Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier: boyBpSCngmzMt78dl6Qv3lenlJhxrAAdUB2FOe+G9n8=
Subject key identifier: FB:37:92:D8:18:3A:D4:C4:0A:CE:98:4C:AD:F5:D5:3A:C4:0E:1C:08
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 0197B6D75F67A6FD2BAD0DFB9727B9B76B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number: 0122
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: DIvBgZwS0Tso3aVf8EICkFleMLM.roa (hash: uFxBmENfxdwwVihL06QRGFulr8RLsRLP+PeZmW4yvHM=)
2: ciHagOHLSoKpc1FusaVxL3_Ptq8.roa (hash: qVZyRrrycJITJq8e+Oqg9n1s/m1DGfbQ92cmAOV1Z5A=)
3: hebYL6M-z610FLivX7dM3OowSRU.roa (hash: IcjCerJ7GmqoXjZHtfS/CxBpCm6nwEU8LVGTcI76v2s=)
4: xIyXjBVQ6PY7db0-kU0MPNqfG_k.roa (hash: hoQlQ49AMRXyr8IYH6xHVURJ84d0LGLOqucCIHUfGFM=)
5: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: D/4RJ8LeDG+fzo0L4uPHWk3Gt/PwP4ycEZduXbjRZaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5f:67:a6:fd:2b:ad:0d:fb:97:27:b9:b7:6b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=fb3792d8183ad4c40ace984cadf5d53ac40e1c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:08:32:07:1c:8f:5f:6d:9e:bd:ef:d3:6a:
f0:7f:f8:30:07:0e:f8:6a:ee:18:7b:e8:42:fd:ff:
63:f6:c5:07:ab:f4:d6:9b:12:5f:de:9e:c5:4f:a2:
8d:b2:fc:83:9a:c0:15:09:2a:50:c7:44:62:ed:4e:
22:37:1e:c7:61:75:fb:67:9c:4a:8c:65:ee:e7:84:
f1:52:d2:8d:3d:47:3d:b3:76:d5:46:79:50:ba:ac:
dd:6c:0d:b6:a0:f6:ea:3e:36:ff:4d:11:d9:8e:cf:
99:68:34:93:03:ec:aa:8b:a8:d2:3f:4e:23:03:80:
85:9e:fe:60:e8:92:d8:92:0c:1d:8e:fa:ad:91:30:
52:ae:41:2c:07:01:16:1d:e5:e8:ea:d1:78:79:1e:
ff:73:8b:0c:e2:1b:4d:51:83:ab:eb:27:6c:12:10:
e1:ef:c2:a9:f6:2e:0e:fd:14:f2:2f:a8:23:27:05:
73:c8:6e:58:3e:fc:16:14:d8:9e:c1:22:8f:07:9c:
a4:30:02:b2:e0:5f:cd:b5:bf:67:a7:c5:61:8f:5d:
01:32:8c:63:bd:dd:ae:2d:ff:f2:ef:33:d9:d1:7f:
af:1c:b3:35:0f:b9:84:f7:ca:4c:ff:33:34:41:d9:
8f:b7:ae:21:be:79:cd:bc:d3:b4:c5:5f:94:c8:79:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:92:D8:18:3A:D4:C4:0A:CE:98:4C:AD:F5:D5:3A:C4:0E:1C:08
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ff:52:93:0d:bb:8b:6c:ba:3f:c2:d8:aa:59:15:6b:fa:ad:
f8:90:f0:c8:df:26:74:52:b7:5d:28:58:4e:7b:b4:17:3c:d7:
da:f6:a6:8d:f7:4c:bd:f4:e6:8d:3a:8b:e8:a8:04:91:a3:8c:
3c:8d:b0:e9:38:ce:38:6b:7d:06:e2:cd:04:df:45:c9:8b:e3:
d5:f9:2b:f0:14:a8:fc:7a:3b:93:d7:2e:50:25:9a:a0:6b:7e:
70:11:4a:30:98:b5:18:bd:09:c9:5b:41:64:67:18:1b:00:d7:
ac:1e:c4:35:8f:06:93:c8:cf:c2:b2:4f:34:0c:84:71:f0:ca:
38:73:db:7a:24:31:e1:5d:c9:fe:bf:7a:85:2b:1e:58:c3:19:
ea:77:0c:ac:17:9c:2a:2a:8e:fb:15:1b:52:b7:a9:c6:c6:3d:
51:e0:1c:ee:65:c3:c1:18:47:41:12:f2:81:e0:d0:55:e2:dc:
bd:ae:52:bf:25:1a:78:2d:c3:e9:73:4a:81:80:c2:b8:d6:29:
34:f1:62:b4:28:1a:ac:00:37:a2:47:15:35:3b:7c:54:06:7c:
fe:e6:61:f6:55:a8:65:11:13:aa:80:bf:60:9e:e5:18:97:31:
08:7a:68:a9:43:15:d1:be:d6:57:87:bc:35:10:0c:01:67:56:
b8:da:17:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:59 2025 by rpki-client