Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: WFBFTGTNlF9wRKYEW0U3jzBpMdtHP7NV4fcT15VI+oI=
Subject key identifier: A3:23:A9:86:23:0B:92:F9:26:40:E4:B2:E3:5C:D8:5F:EA:05:DF:98
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 01974E8E1E982815CAC987588B6AA72E7780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 08:00:26 +0000
Manifest this update: Sun 08 Jun 2025 08:00:26 +0000
Manifest next update: Mon 09 Jun 2025 08:00:26 +0000
Files and hashes: 1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
2: sKarxrcp3TYbOa1lj25cFgvPm1M.roa (hash: hzIQC+6QcM0KejfwF/J95Pb7an1/Oimflf+mKhKCBQI=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: kcFaGKAAce6vb26qFG3bpp5DUAJ1aIAH1mumO1gDjms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:1e:98:28:15:ca:c9:87:58:8b:6a:a7:2e:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Jun 8 08:00:26 2025 GMT
Not After : Jun 9 08:00:26 2025 GMT
Subject: CN=a323a986230b92f92640e4b2e35cd85fea05df98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:f5:5c:5e:ba:68:90:69:a5:ba:43:65:42:
51:7c:db:78:fa:a8:0a:6c:e7:a4:8e:25:35:2c:8e:
ff:08:75:9b:a6:be:27:24:02:87:3d:9f:48:59:48:
32:c6:84:ff:36:d0:c3:0d:4c:af:4a:d0:c4:9a:0f:
84:04:f6:1d:4a:30:2e:7f:81:0d:e0:b1:39:97:34:
00:ea:74:04:5a:29:9c:52:5b:09:c2:af:de:fe:51:
bb:ca:13:06:86:06:1c:9a:c1:d6:a0:f1:80:bb:59:
41:f7:7a:3a:b6:b7:34:bb:56:c0:82:7e:8b:c9:a9:
9c:8b:2b:67:1c:b4:aa:8f:16:d1:b6:81:06:91:ac:
a0:da:ef:54:07:b9:f4:c2:e5:88:98:72:3b:db:14:
a8:ba:c9:83:34:af:82:4b:73:f8:d0:ba:e9:77:42:
db:b8:fa:6b:75:22:3d:b7:07:63:ff:de:26:c8:c1:
63:02:89:c6:0b:71:11:cb:63:d7:fd:86:c2:bf:8b:
23:25:9e:8f:e7:d4:3c:21:3c:1d:1d:a9:15:52:e2:
db:83:68:07:62:c2:26:50:ab:de:4a:07:04:46:64:
8f:ea:5b:ee:70:a8:57:5c:0f:dc:00:88:a4:6e:d5:
7a:1b:81:a1:4e:4d:57:20:85:5c:f8:c9:a5:74:5b:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:A9:86:23:0B:92:F9:26:40:E4:B2:E3:5C:D8:5F:EA:05:DF:98
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:33:0a:35:64:3e:9c:6f:9f:e0:62:a2:a4:8f:5c:87:d3:c2:
a1:de:52:1f:35:7b:8d:11:d8:75:37:12:43:17:0a:44:8d:28:
7e:44:cb:a5:0b:16:b2:60:15:67:93:2d:b9:97:5a:ac:21:df:
7f:1f:14:e8:1e:72:54:ef:92:7f:a9:56:77:e5:f0:a8:a0:4e:
a7:52:ed:f4:56:7f:e4:27:e6:39:33:07:a8:bd:98:cb:02:40:
43:37:22:fe:5f:a1:84:93:b3:59:7f:c3:12:85:ca:28:6e:81:
90:45:e8:69:05:7c:69:35:71:58:7b:e9:34:18:05:04:e7:99:
b8:e4:17:66:ba:42:36:6e:54:9d:e9:52:04:74:d9:f9:c8:11:
27:5b:b7:b9:72:77:24:f8:00:6f:db:f9:b1:27:38:72:91:a3:
92:be:80:36:1e:af:41:fb:fb:cc:0a:c4:c0:67:80:0f:3c:d5:
04:ba:c8:84:1a:e0:6a:40:98:02:97:36:bc:2d:a5:43:75:26:
23:27:ba:9c:4e:19:90:07:bd:b1:22:1b:51:b7:3d:b5:a6:c2:
61:39:ae:7c:bc:e1:95:95:51:2f:75:75:63:83:8a:30:fd:11:
be:e0:f8:06:90:d7:29:2c:99:06:c1:9d:18:0b:c4:5f:07:41:
81:92:f0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:52:51 2025 by rpki-client