Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: cSFXhNyJsldPWi6cYi3Z6Jeyk+pUHyzuBTCvcvo3VGQ=
Subject key identifier: EA:D8:EF:18:00:2E:6B:39:CB:2D:4F:6A:96:9B:62:73:44:C2:C4:14
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 0197B70E5E4CC60DCB192F8644EDE2F6B0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 0222
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: EqDOPr7YsfJCA7a/GtAvLTCYEynWT4ue/rzNG9FWuyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5e:4c:c6:0d:cb:19:2f:86:44:ed:e2:f6:b0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=ead8ef18002e6b39cb2d4f6a969b627344c2c414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:fc:7a:ea:70:b6:5a:14:b3:6f:03:d3:11:
bd:69:3b:1b:3d:fc:9b:78:a2:c0:b9:33:a7:f7:60:
49:f5:42:b6:b8:9b:6c:02:02:4a:56:3f:b4:c6:72:
2c:e5:8a:4f:a5:5f:1a:3a:fe:27:29:15:24:a5:5b:
3a:93:a8:9e:39:c2:4d:aa:64:81:1e:df:ba:da:12:
5c:a2:66:f4:d5:c0:83:66:11:af:5d:a7:55:26:84:
ba:1e:c1:fb:33:2e:1a:7b:f9:3d:4b:f8:cf:3f:29:
8f:3c:69:1f:39:44:9f:ee:58:b8:c6:7c:11:cd:32:
92:24:22:07:50:07:a7:14:19:a3:39:fb:39:2a:01:
a4:ac:8d:26:aa:38:2c:d5:02:ae:92:ce:06:50:61:
ad:7a:c7:2b:ec:0a:ab:41:c1:de:0c:e9:da:a4:16:
e1:f9:61:65:17:be:7b:4a:56:bf:2e:db:2a:1c:96:
e5:a0:e8:4b:37:6b:17:c3:be:7d:80:ff:1b:f6:8a:
1c:aa:37:3d:7d:68:4e:6a:34:9e:7a:65:a4:73:d9:
bc:ac:be:c3:b3:db:8d:25:ff:1e:bd:be:bf:3a:95:
57:3e:7e:43:b1:1d:dd:ac:5a:25:bf:67:5b:02:29:
9a:31:95:9f:e3:b4:8d:eb:19:49:6c:0c:52:dd:1a:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D8:EF:18:00:2E:6B:39:CB:2D:4F:6A:96:9B:62:73:44:C2:C4:14
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d6:54:0d:97:50:05:f5:8f:6b:69:7d:b7:87:6a:82:f0:60:
da:6c:af:df:36:f5:6e:24:cc:3c:9b:00:03:ad:05:15:4f:64:
87:4f:f5:01:b4:76:c5:54:b9:73:46:8f:9e:47:51:ba:2a:55:
3a:92:62:23:78:2d:e1:9b:2a:10:b3:df:4d:6f:30:ca:c8:b3:
de:15:25:72:e4:4b:b9:18:45:8a:76:90:60:4b:d4:de:a4:24:
d8:44:72:cb:2c:67:ba:bd:db:23:68:09:19:69:94:18:9b:2b:
d0:bf:9d:e4:fc:2c:09:c9:4e:a6:9c:82:dc:13:e1:44:94:52:
88:70:c2:eb:15:97:f4:40:7a:93:65:ca:90:fa:5f:50:3d:b4:
49:37:7f:22:d7:e5:84:97:e9:c1:7e:c0:29:eb:81:c4:d9:92:
a1:c4:74:99:9c:15:83:74:00:ce:3d:da:7d:50:bc:78:aa:32:
97:e9:a9:da:73:d3:eb:73:a4:d5:80:31:2b:58:e7:a9:cd:af:
ee:e4:78:17:53:31:12:e9:5e:69:28:f7:5c:ae:8f:da:87:9d:
f1:8b:62:10:ba:e0:c9:68:71:dd:42:e1:9c:96:a3:fb:55:f4:
62:f8:2a:54:d1:b2:2d:6d:34:0e:81:3f:b8:59:11:d0:6d:be:
d5:a2:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:49 2025 by rpki-client