Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: OWJsILoKtNWVblL40WwCuM4SRVTuqYAxh9iVPEh4y3s=
Subject key identifier: 21:4A:F0:11:DF:B0:FD:65:CF:29:9E:F5:28:90:9E:25:A6:74:6A:C0
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 0197759C7DE3398647EF7CEFEF9F0B16AE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 22:01:19 +0000
Manifest this update: Sun 15 Jun 2025 22:01:19 +0000
Manifest next update: Mon 16 Jun 2025 22:01:19 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: Qk1P7fNi9oW25I7tQGZ3EA9mw+gyFh5jy8EouroBHWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:9c:7d:e3:39:86:47:ef:7c:ef:ef:9f:0b:16:ae:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Jun 15 22:01:19 2025 GMT
Not After : Jun 16 22:01:19 2025 GMT
Subject: CN=214af011dfb0fd65cf299ef528909e25a6746ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:e4:0f:fb:37:ce:90:94:d7:fe:7b:e9:09:
c0:66:ff:66:11:bb:2d:76:80:73:3b:80:82:6e:71:
23:8c:65:91:f9:f6:d5:d2:ee:14:2c:36:7d:c0:f6:
ae:74:ab:8c:b0:d0:28:97:4e:3f:fd:af:35:07:ee:
45:3d:5f:38:ce:4e:b8:9f:01:0c:fe:4c:b3:12:16:
75:81:1e:c2:31:1c:75:af:b8:14:10:0b:3b:37:42:
e8:7d:72:72:2f:c5:37:63:55:ae:ef:20:58:f7:d0:
e5:1e:3c:82:3f:b7:3d:fa:c4:12:cd:b9:3f:ae:51:
d4:4e:39:f1:96:1f:cc:83:c0:19:29:d8:dc:a7:e3:
2e:2e:5d:73:cf:6e:17:94:7a:8c:7a:1a:3d:d1:a0:
b1:d6:9c:1b:c2:e0:7c:7c:37:3d:37:4a:5d:f6:b4:
39:09:52:d1:bb:d8:43:72:d1:a3:58:14:a5:2c:15:
9d:24:7c:c7:f3:68:9f:22:98:5d:4b:b5:02:63:78:
91:e7:7d:41:44:38:64:e3:46:b3:fe:72:be:53:8e:
ee:5e:ad:d5:66:6d:f8:c5:5e:c9:53:54:a0:91:07:
ec:86:24:dc:45:19:d4:0d:8a:ec:a2:cf:ae:1e:d3:
6d:40:ae:10:61:72:1b:37:f4:23:6d:1d:39:cb:2e:
98:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4A:F0:11:DF:B0:FD:65:CF:29:9E:F5:28:90:9E:25:A6:74:6A:C0
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0a:75:09:db:c9:a6:13:9e:a7:b1:1c:75:b1:d7:77:d9:e1:
b5:ae:1e:8d:5b:28:85:45:ba:7c:bd:af:e8:99:ff:d5:0f:b7:
c1:bd:2a:4b:bf:3c:45:2e:49:79:19:15:ec:df:e8:57:92:75:
e7:c2:9c:1c:3e:48:de:94:fb:bc:23:48:7e:46:5d:c7:2c:a8:
12:ac:9b:62:86:a1:5e:be:32:56:c9:a8:e7:46:83:11:c1:b8:
ca:f9:81:98:d7:fb:73:b5:f7:29:3f:a8:26:b0:b3:5f:a5:b3:
1f:81:85:91:38:39:50:6f:9d:15:38:35:72:68:63:92:7b:a1:
d1:a0:fb:3a:f6:4c:e9:10:ad:0b:41:43:9a:f5:ea:7a:3d:3b:
e2:ab:0a:14:66:8a:33:ce:a6:1b:bf:18:75:dd:1d:d0:0f:e8:
b0:dd:b6:37:20:15:35:cf:b8:bc:e9:ed:e0:e1:b4:5c:28:f6:
81:29:5f:ea:bc:f3:06:ce:7e:86:b9:e7:7f:ca:be:07:e2:35:
20:67:6f:93:04:40:00:f1:32:cf:8b:59:c1:b9:3f:f3:53:c5:
42:ec:e1:59:c1:6c:d6:45:46:d5:64:da:91:43:be:38:ca:c4:
bd:7b:74:9b:80:3d:ba:27:ef:2b:18:2f:9d:5f:99:34:2f:88:
72:f0:ce:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:40:10 2025 by rpki-client