Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier: mPr3/mm2YREQNyhvt14a+sFQcX+j2adFadZ9BJ3amqc=
Subject key identifier: 68:BA:7B:33:7C:BE:7C:51:FA:70:AC:3A:27:18:2C:4F:E5:38:04:6C
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial: 019748F9ECD48F55FAF5396B813D0C481E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:00:27 +0000
Manifest this update: Sat 07 Jun 2025 06:00:27 +0000
Manifest next update: Sun 08 Jun 2025 06:00:27 +0000
Files and hashes: 1: 5t5Dcx5tNkWQ_sy57yYX9uF0BSc.roa (hash: PzSrKv8Rw8leyPQ1z/odwxbCskApuD1oeaEEXKXPsNc=)
2: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: l3ll3AcL79Q/kFcHt7QV97zwY/+zTK39svOWEisgNI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:ec:d4:8f:55:fa:f5:39:6b:81:3d:0c:48:1e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
Validity
Not Before: Jun 7 06:00:27 2025 GMT
Not After : Jun 8 06:00:27 2025 GMT
Subject: CN=68ba7b337cbe7c51fa70ac3a27182c4fe538046c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ba:b2:a0:f7:45:24:94:2d:9b:cc:9f:72:43:
45:79:25:bc:fb:ed:9f:1d:6c:fe:fc:5d:01:1c:ca:
d1:02:d9:4b:be:c2:79:fb:c1:a6:9d:f8:26:4e:eb:
8a:a9:32:a4:d7:9d:a9:27:ad:25:fa:72:dc:ac:cf:
61:f6:39:a2:0f:3d:1c:97:79:c2:15:ac:7e:2a:b5:
7e:16:d6:b0:a0:d0:f3:e2:ad:1b:12:0c:e6:7e:85:
45:ca:33:3e:d1:e7:ae:cf:10:1d:cc:b9:4c:6b:97:
a8:d1:39:ea:63:05:2f:42:d4:75:d9:40:33:3c:a4:
85:ea:f7:2e:37:f7:d4:00:76:99:0a:81:41:af:9f:
19:70:ce:1b:cf:f6:ae:44:f3:78:c2:2f:51:8b:d6:
41:81:a8:d8:e9:71:81:cc:52:69:8f:7f:fa:b9:5a:
f0:41:39:7b:ef:c7:e9:fa:75:8d:38:20:75:e6:83:
53:de:5b:e3:49:49:45:c8:71:4c:25:e0:88:3c:1c:
02:e0:eb:5c:7f:1f:30:c3:de:77:f3:bc:36:dd:1f:
8d:86:65:74:7c:c0:3f:3c:f5:bf:03:35:b1:16:79:
80:6b:73:71:ec:ad:94:aa:cf:1c:5e:b6:76:89:4e:
f0:66:8b:46:48:56:3e:c9:18:fe:d2:87:be:42:8f:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BA:7B:33:7C:BE:7C:51:FA:70:AC:3A:27:18:2C:4F:E5:38:04:6C
X509v3 Authority Key Identifier:
keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:64:fc:42:0c:bd:34:a4:84:89:e4:ca:6e:c1:e7:16:97:4d:
cd:2f:15:74:a6:44:60:77:db:1c:1b:db:37:42:c5:84:e2:8c:
c3:e1:38:e7:0e:5f:29:09:96:4d:fa:a7:03:41:57:aa:d7:cc:
67:1c:4f:3b:14:e6:fd:1e:ac:b2:5b:fb:9e:85:b5:db:7c:1d:
7a:74:d2:84:22:08:83:17:c1:20:29:fb:21:85:a5:4d:8d:7d:
a3:76:c5:78:b7:73:98:65:c0:89:91:ee:19:61:dc:b3:69:be:
17:6f:fc:e6:69:a2:ac:b4:56:0f:4d:10:aa:0e:c8:2d:e2:eb:
94:e8:16:c9:a4:4b:1f:bb:d2:d7:9d:33:aa:f2:03:41:88:ec:
5e:8b:4f:c0:a8:e6:4b:b6:e9:ee:4e:af:d4:9b:de:cd:d7:67:
3b:5e:e4:8e:2e:74:2e:6f:ec:f5:41:09:e0:49:f0:d0:e5:57:
93:35:50:5c:5e:1b:c8:41:01:94:4f:62:7a:09:e2:95:0b:9f:
4a:c9:62:57:6f:56:a7:0e:e0:cb:d2:82:0d:bc:c3:a1:25:ad:
40:f1:39:26:fc:85:c2:1d:59:c7:fd:4a:28:8f:e6:b4:08:1a:
fb:dd:07:73:df:cb:52:f4:d8:c2:d3:8f:a3:1f:48:34:9a:fe:
d9:c5:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:30:51 2025 by rpki-client