Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: THwyfu5Op+M2pJhj+wX2ELKOLuIMcwNy5Vb+tm9KFSI=
Subject key identifier: AD:40:1D:EF:91:D9:7E:D7:AD:51:55:53:84:D3:B2:F2:09:D3:29:C6
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 0197B6A0E822AA6FE71C5E5A14650F10EBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 09ED
Signing time: Sat 28 Jun 2025 13:01:27 +0000
Manifest this update: Sat 28 Jun 2025 13:01:27 +0000
Manifest next update: Sun 29 Jun 2025 13:01:27 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: aJVOurdk1Sc5M2VlevaeIELkF4nc7eMpY01m1yyZvzA=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e8:22:aa:6f:e7:1c:5e:5a:14:65:0f:10:eb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Jun 28 13:01:27 2025 GMT
Not After : Jun 29 13:01:27 2025 GMT
Subject: CN=ad401def91d97ed7ad51555384d3b2f209d329c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:ed:87:ae:bc:f3:b8:54:1d:79:05:68:7f:
5c:cb:3b:c8:ac:7e:0f:4c:30:97:6c:15:66:53:01:
46:25:3b:82:01:06:56:24:1e:be:83:62:89:32:0c:
1f:27:d7:fc:89:7a:82:1e:43:b7:23:2d:f0:c1:f6:
f1:c0:8b:eb:2c:d8:6b:b6:1c:3c:3f:40:63:10:98:
04:a6:cf:5c:4b:51:b1:6f:b7:b5:97:cb:dd:16:ae:
86:16:94:fc:30:30:5e:60:e8:e6:44:2c:65:8f:fa:
87:2c:62:35:d9:e5:e8:88:93:04:88:aa:55:a2:e0:
38:c1:24:6f:6a:ff:d8:63:1c:a9:1d:a8:4f:ad:d8:
30:c5:66:75:16:4e:bb:a1:d3:68:c5:80:f7:6b:de:
55:7f:c8:78:66:7b:e6:07:86:19:3c:9f:1f:c1:f6:
38:ef:26:d3:58:b5:0c:28:ea:d0:11:8e:c4:a4:63:
9b:bc:b3:6f:a5:36:38:c8:e0:97:52:dc:0e:a4:49:
42:5f:e1:9f:9f:ad:b9:10:cb:dc:ad:64:00:e7:4c:
95:42:1f:9d:5b:d2:16:94:9f:15:b7:1f:1f:2b:e2:
19:be:29:35:0a:69:b3:ba:80:1d:f1:d3:e7:cf:86:
db:67:c4:32:2d:d5:e0:83:34:93:fe:d2:74:1b:43:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:40:1D:EF:91:D9:7E:D7:AD:51:55:53:84:D3:B2:F2:09:D3:29:C6
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b8:e0:80:b3:4c:d4:7f:c2:80:48:82:14:cb:da:10:33:48:
e9:7a:c4:e5:74:3d:66:7f:5c:11:5c:03:96:44:25:c0:bb:14:
df:f8:9e:94:7d:e6:e3:74:ea:6c:ac:1b:1a:80:52:ac:f9:56:
bf:86:67:00:b8:a7:25:79:ce:b0:15:e6:84:23:b1:ce:15:8e:
8c:ac:cc:e1:48:69:07:ee:38:f8:05:56:2c:45:aa:a1:b6:bb:
22:0a:99:7e:17:6d:fc:52:f3:f2:e5:bf:36:b9:1b:32:0e:93:
a9:2f:9f:a9:81:3a:b4:c9:00:c7:43:d3:16:d9:bb:1f:9a:c6:
a9:c5:0f:86:23:a1:4f:2a:80:db:f9:88:76:8b:50:75:ba:b9:
b5:8f:f2:c2:2f:a3:0a:48:00:b8:08:ee:8f:a1:af:d3:04:22:
9b:eb:40:49:48:86:b3:e6:0e:31:2a:47:01:19:c3:9c:f9:7f:
63:08:bb:9c:64:6e:fc:34:13:7b:31:b8:66:c3:95:3f:ac:ac:
fc:f3:45:f0:fa:c3:cb:d1:39:62:2b:7b:f3:1a:c7:cc:be:c6:
16:b1:69:e5:c9:da:45:cb:f6:45:e8:ef:f2:c5:e7:82:7a:2d:
04:27:a2:54:df:77:63:9c:b5:86:ee:fa:49:3d:6f:eb:5c:49:
1f:e8:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:11 2025 by rpki-client