Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
File: RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft (raw, json)
Hash identifier: tHB35cuLAv2kXGoAhD61dc7SfE3fURbu6yPcls5vO2M=
Subject key identifier: 99:8A:C1:C3:0E:AE:1C:DA:D3:4D:52:98:2E:F7:85:C1:EE:60:E6:91
Authority key identifier: 44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
Certificate issuer: /CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Certificate serial: 01974AE8FA3B2F93526C5BD30B4EF0B9D953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 15:01:11 +0000
Manifest this update: Sat 07 Jun 2025 15:01:11 +0000
Manifest next update: Sun 08 Jun 2025 15:01:11 +0000
Files and hashes: 1: RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl (hash: wKk9IRmGPvoPik69TzZBYQnGMBCOnZs2bKUW2iU+Njg=)
2: ZmJk3i0UqR_uJ_XLaSjGUe2aH00.roa (hash: BCwdh7j1ZUyJ+mVEfLtfrzwX+n9rg9YN807VJjPHsUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:fa:3b:2f:93:52:6c:5b:d3:0b:4e:f0:b9:d9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Validity
Not Before: Jun 7 15:01:11 2025 GMT
Not After : Jun 8 15:01:11 2025 GMT
Subject: CN=998ac1c30eae1cdad34d52982ef785c1ee60e691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:63:3f:61:01:46:91:76:f2:36:2b:14:be:
8e:79:33:3e:6d:f1:fc:21:a4:c1:20:db:85:ca:06:
d1:76:ba:11:ee:d6:aa:2c:eb:90:71:7c:3d:d6:b5:
33:31:a3:8a:5e:56:00:a3:90:c5:32:32:af:01:89:
4d:b0:6e:99:df:79:57:46:7a:ab:ca:3c:a4:7b:b5:
f3:25:46:25:1d:6f:52:88:ec:85:8d:8d:fd:14:dc:
03:39:f9:e0:1b:fd:3d:de:4b:49:82:ae:54:73:ca:
3c:c3:d1:8b:95:6f:ac:83:a7:8a:f1:0d:3f:08:c6:
6f:72:79:f3:1f:af:0e:a1:86:77:07:86:d0:fd:3f:
e2:13:4f:41:4d:ca:4f:c8:e6:f2:68:2f:3b:5d:d3:
aa:44:6b:e0:9a:62:cb:e8:3c:af:cd:41:58:f0:63:
53:82:c9:50:7e:54:d4:16:8e:f8:c5:bc:76:d4:0b:
08:6a:4a:8c:65:78:47:0b:72:4e:ca:21:66:83:50:
9f:22:9c:36:2d:6a:f8:dd:ff:d9:6d:6e:78:01:84:
5c:16:f5:4f:18:01:f8:04:d5:2f:f2:a9:3e:7b:c8:
b0:22:d2:0e:fc:aa:48:8d:cc:3e:55:20:60:4e:ce:
c8:18:ce:c4:5b:60:fa:1a:d3:b7:dd:1c:47:8e:e0:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:C1:C3:0E:AE:1C:DA:D3:4D:52:98:2E:F7:85:C1:EE:60:E6:91
X509v3 Authority Key Identifier:
keyid:44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:65:16:4d:fe:68:41:e1:66:f7:15:d1:60:40:56:4e:de:6a:
cd:a7:46:91:1e:18:9a:1a:a0:9d:0f:6b:46:5b:42:b6:7f:53:
e0:b2:1f:64:d1:37:5f:52:61:53:1b:3d:69:ee:f8:c6:ec:48:
06:e3:0a:42:01:c5:46:2d:5e:0c:8b:25:e2:0f:fb:f1:46:20:
a8:34:d1:73:af:ae:4b:de:a0:22:52:37:4a:39:b8:a8:4c:8f:
64:4f:da:01:e0:27:92:65:3a:b1:11:ed:26:d8:36:be:17:b7:
1d:7b:58:11:47:7a:41:28:64:b1:81:34:9e:0e:40:f8:ed:95:
c2:79:12:88:a8:d7:a7:3c:a0:a3:63:00:b5:1a:f7:e9:de:24:
c5:2b:83:51:12:b9:fd:bc:31:5e:1f:a8:8b:05:ad:c7:45:a6:
b5:b2:14:0d:09:a0:3a:15:d1:9d:81:b0:00:b0:8b:b5:04:7b:
ef:fd:68:30:18:83:a7:93:31:7c:2e:58:bd:61:12:5e:c0:a4:
b1:31:f5:e7:0c:4d:db:ff:b1:07:3a:bf:49:ca:76:d2:8c:37:
53:db:89:ea:27:4d:f8:ed:f0:b6:d0:42:e2:0d:ff:bb:a3:6c:
c5:f6:20:88:f1:1d:9f:1c:fd:2a:c0:27:b9:c4:d3:d5:af:a2:
4d:03:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:47:16 2025 by rpki-client