Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: ckpbnYN9wMuxqr4PTTAhTibRv7hFbiEWkA4IOX9/Sb8=
Subject key identifier: 0E:8F:03:FE:9A:F7:F0:DC:47:05:78:53:E7:37:C0:CF:57:BD:40:31
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 0197462FC8FA1CF8A6F8F91F4CB82DA35139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0886
Signing time: Fri 06 Jun 2025 17:00:26 +0000
Manifest this update: Fri 06 Jun 2025 17:00:26 +0000
Manifest next update: Sat 07 Jun 2025 17:00:26 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: Fo+O153RVFamT7JzJBiKsZpeCcAXgx4+pc772a2nsHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:c8:fa:1c:f8:a6:f8:f9:1f:4c:b8:2d:a3:51:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Jun 6 17:00:26 2025 GMT
Not After : Jun 7 17:00:26 2025 GMT
Subject: CN=0e8f03fe9af7f0dc47057853e737c0cf57bd4031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:c9:27:3d:fc:a8:87:4d:ff:3f:39:91:85:
f6:de:32:ee:e3:e0:52:83:7a:b4:d9:90:1c:2b:ba:
f5:e0:4d:83:40:68:d3:b3:61:eb:dd:56:0e:03:c6:
20:bc:30:ff:36:8b:2f:ff:88:96:38:94:80:03:96:
ed:68:fa:86:d8:f8:17:32:fd:2b:12:4a:25:4d:9d:
fe:89:33:6c:29:13:ae:ae:75:a0:fb:37:a6:f3:9d:
5b:8d:1b:ff:b4:a8:4c:49:cc:aa:d7:df:3a:89:8e:
0c:41:8d:fc:68:dd:f8:bc:bf:4f:5a:e0:35:cc:bd:
ef:5b:90:aa:e6:91:0a:81:0f:55:31:c6:a6:b6:42:
7c:b0:fe:82:49:bc:66:64:43:4f:86:22:91:29:ac:
41:df:07:dc:1b:2d:44:36:d8:66:da:a7:50:03:a4:
0e:9b:49:50:28:61:9a:1e:e7:c8:a6:53:c5:9f:82:
8a:dc:d8:2f:60:16:4d:81:40:e2:57:8c:a6:90:00:
13:00:b2:94:b6:5a:61:78:62:6b:a2:5b:c6:a0:ed:
7e:89:8f:e3:46:db:96:6f:61:1c:ac:6f:cd:a7:3e:
62:cd:4c:0d:ce:9e:a1:d5:8d:bb:7c:b4:f6:3b:37:
7e:b4:65:99:6e:f7:d2:44:d3:82:bf:6d:61:fa:2d:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8F:03:FE:9A:F7:F0:DC:47:05:78:53:E7:37:C0:CF:57:BD:40:31
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:21:59:bb:b4:a8:9e:c1:7e:0a:0e:8d:83:62:f8:86:59:63:
fa:c0:af:7a:c5:b6:68:f1:42:83:98:a5:a3:e0:09:33:5e:5f:
67:12:89:03:29:cf:79:fb:7a:49:38:30:79:73:55:37:c4:34:
8a:04:4b:5e:a4:9c:a6:87:ed:a2:b1:3a:43:88:d9:0a:5d:c9:
98:43:07:4e:ed:76:8a:5c:48:3c:4f:9e:0a:47:24:67:9b:c1:
03:01:23:4f:4b:7b:14:f8:3b:85:11:fc:4e:b8:08:49:c1:09:
fe:f4:62:ca:92:05:95:9a:66:8a:08:bc:dc:99:2d:53:e6:6e:
45:9e:a5:7b:b2:64:59:4d:73:2d:8a:65:0e:ec:8c:8c:9d:3c:
31:dc:c2:68:58:5a:80:da:4c:0e:30:93:98:fe:c7:48:e0:6a:
0f:40:60:f7:0e:6a:99:6c:c8:2b:d0:05:17:87:2a:fd:5e:68:
cc:51:d0:69:ed:da:4e:26:45:c1:96:05:b9:6b:08:49:e9:48:
e8:bc:4a:5e:dd:37:cc:68:96:11:78:41:96:35:88:71:bc:bf:
cb:bf:27:fe:01:a4:81:85:4a:5f:f9:3c:05:57:ec:dc:05:63:
73:74:20:d5:89:ca:c1:9c:7f:d7:78:c6:a1:fa:d2:8f:48:15:
4c:14:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:37 2025 by rpki-client