Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: AHw9wSsVrK68yb3WS5PmHh3fviL3D+7Ol/AoKbe3QcM=
Subject key identifier: 88:4B:BB:EE:65:46:DD:C2:73:EA:73:BF:BE:85:B2:59:7E:4F:76:82
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 019751C5F857F026F9FACEF6B93F2DEE4512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 101E
Signing time: Sun 08 Jun 2025 23:00:18 +0000
Manifest this update: Sun 08 Jun 2025 23:00:18 +0000
Manifest next update: Mon 09 Jun 2025 23:00:18 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: NQgHr1ilXt6nDmL4TaOxM8gCnq2tdsJnekMk2872A1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c5:f8:57:f0:26:f9:fa:ce:f6:b9:3f:2d:ee:45:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Jun 8 23:00:18 2025 GMT
Not After : Jun 9 23:00:18 2025 GMT
Subject: CN=884bbbee6546ddc273ea73bfbe85b2597e4f7682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:ff:99:a2:8b:57:9d:37:df:88:27:e5:35:
b8:90:50:45:06:3e:df:37:61:13:78:f3:81:56:9b:
0a:c5:b3:94:fb:d9:65:a4:31:0b:25:58:0a:79:2c:
27:cc:36:01:4f:fc:a0:5d:44:8e:56:8e:64:ac:bc:
03:82:cf:a9:f3:87:1e:34:fe:73:07:2b:66:90:2a:
5f:fa:15:a4:e4:08:0b:3d:10:85:61:58:16:d6:df:
c7:65:89:39:95:50:bb:1b:19:b3:22:bb:39:26:af:
cf:a3:29:4b:c2:d6:6a:39:50:46:97:48:97:16:70:
13:99:3f:1b:c8:71:3a:4e:07:7d:8e:1b:8a:9a:cd:
a2:3c:e0:26:55:7c:c6:5d:0a:4c:ef:13:41:ac:82:
fe:4a:3b:4a:95:ae:c4:e9:7b:78:1c:7c:d3:92:5f:
f8:93:5b:72:b9:06:8c:d1:2f:b2:d4:62:5e:e3:7f:
96:a9:67:26:32:60:e6:2f:9c:22:4a:8a:cc:de:b6:
b9:72:6b:30:bf:94:75:c5:95:31:e8:2f:23:37:2b:
97:cf:5a:1b:11:3e:2b:a5:70:fb:b5:4c:10:aa:37:
19:76:db:fc:8b:51:4a:d1:39:59:24:b5:6d:95:cd:
f4:2a:26:e3:86:00:2a:37:11:b5:ef:2d:bb:88:32:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4B:BB:EE:65:46:DD:C2:73:EA:73:BF:BE:85:B2:59:7E:4F:76:82
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:eb:ec:2b:31:61:4a:a5:3e:3d:d6:f7:b7:64:ef:5e:ce:9a:
85:0c:f5:09:24:cf:b5:dd:7d:87:1f:53:b2:cc:a0:45:94:77:
ee:36:93:00:fe:4b:e4:3a:f9:69:a6:4b:12:a2:24:19:c7:6b:
b3:bf:d5:8c:d1:7b:b6:97:8f:6e:78:2a:7e:ba:5a:04:4b:7e:
1f:a6:13:49:d8:3b:4c:5c:e3:c7:17:9b:b1:0a:d5:38:cc:48:
d5:29:0e:39:74:a0:52:a3:51:4f:e0:98:38:57:df:f3:69:34:
a6:0a:38:e4:a6:79:00:b6:13:28:08:7e:e6:59:a1:ec:0f:c1:
a6:79:c7:ac:8a:de:97:27:4a:31:a1:07:52:3a:f5:e2:0c:1b:
8b:eb:96:6a:90:00:63:18:00:ef:b7:e0:dd:df:a6:3f:5a:a3:
9f:a7:f5:4d:6d:fb:be:09:f7:d0:85:42:7d:b3:fe:02:f2:5d:
ce:7f:a4:52:12:3b:a8:cb:f4:bb:2e:24:61:89:79:e8:9a:06:
f2:6c:9e:dd:bb:d9:c8:0b:5e:f8:23:ee:40:4e:1f:15:04:d6:
2c:74:73:93:57:b4:a1:63:40:54:a4:1c:f1:c4:49:9e:a4:44:
7b:17:c5:9a:d5:79:20:85:08:13:68:05:0d:f0:81:80:e9:94:
c3:bf:88:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:40 2025 by rpki-client