Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File: yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier: onR2BRnMSbssNwaxhIzwmHDC+5CIFQraW/DsColOCJ4=
Subject key identifier: 99:C1:64:DF:B2:3C:33:28:F2:61:62:3C:B5:F1:7F:AD:00:0E:15:2F
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial: 0197BAB42EC104FFF1EF5ABC39F3C3BE57C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number: 0C97
Signing time: Sun 29 Jun 2025 08:00:59 +0000
Manifest this update: Sun 29 Jun 2025 08:00:59 +0000
Manifest next update: Mon 30 Jun 2025 08:00:59 +0000
Files and hashes: 1: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (hash: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=)
2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: D7Kwfi/Pn01vwsYAESpz6H1ve+GlYD6AM4/n5sDltN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:2e:c1:04:ff:f1:ef:5a:bc:39:f3:c3:be:57:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Validity
Not Before: Jun 29 08:00:59 2025 GMT
Not After : Jun 30 08:00:59 2025 GMT
Subject: CN=99c164dfb23c3328f261623cb5f17fad000e152f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:f3:9f:60:96:85:14:31:6b:06:84:b9:f0:
8a:a9:95:b8:c3:08:f2:b3:88:13:c7:fe:f5:47:cf:
71:88:b7:22:d8:94:16:95:40:5f:ad:e7:bb:16:29:
07:74:80:e9:e4:b6:08:10:68:fd:20:d5:20:74:7c:
18:bd:16:2f:76:65:f9:bb:d6:34:c2:ef:95:1d:0e:
e7:64:e6:6b:93:a5:39:9f:db:64:c1:c4:be:fc:d1:
58:7c:53:49:03:3a:cd:db:bd:05:2f:07:0f:94:c4:
da:ec:ed:09:e1:94:a5:94:8f:31:4c:83:35:44:dc:
39:5a:36:4a:36:7b:5d:9d:c6:6c:6e:d3:af:be:a9:
1e:32:b0:49:5f:ee:78:71:8a:f2:32:33:b8:6c:5d:
6a:40:20:eb:eb:64:43:f4:cd:01:42:a1:bc:c6:d8:
6b:39:d2:ae:ea:dd:f6:8a:14:c1:66:d7:f2:83:5e:
52:ae:c1:0f:8b:af:a9:21:7e:92:03:b5:f5:da:c2:
be:b6:e5:71:b4:07:f7:d2:30:19:79:da:4e:b4:8e:
d8:c6:05:06:3d:9c:83:ef:7b:3c:16:57:2a:66:d6:
03:86:1e:a2:68:ff:7a:5a:06:49:30:d4:1c:28:c8:
52:fc:b8:85:38:9c:52:a3:97:c2:8c:a4:f2:40:bb:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:64:DF:B2:3C:33:28:F2:61:62:3C:B5:F1:7F:AD:00:0E:15:2F
X509v3 Authority Key Identifier:
keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7c:54:04:66:07:d0:25:98:55:e1:b7:57:6d:15:29:b3:d0:
e9:5d:34:d8:62:fd:c1:da:bb:2f:a7:10:81:79:4c:65:d7:05:
83:98:89:1b:db:e3:ac:3c:6e:f3:94:41:76:d3:14:3f:b4:c9:
3b:1e:02:4a:8e:17:56:db:3b:41:f6:40:fb:8c:3e:df:2a:36:
96:10:fb:97:60:9c:c4:80:26:64:b4:0a:0c:36:23:bb:5b:2d:
72:2d:50:93:07:33:46:78:ea:b4:9c:27:8d:71:75:74:c0:4a:
a5:2b:0b:47:22:ed:28:ad:14:6b:72:d1:16:a4:15:c2:b8:38:
e0:47:12:27:92:e0:66:58:1c:7a:1c:0f:e1:e0:cc:d6:f0:6d:
b2:c2:0f:fd:7f:25:81:c9:36:bc:3f:e7:17:fd:a4:95:d8:33:
5f:21:2d:59:84:82:28:c1:b7:26:f7:4d:b8:da:52:01:5b:8a:
67:0c:60:34:31:16:9e:e2:12:e9:f9:01:1c:ec:c6:69:91:e7:
0c:c8:e3:50:f9:d2:d8:f6:81:d3:c3:31:76:0f:25:ac:cf:21:
82:2c:d6:54:a7:99:50:15:bb:bd:37:24:b8:f5:9e:b0:ff:e0:
67:be:c0:8e:3a:fd:22:0c:b5:7b:00:86:65:df:10:c2:3d:c5:
56:9b:f8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:05:37 2025 by rpki-client