Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: 67Q2MdfU9gZgo3mDc+i35tDRJHzqO65gi+9cbcyDDqw=
Subject key identifier: 1A:EB:35:D4:61:68:56:A2:65:E4:B5:1A:FA:F6:FE:6E:53:96:CD:5F
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 0197D32AC50551FF1849CE7C4CE3DA8913D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 0413
Signing time: Fri 04 Jul 2025 02:01:24 +0000
Manifest this update: Fri 04 Jul 2025 02:01:24 +0000
Manifest next update: Sat 05 Jul 2025 02:01:24 +0000
Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: 8n51TcaX8vizDNHVvZWYZOH30OB/bztWgKBy0tEBlHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:2a:c5:05:51:ff:18:49:ce:7c:4c:e3:da:89:13:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Jul 4 02:01:24 2025 GMT
Not After : Jul 5 02:01:24 2025 GMT
Subject: CN=1aeb35d4616856a265e4b51afaf6fe6e5396cd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:d5:91:f4:4b:47:ca:0e:f0:31:ef:d8:d7:
93:48:ea:78:1c:7a:48:37:59:bd:c0:1c:c4:49:3b:
7e:89:c7:60:20:05:39:65:78:a3:09:4b:0f:1c:1e:
fd:3b:d2:e0:17:d8:27:64:bc:12:3e:28:15:33:8d:
ad:1d:e2:be:ce:c7:b7:57:34:7a:59:25:e6:2d:3e:
33:48:29:73:3d:dd:4b:72:ce:7b:51:27:7c:9d:9e:
08:66:60:81:c8:d4:5b:f6:fd:2f:28:2f:5b:f7:7c:
90:a2:f5:3d:7a:23:c8:b8:01:37:1d:a1:b0:9e:82:
66:5d:3a:08:da:94:28:e9:e6:3e:56:cb:38:e9:08:
75:27:d4:e5:af:31:e1:f7:6a:ea:57:9a:b3:49:e1:
3a:3c:04:ca:51:8e:89:81:e9:26:93:51:29:ef:d6:
b2:79:83:9d:6b:f4:e5:32:bf:c9:e0:be:80:a3:45:
3e:4e:a2:3a:7a:a5:91:2c:e2:6a:da:67:da:1e:b1:
8d:ec:eb:c2:82:32:96:90:7c:66:c4:6e:fa:51:48:
87:c7:46:60:7e:86:f8:5f:9f:d3:4f:08:8d:cf:46:
ea:94:23:3e:00:f4:d9:ef:66:21:b1:98:26:2f:ac:
ef:4f:5d:c1:11:0d:b4:f8:e1:06:b3:09:5c:ab:4e:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EB:35:D4:61:68:56:A2:65:E4:B5:1A:FA:F6:FE:6E:53:96:CD:5F
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1b:86:9d:e5:63:08:90:da:0a:f6:9c:73:a2:be:e5:0f:89:
e7:02:31:ca:dc:18:6f:23:9f:55:12:8c:cc:b8:e2:07:de:92:
52:a1:41:57:f2:f0:84:a9:95:55:40:8b:c9:18:9a:72:8f:92:
81:0a:be:16:f6:1a:bf:8e:55:b5:d2:63:1c:6c:b8:6b:6a:84:
97:e3:7d:63:a4:af:15:66:21:bd:36:24:5b:eb:46:e2:03:e5:
e9:ae:ab:1b:1d:b3:88:1f:82:67:a4:63:09:f0:bd:62:c5:a8:
70:b8:a1:bf:3c:19:34:56:1d:93:28:ce:5b:34:05:c9:4e:a5:
68:bf:20:d8:32:17:c7:67:8a:b5:ab:53:40:a5:72:09:d8:6d:
e8:ab:88:7e:f1:7a:c3:c1:4e:83:a0:a1:df:f8:34:14:c1:a3:
77:8b:36:ec:f4:40:8e:e2:7a:29:c6:7f:3a:e7:d8:ff:cb:6e:
cf:5b:8a:9f:77:c4:f5:40:c5:c2:ef:91:5b:70:d0:ac:b4:3a:
22:a4:48:3b:68:45:72:76:33:73:cd:ee:79:b4:d4:51:75:35:
a9:e4:5a:b3:f7:90:67:fe:d7:1f:32:52:99:89:0f:1f:21:f3:
7c:79:c4:cb:82:00:04:02:b9:c3:2c:e0:5b:45:9b:42:25:d6:
b5:5c:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:26:42 2025 by rpki-client