Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: 5AAbknkICna6KVS6R5BYxhzCullOFVTFYABSooXgFX8=
Subject key identifier: F4:17:84:FD:C2:88:2E:2E:E1:4D:C1:CF:BB:E3:61:16:7A:5C:AF:57
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 0197B8907BB3E00A59F81BC0FB3BF9150877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0A41
Signing time: Sat 28 Jun 2025 22:02:45 +0000
Manifest this update: Sat 28 Jun 2025 22:02:45 +0000
Manifest next update: Sun 29 Jun 2025 22:02:45 +0000
Files and hashes: 1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=)
2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: sfigDB+3rTsr/DfktGSDlKXOyDI0LAXsZYkJ7URDnjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7b:b3:e0:0a:59:f8:1b:c0:fb:3b:f9:15:08:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Jun 28 22:02:45 2025 GMT
Not After : Jun 29 22:02:45 2025 GMT
Subject: CN=f41784fdc2882e2ee14dc1cfbbe361167a5caf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:78:94:72:ea:88:12:74:2d:9c:5f:28:ff:
8e:be:c4:4f:69:1d:cc:cb:cc:09:5d:7a:0a:75:c7:
c9:c6:3c:e8:30:7f:7c:71:15:98:f3:84:ab:f2:15:
4f:fd:66:94:b1:4b:7d:71:e6:29:1c:e2:20:4b:e8:
67:4d:38:26:17:59:6c:14:56:d7:22:2e:89:08:42:
a6:ca:a0:59:a8:8d:20:32:e5:68:3b:e5:24:ab:c3:
b3:e1:1e:9e:d8:af:12:0a:49:18:65:de:cf:fc:06:
97:90:58:ee:4e:a8:6c:34:8f:d9:43:7b:5e:eb:4f:
06:a1:40:a9:11:47:28:3f:16:80:e6:b8:55:9e:f6:
9d:de:d3:a7:fb:3c:4e:43:6e:4a:4f:fb:10:10:d7:
ff:ad:ab:75:5b:23:28:cf:f4:8b:ea:6b:28:e8:cc:
7b:3d:d7:2c:93:b8:17:88:e7:35:3e:ec:2f:35:2d:
a4:1f:39:3c:2f:24:5f:45:ba:6f:e3:9a:bd:c5:2f:
1d:93:65:5b:96:4f:d8:2c:a1:af:f0:e2:ac:78:8d:
64:2a:ab:f8:12:52:62:63:a9:bd:06:fa:07:f7:6a:
09:f1:78:67:48:49:94:95:70:21:37:b0:1f:45:bb:
9e:1d:46:80:3f:a0:38:0b:5b:7a:97:6d:f4:1c:c9:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:17:84:FD:C2:88:2E:2E:E1:4D:C1:CF:BB:E3:61:16:7A:5C:AF:57
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7d:e0:c6:49:69:9f:eb:8f:58:86:25:8f:f0:4b:3f:5f:ac:
d6:ce:7b:9e:b6:aa:90:bf:18:34:3d:7d:7c:f7:5f:21:f4:5e:
05:56:15:7e:35:ed:fd:8d:30:81:2c:1f:27:80:50:3e:91:68:
cb:60:38:86:69:e2:33:87:8a:67:e1:22:69:e9:61:b8:51:d5:
22:36:07:4d:1d:ec:79:91:f2:9a:0a:a9:a1:ed:60:95:c8:fa:
1c:47:14:fb:5c:f6:f7:6d:6e:c2:3d:70:5f:67:b5:3a:0a:a7:
be:f4:ae:7b:75:90:3d:56:68:de:4a:ce:ae:87:09:dc:8a:8a:
8f:78:85:44:94:68:ff:9e:c2:66:f3:81:f4:04:48:9b:37:73:
6a:37:99:bd:79:b4:41:a8:d8:56:bf:e6:aa:45:6c:ef:90:e3:
6f:79:13:92:90:cb:75:6a:a8:27:b4:f1:39:ca:1e:76:01:c2:
aa:d1:2b:59:1c:d7:be:22:14:02:3f:2d:99:5e:a6:85:a1:3b:
31:eb:08:9d:7f:c3:44:4b:6f:7c:2c:da:ae:c0:5c:50:e3:45:
f5:8d:36:87:eb:3b:85:6e:ec:bd:b4:cd:57:8f:c3:31:cb:1e:
7e:3f:91:15:d8:95:f0:4f:09:b5:05:1d:2c:6a:65:28:3c:1f:
ed:ba:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:37 2025 by rpki-client