Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
File: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft (raw, json)
Hash identifier: 0ibjjGmkQtd9DpHLx0LzQ6iLdeKZ74H8zFmFUUbjDNM=
Subject key identifier: EB:ED:8A:04:07:96:72:FD:98:BB:72:84:4A:27:C6:F9:E3:46:1F:40
Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
Certificate issuer: /CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Certificate serial: 01984AAE8E693F0B2A01466A96EA91B89B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
Manifest number: 0D27
Signing time: Sun 27 Jul 2025 07:00:10 +0000
Manifest this update: Sun 27 Jul 2025 07:00:10 +0000
Manifest next update: Mon 28 Jul 2025 07:00:10 +0000
Files and hashes: 1: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl (hash: fVUuZCzgD34NiXjPjMqJPtpeqz06kS1KjWHXyzvdjtE=)
2: cmQy3O27JTVMgc0scAWzRQz1k34.roa (hash: JrHBwEb+drqrBDZnlCxDUthDJ1gAVyMOlFCkBCL2cqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:8e:69:3f:0b:2a:01:46:6a:96:ea:91:b8:9b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Validity
Not Before: Jul 27 07:00:10 2025 GMT
Not After : Jul 28 07:00:10 2025 GMT
Subject: CN=ebed8a04079672fd98bb72844a27c6f9e3461f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:b2:d2:41:25:c2:1f:81:8a:0b:76:3c:b4:
14:15:df:d6:cd:97:4f:85:9b:1a:3c:14:f2:8a:2f:
78:f6:69:fa:17:03:ea:f0:39:76:fc:a7:00:ca:26:
63:0a:21:61:6c:e0:f5:ef:69:72:30:9d:ee:ac:2a:
e5:79:84:bc:14:5e:13:c3:c3:40:f6:8c:b7:b3:72:
ad:f8:89:31:2f:98:b8:fc:5f:89:48:c6:b0:60:f4:
fc:29:78:2b:48:2a:83:ee:6f:6c:e7:5c:99:ce:21:
7a:ea:8a:70:a6:39:80:0d:d5:f6:f5:05:01:84:f2:
7b:38:de:68:af:5f:49:d1:89:81:92:1d:c0:d6:77:
aa:7a:76:0b:57:12:d2:e9:4e:8f:f8:90:d8:64:68:
cb:a1:4a:98:56:80:c2:42:3f:27:2e:1a:55:1f:de:
71:df:8b:9d:3e:04:39:35:7c:29:a2:41:6b:79:6f:
a7:50:d4:c8:78:c3:c6:ae:1e:7f:65:04:32:bc:15:
f0:08:40:ee:72:4b:9f:a9:81:c6:3e:5d:7e:ed:59:
bd:2d:88:15:50:c9:4a:cc:5f:4c:96:7e:02:38:01:
e8:c6:56:99:ca:8a:8d:34:ed:05:b9:6f:f3:7d:b9:
5c:84:d5:83:75:cf:db:06:a9:8f:d1:9f:47:3b:07:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:ED:8A:04:07:96:72:FD:98:BB:72:84:4A:27:C6:F9:E3:46:1F:40
X509v3 Authority Key Identifier:
keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:34:05:0c:41:3a:37:a3:18:e6:f5:e2:78:e4:44:59:6c:e1:
cc:ab:9b:3c:de:08:ac:e5:3f:b3:31:3a:9e:a2:7a:ba:39:72:
c4:77:c7:d6:72:db:b3:df:c1:d0:87:89:98:32:c0:04:e6:b6:
e5:f8:5f:d9:5e:bc:88:09:af:e4:21:8d:ba:fd:fd:1c:cc:dc:
75:0f:04:a7:5e:6f:20:40:c1:cb:04:1c:1c:d5:ca:41:fd:c6:
49:a4:c8:9a:58:9d:65:d1:cf:c4:0a:36:72:da:7e:4a:4e:41:
34:48:1a:6b:68:78:c6:c6:06:c2:b5:8e:92:9d:98:78:6f:e9:
f6:b0:2c:73:8c:a4:ac:67:ec:3f:69:5c:fc:c6:60:a9:35:2e:
91:29:62:9c:15:f8:d4:26:ad:62:d0:76:ca:35:eb:85:6c:c9:
77:e9:f8:77:70:6f:8a:f3:50:dc:22:1e:40:32:d8:a9:5e:c7:
d8:e8:0f:99:9a:38:5d:d6:e5:16:d5:a9:67:8e:aa:59:af:3c:
b4:25:00:93:23:2d:ee:f2:d7:44:7c:f5:46:a6:6d:98:da:11:
9b:e3:47:de:0c:8a:4e:22:94:8b:61:1f:3f:de:3c:8c:9e:24:
6a:7c:36:51:f9:91:83:6b:62:65:65:16:3a:b0:5b:5d:b5:32:
7d:6d:f2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:35 2025 by rpki-client