Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: uFQSG1Z6wk1R8u1zImKCwXCL8DEyEHrDNQCCSzCJAFM=
Subject key identifier: 3D:52:7A:5A:86:B0:50:10:91:18:0D:CA:89:76:C7:8B:06:9E:A1:5B
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 0197B88FA7ADBD215ED88F281A7DF1149D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: 0276
Signing time: Sat 28 Jun 2025 22:01:51 +0000
Manifest this update: Sat 28 Jun 2025 22:01:51 +0000
Manifest next update: Sun 29 Jun 2025 22:01:51 +0000
Files and hashes: 1: 1-mbK63EZxL8v4V6vFmj_lwXzRxM.roa (hash: JWU55a5ri6Rn4UB9DqsCMDblGiRbnZJJXlkoHYetX7A=)
2: tUPB9TmrvRG46ngHubaYKYvn04E.roa (hash: rsksbLJqTJnjomTHQ1GVXbsT6pXd/mYYQ2loIuCMTYg=)
3: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: qOAd47YKYh1326sWIkXMvsPwxCq7HScMwd5BzxSgjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:a7:ad:bd:21:5e:d8:8f:28:1a:7d:f1:14:9d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Jun 28 22:01:51 2025 GMT
Not After : Jun 29 22:01:51 2025 GMT
Subject: CN=3d527a5a86b0501091180dca8976c78b069ea15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:55:bc:bf:13:87:3e:e4:8f:0b:ef:8b:37:
b5:fe:cb:65:c3:b5:e4:ba:e4:86:4b:81:c4:91:29:
d0:65:21:a8:6f:7a:0e:25:44:d1:30:b8:fa:9a:c1:
a1:1c:2f:3f:87:35:02:e1:38:a1:7e:87:e1:e1:50:
85:9c:1b:1d:1e:31:f4:07:ff:dc:9f:0f:50:83:8c:
90:ec:6b:2d:24:62:62:bf:14:7a:fa:c7:10:e2:5a:
ad:39:9e:72:10:36:f4:fa:a6:8a:3a:6d:cf:73:13:
fd:54:51:4b:10:3d:81:f8:6e:7f:c8:e6:fc:26:c8:
d6:3e:f8:b7:91:73:0f:0a:28:68:8d:87:04:62:02:
17:81:3c:37:69:a4:4d:f8:7a:e3:ed:27:d6:1c:e4:
d2:93:94:c2:0a:d0:a6:db:8a:02:1c:9f:0c:05:82:
10:b6:28:b5:15:eb:61:2f:66:9a:c7:ad:71:b0:62:
c6:85:bf:b1:81:25:fb:91:c2:bf:c9:82:d5:b9:f7:
4e:dd:1f:ae:79:a2:74:aa:42:34:c0:a1:c6:07:6f:
ff:7f:51:56:a3:33:e1:79:4e:0f:74:3b:79:4d:dd:
1a:6f:fc:a0:0a:7e:d8:c3:87:87:41:1f:f9:35:42:
a0:f0:52:86:46:de:4a:7b:78:6f:74:c0:d1:4d:65:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:7A:5A:86:B0:50:10:91:18:0D:CA:89:76:C7:8B:06:9E:A1:5B
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:0d:7d:92:a6:de:5f:58:be:c8:ef:86:cb:65:7a:7f:ad:
14:3a:16:d5:46:37:1f:5f:b2:b8:d7:a3:db:ff:2e:76:0c:50:
86:e5:1c:39:18:be:6a:38:b3:9c:49:35:cb:75:ad:b9:ae:74:
99:2e:31:a3:4a:b8:f2:9d:be:16:95:82:56:ef:31:f5:4f:1b:
9a:90:de:36:0a:31:d2:d4:a7:29:02:9e:60:68:0b:9d:c8:a8:
dc:7f:57:20:51:74:4e:cd:de:d9:df:2b:8e:55:5b:b4:3e:79:
45:7b:c8:6a:a4:66:4b:21:a8:bb:84:45:c1:bc:be:04:4f:17:
89:ae:a8:3e:db:15:e7:a9:75:a4:ae:6e:aa:93:d6:84:8e:0c:
54:0e:58:04:a5:a0:70:3e:aa:bb:35:a5:8c:9d:49:01:77:1f:
9b:0d:27:63:6c:c8:80:fb:2a:88:3e:c4:69:dd:b0:29:17:ac:
84:62:d2:cb:bf:4f:9f:43:da:36:45:6b:6d:3f:58:37:87:30:
ae:9a:cb:83:d1:a5:a7:f9:fb:05:af:e1:6f:eb:5e:9c:6d:f5:
88:ec:b0:bf:0b:fe:f2:94:0b:a2:8b:5d:fb:e2:65:50:2a:15:
5d:2c:53:f6:a9:df:78:3b:21:0b:8d:c4:f7:ac:a5:bf:e2:f9:
db:9d:47:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:43:00 2025 by rpki-client