Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier: thPt7KMjSIErdygK5649x4c9mG+BaZjo6AVeFyJHVY8=
Subject key identifier: 42:AD:BD:6F:6C:37:E4:F3:F4:0E:CE:77:1E:91:2E:46:45:1D:BA:B3
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial: 0197B77CA8E4038FDB671A0E989D5DF6585E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number: 0358
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: 9hSS_TvQhCvC8fhsSyJYV-rq3kg.roa (hash: IKnNzHp7XVRMYKLUBlGGbOEdrSNJK7VVnYm2JR8nfXc=)
2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: czN+T8d/3cXVOd4UwV/yQNMRO4WAfuSmF94ezHizfVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a8:e4:03:8f:db:67:1a:0e:98:9d:5d:f6:58:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=42adbd6f6c37e4f3f40ece771e912e46451dbab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:ac:ea:2f:ab:4d:21:fa:07:8e:47:76:ad:
e8:d9:31:c2:ea:70:f5:28:8f:93:70:e1:f2:ba:a0:
fd:05:f1:b1:b6:3d:98:2d:aa:de:e5:f1:be:f7:a0:
e8:57:71:a5:62:4d:91:4e:d9:05:86:f5:e7:53:7c:
0e:b8:aa:b4:b7:74:f9:75:bb:3a:f9:ba:34:eb:84:
46:db:52:d8:45:ff:ce:82:84:39:87:7c:b4:60:b0:
cc:0d:f2:df:ac:39:2c:dc:64:8f:d3:8f:dd:62:c2:
08:54:c5:fb:51:0f:13:24:fa:5b:36:0b:ec:81:b9:
8a:db:2e:d4:95:ed:16:65:d9:2e:63:cb:ee:b5:10:
1e:fe:82:f6:11:ce:71:0d:76:2f:c4:bc:18:12:8c:
a7:3e:4c:01:61:1b:79:18:36:f1:32:96:08:f9:4f:
7b:a8:f6:d2:60:e3:31:6d:78:71:55:1d:a9:13:52:
a5:e2:5d:ca:54:f7:8b:2e:b3:23:54:2e:47:56:4b:
14:35:b6:8b:af:0b:95:08:e8:a0:a2:89:87:ff:a2:
64:1f:f6:a6:e9:94:5f:7b:bc:87:91:68:ee:a7:0c:
4f:5c:94:0b:ef:0a:79:d5:b1:3a:5c:91:aa:0a:82:
b8:8c:9b:0f:9f:91:71:f6:a3:bf:81:63:5b:ca:ca:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AD:BD:6F:6C:37:E4:F3:F4:0E:CE:77:1E:91:2E:46:45:1D:BA:B3
X509v3 Authority Key Identifier:
keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:94:03:b1:db:5a:11:d5:60:82:31:03:d4:64:4b:53:f2:02:
9e:94:22:c6:86:21:4c:fa:41:1b:71:86:a8:ae:98:97:8f:49:
c5:ad:81:6d:ab:18:2a:1e:65:e1:3c:e1:e0:7d:cc:db:42:57:
a0:dc:38:f7:06:16:0f:c9:4b:e2:20:0e:c2:30:69:78:06:95:
b4:76:ff:5d:25:a5:7c:ed:5b:60:6e:a9:4d:a0:22:7e:b0:33:
61:58:f1:e2:2d:48:0f:3c:4b:14:8f:c0:73:67:b0:3c:94:aa:
fc:52:d4:05:b5:7c:0a:04:60:e2:88:8f:04:61:6b:df:19:4c:
d7:07:c0:a6:25:07:02:4b:c8:a7:77:73:63:91:18:cd:f4:d5:
d0:2a:39:69:05:a4:d2:b3:0b:c8:6d:92:e3:8f:bf:42:3c:14:
b5:e6:59:fc:25:54:4f:03:43:49:6d:c9:ff:9a:3b:db:1b:c2:
81:45:63:31:c0:1e:eb:60:88:83:5c:97:11:4b:b2:a0:fc:34:
fc:11:f2:c6:0e:db:e6:c9:5d:c8:35:6d:37:62:60:ac:6c:99:
00:95:66:0e:d2:9a:65:58:13:5b:28:22:6e:52:cd:68:1e:83:
32:d2:9c:a9:d6:2f:04:5b:0c:cd:2c:c0:0a:42:54:3a:c5:fc:
b8:6e:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:36 2025 by rpki-client