Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: tFx4VZYUqZLxZOxoot90ceaXb0FkUjw+xtaZGi7U0/w=
Subject key identifier: 49:A5:49:49:7F:71:9A:64:C7:0D:1C:47:4B:82:E6:E9:97:4E:2F:FE
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 0197D2F3E67BE3DE0FBEB8FCAF84144807AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0E31
Signing time: Fri 04 Jul 2025 01:01:28 +0000
Manifest this update: Fri 04 Jul 2025 01:01:28 +0000
Manifest next update: Sat 05 Jul 2025 01:01:28 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: oWRV7UfOx2o8dRMfmzEJ5KRwxl6twOgXoNec4RtQCdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:f3:e6:7b:e3:de:0f:be:b8:fc:af:84:14:48:07:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Jul 4 01:01:28 2025 GMT
Not After : Jul 5 01:01:28 2025 GMT
Subject: CN=49a549497f719a64c70d1c474b82e6e9974e2ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:b6:fa:69:94:a5:f9:83:14:d4:7b:54:20:
b7:6f:67:a8:fa:b7:d3:a9:88:de:54:c3:62:4d:fb:
a0:e6:35:5f:6f:08:e2:fe:7e:ea:d8:52:78:c5:cb:
71:d3:5f:89:9e:9e:e1:b1:a8:35:ce:51:32:de:0b:
fa:7e:a5:68:40:33:83:4d:03:63:6d:58:d9:08:99:
6f:2c:ef:b4:e3:fa:7d:77:eb:fa:11:4e:ed:68:ce:
b4:49:c4:64:a0:5e:83:16:1c:d0:f6:92:88:17:06:
a2:6d:d5:93:8b:5e:65:d6:bb:07:74:73:77:2e:45:
fa:86:05:26:e2:52:d2:7d:96:84:15:6d:b2:86:93:
6a:96:e9:00:3f:2f:0f:65:f7:7c:15:69:fd:15:77:
85:11:29:17:e7:cd:63:ed:27:2c:ee:f5:5c:45:e7:
42:4b:f2:d4:9d:2c:45:9d:07:c8:c5:30:9c:b1:1f:
01:51:7d:4b:70:71:32:e9:de:d9:c8:5a:4e:1f:1d:
dd:c9:96:2c:7e:2b:cd:59:55:0f:ba:ac:c5:6d:59:
e5:fb:75:6e:d1:00:f8:92:44:ef:a5:f1:f7:28:95:
1f:e2:1d:14:dc:e2:c6:f9:a3:30:17:66:39:a2:cd:
5f:d7:97:be:95:65:b5:d1:3b:94:46:f1:de:a5:bc:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A5:49:49:7F:71:9A:64:C7:0D:1C:47:4B:82:E6:E9:97:4E:2F:FE
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cd:52:48:2a:56:0f:86:91:33:32:1c:c3:4f:43:95:43:cc:
3c:53:ba:eb:08:7d:51:29:78:4e:9f:37:99:94:69:4d:5c:82:
ec:d8:ae:3b:0d:90:43:21:0f:65:12:d4:07:e4:32:e5:a7:24:
8e:28:7f:bb:cf:06:54:86:d8:69:bb:8c:7a:e3:86:05:19:64:
4e:43:f7:9a:02:b1:8f:92:43:38:99:7f:29:84:6d:53:ea:c5:
9e:88:0b:ac:1f:90:3c:68:b3:4d:a7:10:55:79:e7:c3:03:88:
a6:ff:62:b0:1c:e1:21:a7:ff:07:39:8c:ad:8b:2f:a2:28:38:
d7:1e:5d:36:68:9e:f0:44:02:c5:ff:98:70:e1:aa:7b:f6:5f:
05:35:c1:70:b6:3b:d2:d0:3c:2f:a7:ba:63:60:6b:ca:64:44:
e8:7d:81:69:8b:15:60:2f:64:fd:4e:79:0b:ad:d2:f6:1c:54:
60:b0:e5:5c:aa:2c:86:44:d6:87:16:2b:2b:12:fc:e3:6e:a2:
fd:27:f2:09:f8:37:51:11:b7:c3:90:6e:4b:aa:49:64:c9:5e:
5d:24:77:60:48:df:42:c3:4a:b5:47:52:9b:45:a0:03:e7:05:
fd:ff:b6:50:8f:32:a1:7c:13:23:80:3e:46:7f:ea:d2:2b:77:
11:58:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:18:01 2025 by rpki-client