Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File: ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier: n1atrlP527DA/uOaTS7sQg0W1h70mVAbgPJJKpDer6w=
Subject key identifier: 2E:0A:5B:50:1C:C8:6A:80:49:F2:9D:D6:27:8B:02:71:6D:C1:26:DB
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer: /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial: 0197B9D908AE912273FD20EBD0BEADB52718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 04:01:37 +0000
Manifest this update: Sun 29 Jun 2025 04:01:37 +0000
Manifest next update: Mon 30 Jun 2025 04:01:37 +0000
Files and hashes: 1: NA5mgzoDK6jbbKh48XeliWtbDYM.roa (hash: 9nIV3wU01lTdftDhSQVjEb+D2h3DXok24aEDQGNAM3o=)
2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: 8qRyjnxPpZZaoj2dKQyuOHvqExpZBqP+Jlk80b/1L+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:08:ae:91:22:73:fd:20:eb:d0:be:ad:b5:27:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Validity
Not Before: Jun 29 04:01:37 2025 GMT
Not After : Jun 30 04:01:37 2025 GMT
Subject: CN=2e0a5b501cc86a8049f29dd6278b02716dc126db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:a6:75:57:4f:32:60:57:51:d6:d0:5a:51:
fc:fe:b0:c4:62:01:fa:1e:92:41:25:79:9a:f5:a5:
b9:da:3c:9f:04:43:e2:45:ec:f7:7c:19:bc:86:5b:
7a:41:ea:f0:ee:ea:0b:da:16:12:b6:9d:5a:d0:60:
c3:59:44:97:40:e2:f6:8c:cb:07:28:e6:50:cc:7e:
0e:8b:aa:b4:b0:fb:02:dd:60:fe:2d:d2:30:bc:aa:
4e:2c:5b:85:55:72:58:a8:f9:90:34:95:2c:13:51:
51:2b:b4:0a:71:13:eb:7e:66:a4:2f:0f:42:4e:52:
dd:e4:71:01:bb:0f:63:82:a3:ad:f3:9b:6a:d6:ca:
61:4a:75:12:51:72:a8:27:80:c1:69:25:a5:90:fe:
23:0c:96:e8:36:da:d1:3c:b1:7d:52:b0:a4:42:4c:
07:90:3e:30:56:14:30:3a:ea:4e:10:86:71:c8:b4:
04:dc:03:8c:68:d9:72:00:33:0a:68:14:89:8d:c1:
cc:66:ec:bb:33:11:71:89:27:28:98:d1:54:96:30:
4a:68:a3:57:93:b1:9e:2c:d5:41:b6:72:4e:00:14:
f2:bc:d5:6a:97:04:69:85:b9:b2:ec:e9:da:f4:52:
4f:58:50:f5:41:af:14:12:e0:cf:14:14:1d:6f:e4:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0A:5B:50:1C:C8:6A:80:49:F2:9D:D6:27:8B:02:71:6D:C1:26:DB
X509v3 Authority Key Identifier:
keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:22:cc:6a:e0:d1:c2:db:08:e6:98:45:35:c7:a8:de:b8:7b:
21:d3:c9:d3:9e:34:41:cd:b7:8c:74:6b:d6:d4:1a:0a:f9:d7:
53:6b:93:ee:58:4d:7a:1e:93:17:7a:e3:45:48:cb:48:b7:cd:
c8:07:bc:cb:a0:25:f3:c2:98:32:47:54:82:fd:b6:f0:cf:20:
58:64:86:7b:b4:f7:71:25:c3:f7:d2:d2:de:1d:48:53:5d:1e:
16:fd:2a:ba:9d:a2:fa:be:83:57:8d:17:82:86:d9:7a:2d:0b:
aa:d8:4c:9b:bf:b3:b9:5d:71:9b:ec:94:60:08:58:78:f7:ba:
56:af:b1:0c:40:5e:f2:83:ed:f1:06:91:95:f5:30:75:88:a6:
27:2b:be:71:42:4f:7b:d8:1e:ae:61:40:7b:3c:f3:e8:5d:45:
cb:d8:34:46:06:a6:b1:1e:f9:5f:7b:8d:9d:e1:8b:6b:c6:64:
95:af:e3:79:72:5c:eb:4f:fa:6d:81:12:91:d8:c8:be:40:00:
63:78:7d:d6:19:1f:5a:76:45:46:47:89:02:ad:06:e9:f8:30:
36:69:fc:ab:16:89:1f:f5:48:ac:e6:80:f5:bd:ea:7f:46:ea:
03:70:49:c3:a3:f5:7c:eb:63:45:d6:64:e9:22:e0:7d:c9:a1:
85:39:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:06:20 2025 by rpki-client