Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: +IevfjuHWQZdEeL93S3N195eVZLjryPFcNN6Bj6JdDg=
Subject key identifier: 5B:E3:32:20:36:E7:E3:6F:7D:67:59:87:FC:F8:45:F9:7C:6C:E9:D1
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 01976960D5246BDD3671117FC989EA1CC4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 0DE7
Signing time: Fri 13 Jun 2025 13:00:42 +0000
Manifest this update: Fri 13 Jun 2025 13:00:42 +0000
Manifest next update: Sat 14 Jun 2025 13:00:42 +0000
Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: 8zfQHpOrFxsa4Y9pAXYDmKepNXdo0Gmuxp+Wz04Gflw=)
3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:d5:24:6b:dd:36:71:11:7f:c9:89:ea:1c:c4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Jun 13 13:00:42 2025 GMT
Not After : Jun 14 13:00:42 2025 GMT
Subject: CN=5be3322036e7e36f7d675987fcf845f97c6ce9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fb:ab:2b:b1:1c:e7:c8:08:26:34:18:c3:2f:
0c:bc:ca:16:5e:59:c8:4f:f1:2e:99:43:95:16:bc:
95:66:f8:94:84:13:d7:6c:4e:df:a5:f6:10:5b:de:
7a:23:e1:66:45:1c:fb:36:ad:c2:d5:76:cd:ff:d8:
55:62:26:6b:c7:45:82:93:80:fc:c3:a4:f4:5c:90:
2d:f9:d4:fe:07:c2:b5:1e:04:04:b7:4a:dd:fe:50:
71:f9:a7:6a:8b:09:43:8b:8e:a5:27:75:53:9d:d0:
7f:f2:57:87:a8:54:f5:7c:04:e1:f1:36:3b:3f:22:
e1:39:1d:7f:ed:f1:c1:ef:d7:92:6b:d0:24:af:8c:
95:a6:ff:fe:b1:7c:f4:20:b2:a1:c9:47:9b:df:70:
d8:75:fe:2c:36:0d:48:76:69:fb:d9:dd:5f:3f:24:
ee:8d:ea:af:5a:90:a5:9b:6c:f1:8f:c2:cb:f5:1b:
b1:ee:04:9c:be:13:3d:0f:ac:00:b8:10:7f:c2:a1:
28:96:93:ae:ee:73:29:8e:2b:0e:93:15:f0:b0:45:
d7:dd:c6:48:17:11:55:49:b8:77:ac:18:8e:f3:4a:
91:d0:a7:db:57:74:0f:06:77:90:72:38:83:31:23:
ae:08:36:a2:7b:0a:75:ab:4e:81:38:25:f6:9f:4f:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:32:20:36:E7:E3:6F:7D:67:59:87:FC:F8:45:F9:7C:6C:E9:D1
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:21:36:c9:34:4e:4a:55:16:c9:0c:fd:de:64:ed:60:6f:6b:
21:df:46:c0:c3:ef:21:f3:3f:55:e6:0c:5b:77:8e:59:e8:1f:
81:07:9c:f5:ff:af:4e:27:52:7d:64:05:29:d7:63:99:8d:77:
54:44:0d:4c:d7:8b:0c:30:cd:53:20:4c:19:ea:1a:ad:a5:d6:
9a:0e:2e:b8:1a:fe:1c:c6:bb:3b:31:90:39:f6:e6:43:e7:1e:
18:65:e2:a8:59:cf:b9:d4:bc:a6:af:62:04:b9:1b:77:51:83:
43:84:e9:fa:4a:e5:d7:79:a1:bc:65:90:ef:b5:42:6e:21:fc:
65:65:e0:b3:96:e5:96:d2:40:e6:8f:7d:61:3c:c7:e7:ad:09:
d0:32:86:44:f7:2e:0e:5f:5c:90:9e:ce:86:b3:c8:bc:42:7a:
c1:43:b9:bd:bd:cc:8e:97:e9:db:02:5f:e6:16:47:eb:29:b3:
14:15:cc:b9:12:aa:41:3a:39:21:59:0e:f3:2f:57:68:5c:1d:
c3:cd:22:cb:2e:72:9d:3d:ac:2e:90:89:ce:62:92:fc:92:e0:
be:42:4f:5a:a8:2f:22:dc:9e:f4:fe:d2:a1:ee:79:39:17:78:
57:a7:bb:cf:e0:25:75:36:01:e2:5a:49:ea:e0:32:ec:89:5a:
77:84:a5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:39:11 2025 by rpki-client