Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: iOgroocn3mEXFwsgozKMaEZBLb0rlLZhtJU6Bzgdcd0=
Subject key identifier: 98:74:72:91:EC:29:59:48:39:FA:E4:3D:73:46:23:50:4E:64:CA:6F
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 0197C6137EB62B7268A45C86F5BF44105680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0CA3
Signing time: Tue 01 Jul 2025 13:00:55 +0000
Manifest this update: Tue 01 Jul 2025 13:00:55 +0000
Manifest next update: Wed 02 Jul 2025 13:00:55 +0000
Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: sOVmKccJ94scEqInPhsH2cYoRtmp5z+2xC6x2OsJayk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:7e:b6:2b:72:68:a4:5c:86:f5:bf:44:10:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Jul 1 13:00:55 2025 GMT
Not After : Jul 2 13:00:55 2025 GMT
Subject: CN=98747291ec29594839fae43d734623504e64ca6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:61:51:b4:5b:f9:a9:e3:0e:fa:2f:08:ce:
86:cd:ae:a8:85:2c:43:a9:81:2f:e5:fd:ac:52:ad:
33:71:e3:8f:0e:44:45:a6:dc:46:74:f7:c1:3c:10:
b0:af:86:63:20:19:4d:77:d6:e9:83:1d:cc:26:24:
58:89:37:54:0d:c8:60:b3:a3:72:fd:8c:59:df:3f:
8d:30:93:df:14:49:ac:47:1e:10:83:26:71:14:4d:
d1:82:1b:bf:a8:da:07:43:d2:a6:a1:94:32:47:d4:
6f:d6:fb:ad:0d:de:c0:49:9f:ac:e3:a9:92:c9:7e:
7d:6a:15:d5:9f:84:56:a9:bd:62:7b:cc:bc:81:f3:
bd:80:41:bf:2f:99:59:f7:3d:18:5e:29:d6:ea:05:
bd:c0:2e:a8:52:cb:5d:e5:70:94:2d:61:0f:d1:64:
08:ed:29:98:65:ea:c2:11:37:51:cb:4a:16:d9:56:
f2:85:09:24:d2:02:45:e6:e5:d7:5b:50:d5:4c:cc:
2a:cc:3d:0f:fa:e8:54:b0:c3:a3:8f:41:2a:7b:ef:
7c:20:3e:f9:ab:be:93:f8:08:bf:dc:9b:6d:30:f7:
3b:e0:e1:b2:d9:c7:e3:04:34:d8:6d:e2:3d:fe:ee:
df:7a:6b:11:b1:3a:43:ad:40:e3:3b:69:f3:2e:c7:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:74:72:91:EC:29:59:48:39:FA:E4:3D:73:46:23:50:4E:64:CA:6F
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b4:f1:fb:1d:8c:41:d7:8a:77:f0:8c:d4:9a:40:d9:21:b7:
7c:9e:50:44:9c:de:65:09:bd:04:87:d8:18:cc:0d:06:40:19:
6b:98:e6:15:9c:8d:97:b2:91:df:6a:09:73:fb:f0:fd:12:f4:
69:98:c8:2f:4a:6e:87:e4:4c:f1:30:83:44:5a:93:c5:1e:64:
75:e0:73:cb:2b:46:9e:07:c9:c0:8c:ac:97:da:f6:99:79:e7:
40:61:d5:20:4a:e3:01:74:54:8a:db:73:91:aa:18:c8:2e:74:
ee:77:41:09:99:a9:18:78:7f:b7:60:33:b1:87:5f:a2:37:f8:
42:3b:8e:c0:38:3b:9d:2f:ff:17:59:21:29:ec:08:b1:60:fc:
44:12:9c:c7:33:d4:5d:72:a6:6d:5c:e6:3b:6e:74:70:85:20:
13:bb:8f:63:f2:17:aa:18:d7:93:dd:85:b3:35:ba:c2:af:34:
60:db:ed:42:1c:34:15:e2:56:6c:22:33:e5:48:6e:6e:21:d3:
39:89:44:1b:74:18:ff:1f:ee:0a:b5:31:00:b9:13:d3:1c:ba:
bc:28:0e:fe:4e:71:3d:e3:53:6e:fc:b6:7e:d7:59:45:7d:eb:
60:c2:a7:eb:97:00:f2:55:20:2d:de:7d:8e:e4:0c:33:5e:5e:
a5:b0:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:27:01 2025 by rpki-client