Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier: CocEG311fPd6Dpk/InVS8voGbzfbl+BIPwRYS7K+hKs=
Subject key identifier: B2:53:8D:7C:46:F1:4E:00:B5:B3:40:E6:E4:7E:92:3B:A0:0D:CB:4E
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 0197B9D9144C45B9B92FC01B26A0B18B85E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 04:01:40 +0000
Manifest this update: Sun 29 Jun 2025 04:01:40 +0000
Manifest next update: Mon 30 Jun 2025 04:01:40 +0000
Files and hashes: 1: BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa (hash: rqwF60FwzB+zZQwtQI8AX0k6qPeHy+PObyrOxNB5ovY=)
2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: ToQIHV5PMm25qkxZw6NmCik1Q8AmCdtmRet4vRPjbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:14:4c:45:b9:b9:2f:c0:1b:26:a0:b1:8b:85:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Jun 29 04:01:40 2025 GMT
Not After : Jun 30 04:01:40 2025 GMT
Subject: CN=b2538d7c46f14e00b5b340e6e47e923ba00dcb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:d6:39:fb:3a:5f:56:82:24:b2:2e:8c:79:
26:df:8d:24:19:57:ed:28:47:46:2d:42:56:a9:e3:
aa:4e:e1:d1:de:ad:14:ba:cd:6e:31:21:37:eb:e2:
e0:a6:f2:65:f7:eb:8c:d8:52:31:cd:93:a6:8f:c8:
21:55:22:6d:f5:55:20:de:7b:1e:ec:90:64:50:ed:
26:f2:08:02:3c:17:30:cd:01:0c:9f:42:47:d5:bd:
75:5a:ca:39:d1:4e:a5:fa:5f:b9:cb:5f:aa:66:52:
74:46:04:49:d8:66:47:7c:66:e2:4c:0a:82:7c:b4:
70:be:fb:32:8c:45:a3:53:77:b6:bd:77:44:e1:d2:
aa:e4:28:d1:68:28:ad:f6:31:06:24:e6:f9:b8:28:
ec:0e:17:15:8d:81:98:73:24:ee:06:11:01:34:bb:
1c:c1:e0:82:8d:29:e5:b7:5f:73:d9:2b:4c:40:1c:
22:cc:ad:ce:3b:45:6c:39:34:a5:59:83:f5:b0:3a:
12:aa:ef:a7:e7:69:8b:d8:4a:45:ab:70:d4:b2:62:
36:5a:58:02:f8:4f:0c:fe:a6:3c:a4:65:08:62:2a:
b9:72:1e:8c:35:b3:b0:5d:7b:34:d2:c4:cf:4e:a7:
78:d3:c4:04:d7:08:db:e7:15:3e:a0:91:a6:56:30:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:53:8D:7C:46:F1:4E:00:B5:B3:40:E6:E4:7E:92:3B:A0:0D:CB:4E
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9c:7c:30:48:49:af:22:65:e8:61:99:eb:72:31:d0:9f:d9:
b0:52:e5:f1:c6:f8:6b:4b:7e:36:1e:4b:3c:f3:50:2f:b2:9a:
8f:bc:f0:05:94:47:4a:fa:cb:91:16:96:54:31:76:50:3a:26:
41:24:09:e5:69:bd:1d:87:87:71:3e:13:5e:20:20:63:1a:5a:
a9:4d:9a:61:60:49:da:a4:b4:60:2a:30:ed:7a:2b:34:f9:ef:
bf:ed:76:5a:7b:2f:77:a0:7f:d7:73:68:e8:b5:05:db:9e:f3:
7a:6c:92:11:4c:3c:26:87:93:f5:87:8e:c8:ce:0b:07:d1:c6:
c9:97:4d:31:ed:ff:cf:d7:57:7c:25:26:18:9b:39:9c:a3:18:
71:57:da:90:47:31:34:a8:d8:51:bf:52:56:d6:c7:06:b7:35:
f0:b3:5b:5f:f3:19:e8:f0:1c:68:ba:6a:4b:7e:85:9f:d1:9b:
ae:be:b1:90:32:72:df:94:1d:08:40:38:41:77:e3:82:81:70:
83:29:fa:77:18:e9:24:39:db:89:b9:88:88:af:a3:af:71:0e:
14:2d:59:88:28:57:89:06:2c:f9:02:f1:91:d4:58:df:f5:c8:
e1:09:c0:94:ff:16:6c:d9:79:41:3d:aa:78:52:c4:ae:f3:b3:
6f:58:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:09 2025 by rpki-client