Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier: Meqrz2h1RZFgabkyRsKpWuN/53N3dUEgwzvBDravP50=
Subject key identifier: AA:E1:D3:77:83:35:45:C7:21:55:72:B8:73:24:AD:CA:32:1B:80:42
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial: 0197B745535144F7646129A75BE69306AD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number: 051F
Signing time: Sat 28 Jun 2025 16:01:03 +0000
Manifest this update: Sat 28 Jun 2025 16:01:03 +0000
Manifest next update: Sun 29 Jun 2025 16:01:03 +0000
Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: i0mypgP6sNVCSdT7I1Bk4r9gEfeZELvaVkWT05anGcE=)
2: b8AVOGW_uWiltgqsOrfUVPuVbhk.roa (hash: g14bBKv/Ezpz+JlzQJs8s4kzh2JITmna3X17wkbp61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:53:51:44:f7:64:61:29:a7:5b:e6:93:06:ad:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Validity
Not Before: Jun 28 16:01:03 2025 GMT
Not After : Jun 29 16:01:03 2025 GMT
Subject: CN=aae1d377833545c7215572b87324adca321b8042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:4f:f7:ea:8f:75:e4:6b:66:8f:1c:3d:d5:
7f:74:60:c9:b0:3d:56:82:96:e8:51:be:63:73:58:
da:e5:0f:3a:ae:03:21:ac:eb:92:88:b8:33:fe:e3:
4e:9d:c8:e4:66:31:6b:5d:8e:8d:9c:e2:4a:80:1b:
f2:25:a1:c9:49:a3:76:df:36:39:ff:f5:39:b0:5b:
38:53:2d:f6:f5:25:30:4c:42:97:9a:c1:9a:30:88:
b8:17:74:63:07:8c:fd:7f:c9:30:fb:3f:82:e4:6a:
b9:73:fb:98:c3:2d:16:bd:23:bd:d9:a3:60:9d:c3:
d9:cb:6f:1d:d2:c3:b1:e9:41:cf:81:78:38:d1:d6:
ad:43:8d:a7:c2:99:77:0b:31:ac:99:29:67:99:83:
bb:cf:a4:69:e0:1b:0d:d0:2a:e6:f1:44:8e:3b:fd:
ac:bf:82:98:32:3a:8b:8e:63:b1:11:1d:d2:79:98:
23:5f:c0:4f:a3:95:85:42:3e:df:ca:58:4c:23:e7:
a6:92:bd:68:29:22:6d:63:93:c3:10:5c:2d:99:7a:
e6:7c:29:62:4b:7a:4f:77:90:e9:43:0b:b6:14:36:
9c:e6:68:4a:db:e0:91:47:37:15:33:bd:76:f5:40:
f7:9e:aa:bf:df:dd:a1:74:9c:38:63:65:9f:c7:98:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:D3:77:83:35:45:C7:21:55:72:B8:73:24:AD:CA:32:1B:80:42
X509v3 Authority Key Identifier:
keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:3b:82:a1:7d:9e:93:ae:4c:00:db:40:e7:b7:63:c5:9b:b3:
22:dc:28:a8:68:d6:59:98:1b:90:b3:e5:fb:c5:4e:12:48:28:
1e:ba:5a:af:3d:14:5e:f7:14:1f:78:40:ac:28:5c:2a:a1:c9:
85:72:91:ec:a2:0d:84:b6:db:8e:23:63:39:61:fc:16:6f:60:
69:16:1f:bd:f7:e6:69:dd:96:50:87:fe:b1:76:53:ae:4f:15:
90:4a:86:8b:b2:2a:57:36:de:5f:9a:a9:76:e3:3f:9a:d8:b9:
5f:7f:c9:00:99:12:fb:b9:1d:c7:3c:cc:e8:fb:fc:c4:71:0e:
d6:9b:07:42:14:6b:50:fc:c1:5b:32:ec:f6:1d:ec:c8:37:67:
98:4f:60:2a:f2:ca:f3:8e:01:de:81:80:02:2b:2f:cb:a6:a0:
fe:31:79:9a:4d:1b:3b:58:19:a2:be:67:e6:c6:74:46:67:b8:
fe:42:df:a1:39:bd:fb:81:3a:c8:2f:7d:d5:0e:74:7f:3a:33:
51:12:91:c9:ee:42:fb:f8:a2:6c:29:38:71:f4:29:7b:fe:1e:
10:a7:d7:71:c3:0e:5e:a7:55:36:df:58:65:0a:e6:07:a1:d9:
ed:89:90:08:7f:ff:25:50:15:8d:52:b3:05:2f:08:f0:ee:bc:
15:35:a2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:46 2025 by rpki-client