Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: v1EOT1+p7GuO9K0oae/wWEQ/JqGiv7hiIq4mQ+kHl6Q=
Subject key identifier: EA:3C:E7:51:B5:81:A8:1A:13:27:3B:4B:78:A3:F1:5F:EA:CC:27:B9
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 0197B5C4B659373E3851FE465493CF3EADB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0A9C
Signing time: Sat 28 Jun 2025 09:00:57 +0000
Manifest this update: Sat 28 Jun 2025 09:00:57 +0000
Manifest next update: Sun 29 Jun 2025 09:00:57 +0000
Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: rbSSGvKlmoQM9/Mns4zVH0Prjlos96wlbjg7xHV8gPo=)
3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:b6:59:37:3e:38:51:fe:46:54:93:cf:3e:ad:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Jun 28 09:00:57 2025 GMT
Not After : Jun 29 09:00:57 2025 GMT
Subject: CN=ea3ce751b581a81a13273b4b78a3f15feacc27b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:35:45:6a:74:9b:5c:23:ed:9d:07:68:3a:
b0:b1:3d:d6:89:28:c2:7f:a6:d1:05:cb:a4:ec:4e:
2a:55:f9:f5:da:14:4e:07:09:f6:93:6a:f6:72:35:
cf:4d:57:c8:0e:ae:2e:1a:26:12:fe:4b:54:8b:02:
4a:8d:16:55:ad:39:a1:de:a1:d2:c3:69:76:8b:e5:
85:0a:f3:07:fd:f4:e2:89:4b:dc:d1:69:42:9d:4d:
16:2c:85:d8:c6:ef:85:88:7b:de:1f:cd:11:54:c6:
02:89:87:bc:e8:87:52:c3:54:de:9f:4e:4f:6b:e2:
4b:4d:72:14:e6:fb:29:9c:03:53:40:5b:6e:10:c1:
3a:b4:cd:3e:32:35:ed:be:da:19:90:33:4b:ff:52:
16:2a:32:bc:a3:09:1b:07:1a:41:9c:70:c2:b9:1c:
1d:b5:e2:68:59:d4:a6:6e:a9:c5:84:e4:ef:5f:fe:
ab:71:a7:4b:6e:c0:3a:ae:1d:50:8e:4a:de:6e:2c:
76:3f:b0:45:f6:e8:b1:84:3b:de:0c:f5:91:a4:20:
38:7c:6c:2d:09:5c:16:21:f7:96:92:77:b9:68:9d:
82:ac:9b:aa:30:81:13:e9:0d:59:1c:ce:43:f9:d2:
99:ce:7e:97:43:80:01:d6:19:ae:09:77:39:6a:16:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:E7:51:B5:81:A8:1A:13:27:3B:4B:78:A3:F1:5F:EA:CC:27:B9
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f0:f4:13:1f:3a:4a:66:72:92:5f:8f:65:59:66:e8:14:89:
38:0b:5a:62:80:d9:b1:68:01:74:7f:16:f5:16:27:b4:46:a2:
93:7b:e0:6d:2c:30:96:c6:59:8b:a7:76:c7:65:3e:a9:a5:10:
29:5f:d3:ac:29:6b:d0:37:4f:0b:1f:29:90:5a:5e:02:a9:b3:
6b:02:16:0e:80:56:94:d8:45:1e:c0:69:d7:7b:a9:4e:76:0b:
5e:a2:cb:8d:fd:f7:f0:2a:24:4a:ea:c5:16:4f:0d:ef:5e:a1:
0f:6f:18:d1:59:38:26:5c:60:dd:01:87:9e:ff:ee:0e:94:45:
56:e7:0d:28:14:0b:2e:e0:01:6c:74:88:03:df:54:ca:d6:61:
15:e8:ad:5d:4b:52:69:cb:76:64:58:88:3e:fb:ea:9c:aa:47:
a1:15:21:0a:9d:ab:c9:b6:67:5d:d5:71:27:16:36:ad:e8:e2:
0d:3d:64:d4:e6:57:5e:4e:5c:f5:6a:b3:a6:a1:08:d8:d3:1c:
9a:b0:84:06:7b:fd:57:19:70:1c:71:76:6e:79:17:10:3d:06:
98:a6:4e:4c:51:97:12:b4:07:7f:54:c2:a5:3a:d1:34:a3:98:
20:72:33:b3:06:b4:42:5e:5c:0f:de:f3:ca:15:27:3d:23:70:
ec:e1:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:03 2025 by rpki-client