Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: 2gv0jqAD27fFzX0tkwE2SIjvEAtzDk10Or/FX0gut64=
Subject key identifier: 4E:9A:C4:0D:27:0E:40:EE:D4:A2:D1:75:35:BA:EC:EA:38:69:65:6C
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 01976C61BD8C2024C7F1586082475CF7BA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0A76
Signing time: Sat 14 Jun 2025 03:00:34 +0000
Manifest this update: Sat 14 Jun 2025 03:00:34 +0000
Manifest next update: Sun 15 Jun 2025 03:00:34 +0000
Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: aqPuZFLssQQ0vbMtFc77/ZxYH65NJ0NHpy//EzA6UuE=)
3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:bd:8c:20:24:c7:f1:58:60:82:47:5c:f7:ba:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Jun 14 03:00:34 2025 GMT
Not After : Jun 15 03:00:34 2025 GMT
Subject: CN=4e9ac40d270e40eed4a2d17535baecea3869656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:f3:f9:b5:f6:3d:60:b8:22:8d:d8:1e:b2:
12:fd:66:62:6e:64:d1:42:95:b0:d4:aa:9f:d7:57:
ce:8e:35:bb:01:a2:85:b2:5c:7b:40:80:8c:2f:e3:
c3:fd:e3:c0:d4:4f:f1:46:b3:89:17:87:a6:dd:d3:
91:2e:2e:7e:11:d6:3f:87:1c:f4:2d:40:a9:20:a6:
94:55:4b:13:cd:d6:2c:0a:95:9f:ec:22:9e:4d:56:
81:d9:c0:8e:70:42:f6:e5:96:ab:5a:18:e7:66:a6:
7f:b4:6f:06:88:c5:ad:52:85:c4:fc:d6:c8:53:20:
23:87:17:1f:12:62:75:dd:92:9e:1c:6a:98:9a:96:
6d:af:0e:61:e2:aa:42:af:2f:e1:d6:40:0f:06:ac:
9c:d7:7c:77:2a:e4:91:f8:92:61:8e:91:eb:2e:43:
3b:13:58:2a:40:3d:f3:ad:22:46:3c:70:eb:4f:12:
7f:bd:9a:60:e5:b4:8c:9c:ea:25:9e:fd:81:1e:ad:
99:5c:d3:73:8a:5d:45:7f:e4:e7:e0:1c:f6:6b:65:
41:da:f7:4b:5c:7a:4b:0e:be:11:6a:df:65:7e:bb:
3c:b6:8b:71:5c:8a:3d:51:e8:80:f4:9d:b7:ec:cf:
86:95:ff:f0:9e:ee:51:51:1d:81:17:49:84:1a:2b:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9A:C4:0D:27:0E:40:EE:D4:A2:D1:75:35:BA:EC:EA:38:69:65:6C
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:aa:b1:e1:2a:b3:ae:5f:84:e4:3c:d9:9a:84:74:a1:b9:1d:
3b:18:13:5a:49:93:39:0e:c1:e9:cf:84:7e:0e:f1:dc:7d:6c:
f1:80:9d:cd:fe:01:65:1a:1c:3e:b9:be:ed:c0:70:a2:2b:59:
a1:ff:a9:44:b1:40:c9:cd:d9:ec:ba:95:78:b1:b4:cc:64:10:
04:29:5b:da:b3:88:4f:5d:d6:34:1b:e8:a7:46:df:55:3a:f4:
ca:84:f0:55:3e:c1:50:04:c9:fc:10:e7:8a:70:47:9f:1a:05:
82:cf:1c:b5:26:61:17:aa:04:42:86:bd:ac:0c:66:ae:7e:86:
3e:fe:65:13:b8:5e:18:49:f5:52:df:f8:bf:b3:53:23:f5:05:
9d:8b:c5:fb:6f:72:77:a8:38:5d:76:9a:56:8a:e8:7f:76:53:
8e:41:f5:af:55:28:4c:f7:3b:e2:1a:d9:5f:04:2d:5a:12:93:
11:7c:d2:f3:62:d8:0d:2f:73:0a:b7:d0:1a:43:3b:08:81:dd:
0d:14:88:2d:ad:4f:f1:a6:4e:26:e4:42:26:05:27:3a:dd:b9:
56:b3:e1:6f:f7:ca:26:aa:85:3c:78:24:b8:83:35:7a:52:99:
e5:d5:99:8d:d6:fc:e8:b9:04:4a:f1:2d:3a:de:9b:4e:01:55:
77:7d:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:43 2025 by rpki-client