Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: aefgjIFmJD6CVnSaKJl8Q5RMifVa2JFoCA7o4ZmKvSU=
Subject key identifier: 5A:DE:51:1F:DF:F2:53:9E:6F:D6:C9:7E:94:F4:99:2C:9C:03:F0:74
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 019774C037B788AF1E7A42CB4337446EB82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 1408
Signing time: Sun 15 Jun 2025 18:00:43 +0000
Manifest this update: Sun 15 Jun 2025 18:00:43 +0000
Manifest next update: Mon 16 Jun 2025 18:00:43 +0000
Files and hashes: 1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: 8yAusvnP386V2QfljbsBSwS4o1Ei2MIw9K7mU+1OwUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:c0:37:b7:88:af:1e:7a:42:cb:43:37:44:6e:b8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Jun 15 18:00:43 2025 GMT
Not After : Jun 16 18:00:43 2025 GMT
Subject: CN=5ade511fdff2539e6fd6c97e94f4992c9c03f074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:29:6b:a5:c4:37:71:cf:0f:bc:8c:05:55:
a0:c7:f2:e7:92:31:d6:c1:53:a6:3a:9b:25:c5:ae:
79:61:3c:10:b0:0e:20:dd:69:ca:d7:53:30:51:52:
bc:20:b6:fe:de:b8:d5:a3:70:df:0f:66:76:af:1e:
14:3d:d8:7e:73:6a:71:2e:0f:9e:8a:76:a6:a4:6a:
1e:a9:e6:35:38:61:d0:00:55:51:84:cd:58:92:e6:
8f:3c:b6:8b:ed:82:26:3f:01:70:13:4a:e2:49:ca:
dc:fb:6f:cd:68:b0:2a:03:f3:d5:38:cb:91:eb:6e:
18:2e:0c:66:79:98:85:89:37:4e:67:34:db:f4:c7:
3b:9e:64:ef:a7:96:93:e6:30:92:24:68:d2:47:c7:
97:36:2e:76:bf:d4:cd:a6:ae:cb:7a:a4:40:f6:7c:
6e:e6:67:2e:e2:a9:1d:4b:92:4b:8e:1b:02:4a:7f:
a0:cd:8e:a4:31:f6:3c:a2:52:98:60:10:3c:8e:2e:
a7:86:1e:06:7b:62:1f:75:bb:15:41:86:12:ac:f1:
74:43:44:db:7f:b1:9c:49:a2:94:88:82:ec:68:86:
04:d6:55:79:12:e1:cb:7a:b1:26:d6:60:23:79:78:
f8:17:23:02:a0:e2:95:e8:fc:77:d6:3e:91:4c:5d:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DE:51:1F:DF:F2:53:9E:6F:D6:C9:7E:94:F4:99:2C:9C:03:F0:74
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e7:e1:41:ef:36:d9:c9:6e:2f:ff:f3:c9:de:a3:4d:f6:29:
cc:a7:b2:70:9c:b2:db:a7:30:3c:89:9f:07:fb:7e:92:9d:66:
d5:58:6a:10:d1:23:b4:63:59:a2:f6:48:76:7b:e2:c3:83:29:
c3:21:a1:47:6e:d8:59:62:a3:6b:27:17:72:77:24:82:de:c3:
a2:04:d3:fd:6b:1a:83:e1:ca:24:f8:d4:6e:14:76:ef:a7:2b:
4b:0b:1e:b2:f9:d4:e5:92:62:4c:0b:78:96:67:e5:1e:b5:14:
74:e0:86:f0:b7:57:c4:f6:8e:ae:ca:8a:49:53:61:a3:61:69:
5b:2f:df:01:46:41:91:1d:6e:a1:11:dd:58:c2:34:8f:13:1c:
2e:39:0b:aa:c9:64:29:e8:1f:f8:b3:19:1c:47:2e:62:3b:bc:
ba:63:a1:1a:d2:60:a3:e0:d0:16:88:4c:6a:17:c2:38:7d:e4:
83:4e:e9:97:54:0c:41:44:fd:c7:ad:ef:90:aa:16:11:7c:c3:
84:f3:54:75:17:a4:45:62:2b:51:5e:ab:ef:6c:5b:5c:60:0c:
47:87:47:cb:ea:49:83:1f:db:f8:39:c7:b7:08:9c:91:fd:2a:
49:9d:35:3d:86:b0:52:1a:3f:41:d0:1c:de:9e:54:29:e6:d1:
cf:f2:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:57:12 2025 by rpki-client