Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File: yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier: G5/s8sdqNwSPrs+uvehNNesYSdUoRM/MsXUWNjoEF1A=
Subject key identifier: 5B:8B:43:40:E9:C4:C4:C2:66:B6:56:E7:84:C1:00:DD:E4:06:8D:D6
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 0197B88F9841ABC39C2B66EBE25D95FFAEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number: 11C4
Signing time: Sat 28 Jun 2025 22:01:47 +0000
Manifest this update: Sat 28 Jun 2025 22:01:47 +0000
Manifest next update: Sun 29 Jun 2025 22:01:47 +0000
Files and hashes: 1: 9fWXkacnWfLXH44Xb8HrXGzmknY.roa (hash: ueIT5017I7hv93aOprGzdVNSjT4YNhBA1fdwv5/AgdI=)
2: HRQ3zVG8fQhstKqXqVzvaQOYW-8.roa (hash: J4bA2yn+4d47gpldTm1th3QAEiyAys+UIYmTMp8Fvck=)
3: KW27n6S1v0MgxCxbh7E0buBfif8.roa (hash: toMOgZfSEbU3csqRPx4QZ9cAdliSmxp8YH9UOfmQEwM=)
4: M6e0Db6rIRrut7Sf9jFsbIVLDaM.roa (hash: JXcstu8zslncBB42v+GEY3znOZDM894FUsNgQKDisvc=)
5: f9hfmHvrY5AwY36q7MIQ4falWVM.roa (hash: poIPC46neVOYvv7bF8o92LK9XXWLEMpfpDFVMKy16AU=)
6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: B9xy2LT/Ebe/7FdbFXAnUfedFksqiOxKYMxP2QNqD7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:98:41:ab:c3:9c:2b:66:eb:e2:5d:95:ff:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Jun 28 22:01:47 2025 GMT
Not After : Jun 29 22:01:47 2025 GMT
Subject: CN=5b8b4340e9c4c4c266b656e784c100dde4068dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:c7:20:ba:61:8b:51:03:9b:fd:41:eb:5e:
ac:d1:55:1e:c2:42:bf:c7:f2:0a:e0:1b:c6:86:5b:
69:04:75:b4:7f:e2:07:23:7a:04:be:c4:88:cd:58:
b6:93:62:55:d7:23:b3:30:14:87:c2:a8:71:4f:5d:
42:03:39:d7:40:84:12:07:35:73:4a:b4:3f:5f:d5:
0d:24:d9:ed:c7:af:2d:66:d8:92:28:52:47:35:a5:
0e:58:9b:0e:3e:3c:c7:f0:96:fb:13:7b:d3:ac:34:
84:82:47:64:fb:95:5a:a3:13:84:40:35:91:f9:2b:
36:4b:f0:50:e0:e4:1f:cd:4b:7d:ad:14:f8:3d:d2:
3f:08:46:c1:74:c1:75:e6:98:d5:11:b0:ab:61:4e:
dc:5c:6e:b5:d2:46:83:2a:17:a1:d4:3c:23:5a:10:
a1:d9:57:2e:75:ee:4b:68:af:b1:44:0c:15:f1:e2:
3d:36:5d:6b:ac:92:7f:11:a9:f2:f9:a3:fe:85:4e:
55:59:1b:22:00:18:99:2e:40:b6:52:7f:fa:9a:65:
88:76:e0:a7:85:84:4a:bd:de:87:7d:9a:88:42:75:
15:29:f3:c2:7f:80:ee:31:67:a6:95:d9:af:7c:85:
5d:99:dc:ae:cb:3d:2e:33:f3:93:09:24:b0:53:21:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8B:43:40:E9:C4:C4:C2:66:B6:56:E7:84:C1:00:DD:E4:06:8D:D6
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:65:cd:cf:1b:2b:e1:73:67:b5:57:3a:02:51:53:8d:b4:19:
b5:b1:20:1b:7d:84:b7:1d:2c:ef:f8:5a:cc:c5:c3:9b:d4:4e:
fa:c2:85:ef:a7:3c:02:71:1b:f3:17:2b:41:a8:08:51:91:30:
20:63:c7:b4:8f:c9:81:f2:b9:66:c2:d7:c3:a3:e2:41:0e:fa:
6b:14:b0:28:56:e6:06:b9:35:d5:4d:eb:e5:41:ef:49:02:56:
40:0b:2b:af:4a:fb:e8:c4:6e:19:38:67:66:49:8d:01:0e:1c:
d1:c1:7a:0b:29:a5:d4:5b:7b:a2:35:de:a6:5d:d5:56:de:ab:
80:57:6e:41:fb:59:7f:32:61:fc:78:e4:ab:54:74:70:ed:01:
e0:35:bc:2d:2b:a2:42:77:5c:79:e6:f1:04:08:bd:b3:1b:46:
c7:16:fd:06:23:c4:f1:78:ce:9f:24:e0:00:f2:75:e2:92:01:
15:dd:f2:8c:af:35:00:7a:63:67:9e:dd:d3:37:28:e6:63:81:
d8:af:b3:64:b5:40:28:8e:3e:80:5d:52:5d:c6:3d:22:46:d4:
e8:ab:32:d2:e8:01:b0:68:57:5e:cd:73:b3:67:ac:f6:26:a0:
cc:22:6f:9e:d0:05:ce:3c:39:34:f7:7a:9b:e1:95:d4:35:6a:
73:b7:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:07:23 2025 by rpki-client