Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: aaXdtJNNN/E+eUMmBiwTgrLZsh0PQxUHe8E/m0pqmOE=
Subject key identifier: A9:F5:6D:28:86:F5:F3:0E:E4:E7:15:BA:92:D1:67:43:2D:C7:06:2B
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 01974D45342F18704D36D8F6F58E0B13C8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 02:01:10 +0000
Manifest this update: Sun 08 Jun 2025 02:01:10 +0000
Manifest next update: Mon 09 Jun 2025 02:01:10 +0000
Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: mGb/CaoOmzdXNKUKXBE2dD25purVFmfN+YIjpr2yrQw=)
2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:34:2f:18:70:4d:36:d8:f6:f5:8e:0b:13:c8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Jun 8 02:01:10 2025 GMT
Not After : Jun 9 02:01:10 2025 GMT
Subject: CN=a9f56d2886f5f30ee4e715ba92d167432dc7062b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:58:23:42:67:ae:35:dd:4a:4e:78:2c:2b:
ad:13:fc:7d:f3:6f:86:e2:eb:a5:33:ba:a9:24:a9:
d5:1a:f9:13:43:bb:c1:63:47:4e:5f:00:77:98:7a:
c5:02:aa:cf:5a:a3:8c:0d:82:39:de:a3:6e:94:c6:
66:f9:17:c5:21:5e:5e:c8:c1:b3:18:4c:e5:59:d0:
d9:35:56:d4:11:ba:ec:a5:57:78:6c:7f:75:42:ad:
f1:e2:02:a9:e5:d9:03:7d:8e:96:3b:c4:68:73:ba:
a3:7f:53:70:12:e4:74:c5:a5:fc:73:25:f4:60:d7:
d0:04:8e:b5:b3:2b:a7:8f:eb:78:f1:01:53:7f:3d:
ca:e4:68:3f:d6:b0:0f:66:b4:d4:a0:d9:42:b6:83:
c0:2f:c2:8b:ea:cf:ab:59:af:18:88:fd:54:73:c1:
94:b8:2c:e2:c0:4a:b2:1e:47:f3:b0:02:81:ac:8a:
e6:e7:a0:10:7f:d1:da:e1:f7:c8:23:e4:2f:0d:ff:
4c:e4:c7:54:ff:b6:1b:2e:00:86:d3:bf:d5:b1:29:
9c:6e:ac:db:ed:41:5c:ee:22:5d:d4:6b:b6:07:8c:
2b:60:3a:90:b3:fb:33:b7:08:35:4a:bf:7a:76:54:
07:7d:3d:0b:94:02:f7:a8:95:44:94:e7:cd:4b:c3:
b7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:6D:28:86:F5:F3:0E:E4:E7:15:BA:92:D1:67:43:2D:C7:06:2B
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1d:c7:f1:f9:75:9e:20:7f:98:a2:ba:ad:e5:d0:90:01:f8:
d7:d3:31:3c:11:d9:13:72:ce:0f:2a:19:a7:34:38:9d:66:92:
a6:9d:69:56:94:d3:9f:71:e5:25:5d:08:e7:21:ca:7d:0f:f2:
52:7a:12:98:7b:6d:98:d7:3e:cd:9f:aa:85:6f:64:68:a9:6c:
3c:c2:4a:94:d4:47:8d:c7:02:73:a4:54:d6:48:59:73:b8:08:
1b:bb:d3:fb:0e:92:15:6b:1a:2c:d8:aa:c7:93:e7:79:f1:ae:
62:e3:f8:28:02:2a:b5:2d:d8:62:be:85:5f:a6:8f:72:fe:05:
6c:cb:7c:d1:96:96:42:c9:8c:68:36:88:52:c6:16:41:d7:ea:
b9:e6:51:bb:e7:d2:94:64:43:9f:79:78:5b:cc:89:03:60:bd:
d0:17:64:98:3d:0f:28:76:e1:ef:b1:1c:8b:f2:04:6a:a8:3c:
4b:65:83:86:6c:84:13:32:8e:a9:d9:d8:bf:f7:d4:83:d0:f1:
ed:b5:40:49:4c:2a:22:9f:d7:6f:71:f4:d8:22:af:f1:91:48:
a3:80:ed:8b:51:10:70:2b:12:05:53:55:ed:e2:cc:90:4a:78:
33:26:c8:18:8e:d1:cf:1e:96:bb:20:6f:7a:95:6f:77:bb:1a:
43:e4:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:39:42 2025 by rpki-client