Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: A1ZH+EaCMnTsvs5QVsclkhg82cTHBIzPdWYGHD6uRnc=
Subject key identifier: 5C:3C:0C:AC:97:E9:46:47:10:B5:FC:A3:28:5F:77:39:37:54:9F:50
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019746D4B660C4BCB0FBDA720E88B7759B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 0454
Signing time: Fri 06 Jun 2025 20:00:34 +0000
Manifest this update: Fri 06 Jun 2025 20:00:34 +0000
Manifest next update: Sat 07 Jun 2025 20:00:34 +0000
Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=)
2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: EF9ZVVE5xfqTbBXIF6x6gIr6XnHfsNgDEy1TTM6dxPY=)
3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:b6:60:c4:bc:b0:fb:da:72:0e:88:b7:75:9b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Jun 6 20:00:34 2025 GMT
Not After : Jun 7 20:00:34 2025 GMT
Subject: CN=5c3c0cac97e9464710b5fca3285f773937549f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:59:9d:6b:a4:67:70:8d:56:b3:d5:c0:10:
00:65:0d:fd:ee:ac:6e:61:ac:ea:82:91:f1:1b:8b:
31:1c:05:3a:2f:43:40:34:db:a4:ef:e1:49:39:3b:
bd:89:a8:7e:81:22:ec:69:32:07:47:24:f0:1a:f6:
57:87:e5:28:f0:71:ce:c3:58:c8:fd:aa:57:3f:d6:
84:72:aa:0f:cc:53:62:c6:5a:3d:bc:1a:8c:a3:a2:
ba:ec:3a:f7:4b:c0:c8:46:a9:d3:7d:98:3d:f9:a2:
0a:dd:42:39:72:b2:a8:7c:fc:47:6a:d6:96:7e:7e:
f6:97:6d:cb:eb:82:f2:7c:ed:37:92:9b:e0:92:25:
56:2f:55:1e:b6:e0:58:aa:a5:e6:e9:82:b9:f0:db:
4a:df:e4:35:89:31:2a:f3:94:02:cf:0c:7c:62:b7:
01:51:27:d1:95:cd:25:c2:30:2b:2e:34:cf:e6:6e:
20:ec:88:85:84:14:1c:4d:ba:b1:6b:85:27:35:cf:
3c:50:b0:1d:c0:7d:e0:e7:86:87:fd:c7:12:65:23:
10:bb:9b:96:f2:9a:02:38:39:0c:ee:69:6c:96:d6:
b7:12:45:9a:75:82:88:33:25:41:f9:ac:09:ca:ff:
7c:6e:1b:d8:db:a2:a1:97:a3:45:0b:bf:1a:61:db:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3C:0C:AC:97:E9:46:47:10:B5:FC:A3:28:5F:77:39:37:54:9F:50
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:34:5b:bf:fb:54:02:09:15:1e:b9:d2:4f:b2:38:d5:d5:1e:
e6:46:b2:0c:6a:21:e7:55:85:d6:cb:a1:50:a9:88:61:68:81:
8a:a3:7a:7b:df:d3:c0:3f:e5:27:03:75:63:81:b0:24:f7:2b:
53:31:74:de:0a:19:d5:76:d0:fe:5e:dd:74:16:5b:b6:d9:33:
bf:e4:24:a1:3a:8e:74:3e:d1:0d:de:8f:33:a2:ea:0e:99:97:
5e:91:c6:0e:8b:24:1f:38:96:b3:c9:3f:51:46:69:68:3a:ac:
f1:59:a1:81:93:e6:dc:29:35:ec:e0:a3:67:43:26:f9:2c:be:
80:5d:c4:14:f7:65:ba:9d:af:e7:d5:2e:76:34:5c:b5:f6:ff:
de:62:51:f7:43:30:0d:1f:f2:ea:fb:8e:e6:f3:49:87:7b:b4:
b3:f3:46:ee:a8:29:fa:90:fa:87:da:1e:50:eb:74:10:38:c0:
c9:49:ca:16:d5:90:e3:7d:b4:6f:8a:92:ee:59:df:06:7d:c7:
f5:3f:3c:0d:3a:f6:af:64:26:3e:e8:70:b3:9f:0f:3e:ed:a0:
e0:53:1e:b9:17:9a:9a:e3:a1:70:25:cc:b7:76:70:5b:6c:5d:
17:b4:b3:d6:0b:9a:17:38:16:09:c4:f7:93:1e:eb:00:b7:4e:
75:c8:cb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:15:18 2025 by rpki-client