Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: 33SgHCQcfNUwccDgCGWPRtklpfMxyJa0bu2RyL3PXfE=
Subject key identifier: 4C:EC:A8:6B:5B:8E:1F:BC:B1:1B:C7:B2:FA:94:E7:83:B0:97:5B:9C
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 01974E204525B1BF1DD11F8F9F2B2ED03253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 06:00:26 +0000
Manifest this update: Sun 08 Jun 2025 06:00:26 +0000
Manifest next update: Mon 09 Jun 2025 06:00:26 +0000
Files and hashes: 1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: bfv0af1Mr6Xg6s0X6QRpjDC1RD51PyvhOGZ3fk908PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:45:25:b1:bf:1d:d1:1f:8f:9f:2b:2e:d0:32:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Jun 8 06:00:26 2025 GMT
Not After : Jun 9 06:00:26 2025 GMT
Subject: CN=4ceca86b5b8e1fbcb11bc7b2fa94e783b0975b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:d9:64:33:34:89:65:8b:59:55:72:21:11:
0a:d9:82:54:06:de:f4:39:0b:63:16:2a:e0:6d:53:
d2:b6:a7:55:1b:7c:3b:e7:19:5f:10:c5:7d:59:14:
25:77:ff:e2:30:ee:c2:d6:f9:46:4f:f8:af:4d:b5:
2d:03:f6:99:68:12:fb:95:a7:e9:c9:f9:72:05:84:
a8:e2:c0:a5:0f:9c:cb:31:0f:07:e6:ea:f2:49:17:
20:5a:55:05:ff:b7:a0:73:ac:be:fb:85:0e:fd:d0:
c5:44:76:61:f9:45:c3:07:f7:9f:78:38:45:f3:fc:
3e:4b:6d:75:6f:a9:61:5b:56:87:40:c6:1f:bc:fd:
01:3c:3a:1c:4b:70:ed:df:8f:b5:26:0e:d6:9a:61:
b3:74:60:9d:65:5c:03:4a:9c:35:47:1f:59:38:0c:
ca:ee:b2:5c:06:e9:ab:e7:ea:cc:d9:04:4b:c2:be:
3c:7d:2d:a5:a2:2f:32:98:ae:03:24:3f:d0:00:7b:
4e:26:12:74:d3:91:c2:a7:ea:d4:02:59:7a:69:d1:
b6:bd:3b:6c:84:f5:dd:dc:31:22:d5:f7:34:cf:e9:
3d:c3:ad:fe:cc:61:3c:49:07:10:6b:31:cf:63:3f:
25:88:2e:56:1e:ab:4c:eb:fc:ba:a8:53:62:e7:49:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:A8:6B:5B:8E:1F:BC:B1:1B:C7:B2:FA:94:E7:83:B0:97:5B:9C
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:30:4d:fd:28:cb:3d:1f:c7:bf:88:a2:08:a1:0a:e9:23:c3:
b6:6c:01:bc:f9:ae:62:74:df:57:d8:dd:15:69:53:cd:b2:fe:
f8:b2:22:0e:8d:0c:23:bb:0c:3c:cb:70:12:5f:3c:4f:d3:4b:
56:b3:66:a6:19:31:aa:78:db:22:b5:14:6c:6d:4d:90:18:1a:
0e:43:0e:f1:da:4c:40:04:bf:e3:38:48:1b:52:e5:b0:65:2d:
6c:86:44:80:ac:50:02:6c:9a:39:88:9b:a4:76:bf:83:c2:ad:
6b:db:48:04:0f:d6:69:8b:a9:ad:9a:19:90:ba:b6:12:de:f1:
a0:5c:be:03:78:3f:f8:50:07:1e:92:1a:b6:89:0b:8d:09:85:
7d:1d:ca:6f:1d:af:08:0a:d7:b7:d2:cf:a8:04:d1:72:20:5e:
f3:a0:ee:a9:d9:68:3b:c5:02:13:9b:08:2e:29:9f:c7:cb:10:
89:dd:70:03:ce:f6:c1:68:26:c6:ae:ef:76:12:03:f2:2f:36:
7c:18:c5:38:b9:ef:ea:8b:79:c7:fe:bc:12:c3:e5:ac:75:36:
df:60:5f:8a:af:ae:52:9d:5d:1f:42:3c:18:6d:3f:87:23:dc:
46:fc:84:41:d1:3c:4a:42:2c:ab:6f:f1:13:40:16:5f:05:1b:
57:0b:2a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:48:22 2025 by rpki-client