bb:91:fe:89:9f:f8:e6:14:a1:8a:d7:19:a9:a6:
2a:cb:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:44:31 2025 by rpki-client