Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
File: YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json)
Hash identifier: 9tMe66tTT6SwxS7HzRXyx5uCy8+/W7qXs0oIofDf1Rw=
Subject key identifier: 21:1A:AE:A5:EA:94:41:7F:E5:7A:9D:6B:10:E4:C4:44:AF:16:60:5E
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Certificate issuer: /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial: 0197B8903FFF4004C26B65F1A784A5DEBCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
Manifest number: 053D
Signing time: Sat 28 Jun 2025 22:02:30 +0000
Manifest this update: Sat 28 Jun 2025 22:02:30 +0000
Manifest next update: Sun 29 Jun 2025 22:02:30 +0000
Files and hashes: 1: TrtZuni9BXkr6xZOXYLQCg04wuw.roa (hash: SIw1RJxvKD/HG9TI34PNPQ5r5zhuKGFFi0wwoRLgCSI=)
2: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: +bFiL7LJARkzP5Uvz/t1XGYAD7KaFnl0M7NWmEEAgao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:3f:ff:40:04:c2:6b:65:f1:a7:84:a5:de:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Validity
Not Before: Jun 28 22:02:30 2025 GMT
Not After : Jun 29 22:02:30 2025 GMT
Subject: CN=211aaea5ea94417fe57a9d6b10e4c444af16605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:b5:88:14:34:4a:ca:06:6a:45:cf:e2:d0:
e4:23:bc:a5:68:ff:ce:57:d3:71:f8:ff:65:5a:2a:
03:1a:2f:b5:34:5e:1c:c6:b3:cc:5e:86:e7:eb:84:
aa:cc:83:30:b2:3c:b1:93:75:ae:ba:c5:fa:88:97:
a7:bb:d7:b6:52:3a:d5:84:62:db:c4:0f:4d:ab:4f:
a9:8b:63:ee:ca:42:37:c0:7f:83:ea:d0:20:42:05:
98:46:ca:5b:5a:b6:7c:6b:a1:93:15:4a:de:ac:c6:
5d:45:81:86:66:40:ca:c3:54:5c:42:cd:30:2c:f5:
e5:df:96:93:07:c8:08:33:60:af:18:29:95:cf:d8:
08:a3:8e:08:d2:93:52:45:4e:44:16:bd:db:a3:7a:
45:ae:c7:f5:be:94:be:cd:88:87:f6:7a:d6:b2:c3:
0d:90:e6:80:41:5f:f7:2d:26:e7:fc:0d:12:72:64:
c2:f9:c4:65:89:60:65:f0:0e:2a:26:a6:2e:47:1b:
a0:b0:f3:8b:8e:b4:97:b0:61:e5:df:ad:72:fa:d6:
64:45:96:2e:33:e3:02:cc:08:e8:37:f3:25:66:d5:
ca:1a:34:8f:74:90:f5:54:9d:93:12:14:d9:71:9f:
6e:56:e8:0b:02:23:bb:ea:62:11:bb:cd:a9:0b:a9:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1A:AE:A5:EA:94:41:7F:E5:7A:9D:6B:10:E4:C4:44:AF:16:60:5E
X509v3 Authority Key Identifier:
keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:af:44:c3:53:d3:0e:8e:d1:fd:95:25:2f:fe:0d:2c:6c:7b:
e2:35:a0:e9:23:25:aa:0b:4d:f0:84:15:68:78:c6:bc:fa:5a:
98:be:0a:8f:da:16:e8:03:d9:19:ba:d7:4d:a8:84:b3:8e:27:
b6:30:f9:33:a5:8c:da:f7:46:f4:64:5a:22:62:91:3c:3d:af:
b6:3a:8e:d1:7c:f2:e2:15:89:8e:94:10:95:57:82:a0:79:63:
e0:e1:03:b0:50:b6:3e:b1:35:e5:b9:2d:bf:ea:59:1e:b8:9f:
32:34:e8:70:f2:17:55:12:c6:97:6d:a0:62:99:27:56:b6:6e:
2f:b2:7e:c0:20:33:e6:de:f8:d9:1b:ea:ae:d7:06:3c:23:45:
e8:ec:1f:e5:f7:79:08:cf:56:8c:10:7b:f4:ee:99:33:e4:65:
2a:2e:c7:fd:09:f4:c9:2f:b7:84:be:f0:a0:cd:7b:2e:4e:a1:
ef:a5:2a:06:5b:a0:ed:fd:81:61:33:83:f5:b0:a9:84:cc:e4:
eb:d6:20:a9:bc:45:9f:08:65:bf:80:7b:80:8b:19:c6:af:fe:
03:90:90:86:4f:b2:1e:4a:8a:86:88:01:8b:aa:05:73:b1:f1:
1a:2c:0b:9f:78:0f:24:e7:43:f2:ae:c6:bc:40:d1:8f:98:13:
6a:a2:61:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:51 2025 by rpki-client