Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
File: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft (raw, json)
Hash identifier: o7sj24B5wCan3ERNaQnHt293IpdyDBwQUyrVnP68P2E=
Subject key identifier: D6:FF:61:C5:97:9B:11:D6:0F:F6:BD:F9:38:75:70:51:79:35:C1:7C
Authority key identifier: CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
Certificate issuer: /CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Certificate serial: 019747E7743496E4A4EF66C361B3958B293F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
Manifest number: 022F
Signing time: Sat 07 Jun 2025 01:00:40 +0000
Manifest this update: Sat 07 Jun 2025 01:00:40 +0000
Manifest next update: Sun 08 Jun 2025 01:00:40 +0000
Files and hashes: 1: q6cfXUDveWHdgQWTYKqVwvvOAe0.roa (hash: BJPMM6GNYN6IqCj9i2G5fXzbZjuTVnz0OtAPd8t+eZk=)
2: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl (hash: 0mkgAJCNU4uBx0cuck6SYVp1eYc1TNkpsgBA407QqRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:74:34:96:e4:a4:ef:66:c3:61:b3:95:8b:29:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Validity
Not Before: Jun 7 01:00:40 2025 GMT
Not After : Jun 8 01:00:40 2025 GMT
Subject: CN=d6ff61c5979b11d60ff6bdf9387570517935c17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:1e:55:b1:a8:8f:cc:c8:a7:fc:16:52:e3:
cf:8b:08:51:79:1f:ff:00:8a:21:44:4c:f7:dd:ba:
68:2f:0a:e5:b2:f8:5c:e2:37:27:51:f9:66:b9:91:
62:7f:0a:f7:df:25:fe:ec:de:0f:5e:d4:54:23:52:
8c:fa:93:67:48:6a:db:32:01:69:63:12:c2:20:a2:
8a:c2:af:cc:93:54:f9:e7:a2:91:4a:7d:9f:8b:b9:
34:d8:44:19:a9:8b:82:ef:f3:21:a0:84:1c:90:d4:
21:dd:76:7f:7a:f8:0a:80:cc:d2:ef:21:14:31:07:
e6:e8:95:bc:21:b1:b5:3e:c6:0b:03:07:5e:ba:c0:
f6:d6:1d:9b:f0:2e:91:fe:7c:63:24:e9:38:6d:76:
ae:02:19:18:e6:c1:10:d8:4a:27:09:f5:50:75:5a:
50:e8:78:30:a3:9d:71:f4:a7:40:f0:8d:78:12:5d:
be:c8:d5:92:ea:e7:ae:e3:d6:26:2b:d1:67:8b:6d:
8c:19:5e:ad:b8:d5:cc:95:e4:c8:23:a6:07:9f:7f:
9d:0b:c0:bb:1f:2a:64:d5:84:a2:ed:44:88:2f:a8:
22:56:71:86:9e:ee:27:d1:47:48:44:ba:b7:9b:b9:
2c:fd:d0:aa:77:1c:a2:83:d6:2c:d6:d6:22:9c:8f:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FF:61:C5:97:9B:11:D6:0F:F6:BD:F9:38:75:70:51:79:35:C1:7C
X509v3 Authority Key Identifier:
keyid:CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ea:c7:45:5c:95:df:2d:6e:2e:08:b3:07:94:e7:ee:c9:63:
f6:94:e5:d2:f0:75:eb:a6:70:a4:41:e4:34:ab:38:ef:0f:e8:
db:3b:8a:1f:ba:f3:18:d4:b9:ae:ba:d5:10:36:e4:1b:2b:cb:
d7:71:23:c6:ad:38:7e:ff:de:23:75:02:ab:2b:2b:66:98:79:
35:04:1c:d1:ba:b3:fc:dd:e4:6e:02:45:ac:93:60:fe:b2:cf:
c3:39:1c:3b:a4:a6:6f:46:17:fa:aa:a8:24:97:a4:3c:83:0c:
5a:53:75:1a:ee:d5:1f:b4:26:b0:5e:d1:e7:14:c4:cd:58:55:
75:21:22:00:be:d8:51:71:87:01:4b:9f:61:da:83:46:3a:a1:
f1:cf:0b:9e:53:99:b1:aa:19:82:66:71:7b:68:33:7a:f5:23:
6e:96:86:ec:38:b3:c0:71:81:c7:03:58:0e:85:8c:0c:9a:3b:
5f:0b:fe:ee:13:30:d3:09:0b:ef:8a:45:67:56:48:04:e6:6d:
cc:51:10:e8:6f:a1:ca:04:95:e8:a0:55:ba:8d:03:41:8b:48:
0c:4c:e9:93:6c:00:94:96:9f:51:1e:45:a0:66:ad:ec:d6:1f:
af:7b:b4:09:da:e2:3c:3f:0d:5a:16:3a:5d:2a:11:98:b0:7a:
64:dc:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:20 2025 by rpki-client