Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: DjgcsLgmV2e2lJDFy63QSK8fQ1whPi6wq6w2izKfd9E=
Subject key identifier: CD:0E:4C:E2:F8:E7:FB:9B:FB:79:91:AC:1F:9F:AB:96:F4:E2:35:AF
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019749D5FB9C17EF74E4E9887CE979A1682E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 0ECD
Signing time: Sat 07 Jun 2025 10:00:49 +0000
Manifest this update: Sat 07 Jun 2025 10:00:49 +0000
Manifest next update: Sun 08 Jun 2025 10:00:49 +0000
Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: Sygi7aD3SWywaE0SECyxbgiqPRrpypszu9WNdkvS0+E=)
2: _DQ1KzWidoIdXZoVyvdN20rg8gM.roa (hash: EOelW7rq3NkXTukVpXSmytqfvzEOSEmblKrH2XLqMOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:fb:9c:17:ef:74:e4:e9:88:7c:e9:79:a1:68:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Jun 7 10:00:49 2025 GMT
Not After : Jun 8 10:00:49 2025 GMT
Subject: CN=cd0e4ce2f8e7fb9bfb7991ac1f9fab96f4e235af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:8c:3f:af:59:59:14:6b:20:49:a5:e7:46:
23:8a:3e:ff:a8:9d:27:47:50:38:b3:e2:2f:46:69:
e0:5d:9b:6b:56:b9:cf:01:7d:6b:88:d8:79:f5:de:
6f:10:86:62:be:d7:c9:06:f8:be:62:9e:1a:9b:71:
43:a9:8f:55:f3:3f:fa:1f:69:e3:ae:77:a0:a5:bd:
b9:15:7a:0e:cc:70:45:d5:17:a5:5d:5d:f3:81:bd:
d0:e7:55:80:ac:de:95:c0:0d:cc:39:15:35:8e:23:
55:af:91:2f:36:30:61:01:6a:5a:b0:98:85:e4:b4:
3a:cd:db:e8:d8:7f:c3:06:4f:ad:de:1f:c8:f8:da:
59:cc:44:46:a1:1d:56:52:0e:4a:ad:0e:23:cb:31:
a0:9b:4c:f8:d2:f0:fd:55:bd:4f:2d:27:ee:8c:59:
39:8e:51:62:18:81:3e:8b:c7:32:0f:e9:11:41:48:
87:62:01:0e:db:81:0a:f4:8d:75:95:17:58:07:32:
fc:d1:9c:55:5c:9b:f1:23:4b:ed:b4:29:e5:e3:71:
ba:12:61:cb:28:85:c8:b3:2d:37:ff:83:01:64:12:
fd:69:ee:2b:db:6c:a9:9e:c5:96:51:8d:88:c9:8c:
38:fe:f1:28:fa:ac:5b:c9:0e:09:25:4b:7e:de:48:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:4C:E2:F8:E7:FB:9B:FB:79:91:AC:1F:9F:AB:96:F4:E2:35:AF
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4a:fe:44:e9:ee:89:83:d9:24:37:c4:25:23:64:68:1f:5a:
36:8b:41:ee:fe:30:05:45:e2:14:69:74:9c:b8:96:73:94:01:
5d:1d:e3:92:5a:ae:27:f7:2d:55:fc:2d:fe:cc:19:68:26:73:
11:37:02:2f:39:af:c7:f8:ca:19:d3:84:52:41:66:03:d2:81:
5a:27:c5:ee:8a:70:72:c4:f7:f6:06:4d:41:f4:d2:a8:4a:03:
a9:06:44:8f:b8:35:c2:eb:ca:fc:e2:6a:d8:20:fa:0b:6e:7c:
33:94:59:63:60:cc:d3:15:3e:26:7a:50:14:75:fe:d8:20:35:
30:61:38:0e:a7:6b:9b:c1:fe:cd:22:17:4a:70:e5:9b:cb:8f:
14:4b:ad:bc:c3:7a:d8:21:7c:82:52:97:d3:f8:71:a6:b7:72:
0c:79:e6:90:5c:12:07:5d:37:8f:9e:b9:f9:54:b6:7d:39:3e:
d2:5f:ff:46:10:fe:25:6d:40:68:3b:75:dc:05:77:ef:72:e1:
6e:57:e0:62:ed:e3:c5:bb:09:d5:f4:a5:71:e1:0e:0e:69:0a:
1b:eb:2d:5f:7a:86:d9:12:0f:27:7e:8e:fd:5e:b9:94:8d:23:
9d:b2:33:ca:a6:2a:e4:1f:fc:c4:b3:23:69:d8:f0:9e:92:ef:
70:d7:29:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:39:33 2025 by rpki-client