Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier: OIZICs2ARz4NMGEfWORFUnh4HNPHEHK5OoNsYvY/bCA=
Subject key identifier: F9:2E:FB:24:EC:0E:F6:37:11:CA:99:0B:8D:52:23:F7:78:95:C3:66
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 019769CEFEC3A4F3E29C100B363D9A893464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number: 1593
Signing time: Fri 13 Jun 2025 15:01:02 +0000
Manifest this update: Fri 13 Jun 2025 15:01:02 +0000
Manifest next update: Sat 14 Jun 2025 15:01:02 +0000
Files and hashes: 1: M6Kiusoj-vmcX-l1FvQ-whelTCY.roa (hash: PZnmBtue/4j7K73vwfKaOFXRKwScBqdnVIvN9DoCZyQ=)
2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=)
3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: 4SJsMnPLlt9IbxmzcmlTPY6fJ2MBfDTFOerx3+DO7hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:fe:c3:a4:f3:e2:9c:10:0b:36:3d:9a:89:34:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Jun 13 15:01:02 2025 GMT
Not After : Jun 14 15:01:02 2025 GMT
Subject: CN=f92efb24ec0ef63711ca990b8d5223f77895c366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:db:14:73:70:72:c9:2d:ed:4d:eb:60:0a:
97:c8:98:18:59:bf:c9:9d:c4:db:bb:31:6b:f8:a0:
16:8c:18:d9:e3:da:7e:71:62:db:ea:d0:03:16:f2:
01:13:42:85:6e:7a:cb:be:b4:68:3a:cd:c9:b4:6e:
f6:e7:ff:e8:b5:86:e8:3a:31:6f:96:4b:7d:ee:bf:
03:de:3a:e8:6c:87:eb:64:05:a9:01:50:21:40:ef:
c3:0f:d3:48:18:82:05:fb:76:35:f4:96:fb:5e:bd:
82:0d:d2:bb:a3:98:ce:dc:e5:38:c3:e5:3e:98:b9:
7a:c6:4f:7d:5c:4f:19:99:97:66:f6:f6:b1:65:65:
8b:ad:b9:90:74:a5:c2:b1:ca:81:4a:1b:b6:11:69:
bc:3a:aa:e3:2c:c3:73:7d:f9:68:9a:90:04:75:30:
bc:e8:09:14:81:fa:c4:93:b6:df:cf:82:8a:ab:6c:
52:bb:ec:16:d2:73:70:e9:75:34:99:73:a8:fa:19:
6d:5c:35:86:75:7c:5a:11:e5:14:2b:c5:6d:ba:ab:
fd:b7:e9:42:14:aa:0c:74:83:79:cb:b2:a3:da:93:
d9:42:b8:0e:00:44:5b:9e:0f:98:8f:d6:0f:74:e2:
f1:d4:7d:c7:3f:7b:d9:e2:72:42:a3:65:40:94:c2:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2E:FB:24:EC:0E:F6:37:11:CA:99:0B:8D:52:23:F7:78:95:C3:66
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5d:5c:8c:20:be:49:58:22:19:33:9d:ad:d9:a4:b7:2c:9d:
bb:33:de:05:f8:c8:ff:49:d0:64:4b:a3:47:c6:30:77:a1:44:
fe:bb:42:ad:5b:87:f6:92:89:c9:e8:8c:76:bc:93:8f:cd:0b:
53:b5:7b:ea:89:26:39:2b:02:ca:8e:ed:d6:80:04:fb:81:16:
1e:27:95:9f:17:bc:d8:0a:da:e1:8b:4d:e3:3d:12:e4:7a:b7:
e6:92:97:5f:61:2f:78:26:20:3b:99:f6:b8:0f:a9:e3:a2:fa:
43:72:ef:1f:2a:db:18:f7:73:8c:c9:ca:f8:18:21:68:75:f9:
af:e6:7e:f1:65:6b:de:c6:79:05:ec:c8:77:d8:a3:ff:7e:78:
c4:ab:98:1d:23:6a:77:71:70:21:71:c2:27:d9:af:72:29:68:
dd:26:f6:fd:6f:97:87:db:c1:b2:2a:a1:1e:61:f5:fd:bf:0a:
9b:73:0e:b3:b5:2a:9c:ef:f6:e4:40:9e:86:28:7b:44:b6:17:
07:ef:78:19:13:6b:9c:e2:16:24:03:65:12:73:68:55:9c:9d:
dd:88:66:c1:3b:7c:dc:57:05:63:41:eb:ab:16:46:dc:37:a6:
97:03:3e:ec:11:ce:44:54:50:da:79:db:d3:dc:26:bf:a2:a7:
f5:24:b2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:26 2025 by rpki-client