Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: KV4yP0+yIXTzgBbxArIUmV4GjiX0mfFY7dFBEp4WqN4=
Subject key identifier: FF:29:E4:75:CE:31:74:3A:D8:45:E8:B8:9B:DD:EE:C1:78:07:2C:96
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 01974AB1D0A364C497ED5221D57CCC7AB1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 05D3
Signing time: Sat 07 Jun 2025 14:00:56 +0000
Manifest this update: Sat 07 Jun 2025 14:00:56 +0000
Manifest next update: Sun 08 Jun 2025 14:00:56 +0000
Files and hashes: 1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=)
2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: q8Qgi6LtKCZG4NjyCclA5vKA0xksGKqXJG9Cjx//rH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:d0:a3:64:c4:97:ed:52:21:d5:7c:cc:7a:b1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Jun 7 14:00:56 2025 GMT
Not After : Jun 8 14:00:56 2025 GMT
Subject: CN=ff29e475ce31743ad845e8b89bddeec178072c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:e6:cc:12:b8:ba:89:3c:b0:14:8c:6a:fc:
5e:aa:dc:13:32:0f:b1:5a:1a:e0:b3:db:13:b8:19:
40:25:df:3a:d3:7b:28:6a:39:7b:a7:ae:71:88:9c:
ca:b3:fc:41:d7:71:05:38:bd:74:75:74:1d:09:bf:
e4:ca:ec:8b:bd:67:70:a4:a7:c1:83:a5:07:5c:6c:
02:50:76:53:51:e1:48:e6:eb:7e:e4:08:09:6b:df:
76:3c:82:d9:f0:30:8f:72:03:4d:fb:39:c8:c8:04:
f6:42:43:b1:51:4e:10:02:a6:dd:bf:8d:cb:53:a7:
c0:7e:44:e6:ca:ec:a6:5a:d2:09:21:65:a9:76:34:
95:49:e6:b9:86:bb:97:cd:9f:1a:4f:5d:6f:0e:b4:
5e:93:f9:3a:1f:fc:48:cc:16:10:9a:ce:43:e5:70:
00:4d:ce:73:ae:aa:00:f4:7c:be:9b:c5:9c:9a:27:
d9:6a:07:d1:5a:71:ad:3a:20:2a:ae:cc:35:67:0f:
f1:c1:07:4f:1f:56:33:d0:1e:1d:1c:a0:7c:8d:5b:
8f:37:6d:66:e0:76:58:fc:2f:7b:2b:62:77:e2:42:
96:51:9b:77:95:43:34:13:df:80:ed:de:19:a9:0f:
5d:28:23:de:ef:ad:fc:dc:bd:a1:03:a6:cb:62:fd:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:E4:75:CE:31:74:3A:D8:45:E8:B8:9B:DD:EE:C1:78:07:2C:96
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8e:4c:e8:17:c3:8b:32:43:ae:42:06:6f:92:88:9f:f6:a0:
9a:28:f0:ac:c9:8f:9a:6d:d3:22:6a:f8:b4:66:40:81:52:97:
2b:5a:65:bf:60:a8:07:79:8c:84:29:0c:c1:32:68:ae:24:f7:
e5:40:1e:14:33:48:18:cd:b1:51:d9:f1:77:38:bb:5f:21:6c:
d3:db:10:a8:67:e9:7f:27:08:5e:71:91:4b:5b:f9:f0:d6:4c:
4b:ee:3d:23:98:60:76:b9:bb:2f:82:40:aa:e0:00:56:d6:d7:
07:77:e1:41:c8:8d:b2:24:c6:91:dc:3d:24:1b:13:ea:0e:b2:
a3:84:09:5c:62:9a:e1:1c:bc:3a:f4:25:af:ba:59:32:5b:29:
bc:a5:24:17:e2:80:40:54:3b:6f:25:a1:b8:f5:59:9e:cc:6c:
8f:43:a4:ba:da:bd:56:ad:7e:0f:82:6c:a2:3f:a1:89:41:49:
ce:47:de:8d:9e:a7:76:b4:f0:24:f9:1c:b9:c5:1c:36:7e:75:
ea:ec:6d:22:83:00:98:3b:19:69:17:33:62:ba:be:7b:74:17:
69:5d:1c:c1:20:7e:af:d7:ac:70:ec:b9:4f:9b:df:41:87:59:
bc:4a:ec:f4:6a:64:7e:70:50:d0:d5:5c:98:be:72:b6:b5:e8:
bc:c7:25:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:37 2025 by rpki-client