Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: +NDpP+76jFVl/KeAzG8mwdmcfH1t79LyJpYEgTURxzs=
Subject key identifier: 4E:96:FF:C5:2C:56:56:03:FE:55:B0:37:30:BF:7E:9F:72:4D:11:D1
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 01976215A55C245E7FD6F42A11C99DFD2CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 118F
Signing time: Thu 12 Jun 2025 03:01:15 +0000
Manifest this update: Thu 12 Jun 2025 03:01:15 +0000
Manifest next update: Fri 13 Jun 2025 03:01:15 +0000
Files and hashes: 1: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: arJveNuQvJ5Q24TY9diFuL4JxMmdAKfsPNJZDzhIL+c=)
2: yueP6aik06BPwcnmsnEIlj3ek5g.roa (hash: ouDcttk3dQ7QbY0vNsL4yJQH9X2H2u4pj98A+2ZbC4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:15:a5:5c:24:5e:7f:d6:f4:2a:11:c9:9d:fd:2c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Jun 12 03:01:15 2025 GMT
Not After : Jun 13 03:01:15 2025 GMT
Subject: CN=4e96ffc52c565603fe55b03730bf7e9f724d11d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:11:9e:a4:e8:f6:ab:3b:c0:59:d5:72:2a:
d0:5f:45:8c:29:85:d9:99:77:6e:de:30:b7:e5:33:
36:5c:25:68:13:ca:f6:c5:81:eb:af:05:b8:01:06:
b9:1a:cc:10:39:cf:79:f4:fd:78:c0:e6:22:fd:6f:
ae:08:5d:68:2b:e7:37:6e:ec:f8:fe:c5:4a:a5:f9:
58:aa:df:78:47:62:93:a6:41:74:e7:95:2c:4e:2d:
31:c6:16:32:7a:2a:07:8c:ce:a5:23:0e:b4:9e:1d:
a6:2d:4f:90:34:cb:f6:eb:b3:56:f1:2a:24:52:68:
a8:8e:ee:89:68:ff:71:c9:46:57:f3:e6:33:71:ff:
3d:ea:63:cf:1d:47:a8:77:cf:79:2b:03:a5:3c:df:
03:ff:92:e0:bb:f2:e7:87:08:c4:54:e4:92:f2:fc:
a5:ec:a3:be:40:23:56:f6:7f:11:75:05:7f:ec:e8:
50:81:6a:1a:b9:5e:80:11:37:83:de:33:55:0c:c9:
da:83:aa:7c:ce:61:9e:92:fa:4b:4c:d7:d9:3e:11:
36:2e:62:1e:dc:ae:9a:e4:10:ca:59:c6:32:e3:f0:
a5:f2:c9:36:04:e9:05:7a:7b:79:cd:3a:e5:ff:e0:
69:1d:77:2d:01:49:ab:c0:47:56:cf:1f:11:11:62:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:96:FF:C5:2C:56:56:03:FE:55:B0:37:30:BF:7E:9F:72:4D:11:D1
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:46:2c:a0:93:00:6b:0a:d0:ce:6f:35:94:da:aa:a2:24:73:
07:35:2e:7b:c0:58:e4:da:ab:7c:fa:3e:1f:c6:6e:93:ee:21:
7f:b1:f5:35:39:3b:46:ae:a1:01:d7:8b:1a:b4:f0:53:0f:4e:
85:dd:a6:57:a0:dd:52:f6:fd:18:64:7a:bc:4e:dd:1a:0d:91:
f1:e0:ed:10:23:83:7a:d7:e2:35:74:76:3a:32:94:13:a8:ae:
a9:b1:e0:51:2b:3d:94:b8:d7:9a:35:b5:30:3e:43:a8:c8:47:
c1:41:12:1b:4c:4c:cb:ed:32:82:01:27:59:d5:42:92:f4:eb:
af:3a:69:fa:22:c3:7c:93:96:77:1f:5f:35:1b:9a:37:79:e9:
d4:1b:01:54:2a:7d:2c:11:70:fd:6f:eb:d5:53:04:49:2a:ed:
ae:78:ff:42:3d:7d:92:79:08:95:65:3c:ac:2e:b6:05:92:3e:
48:7c:d1:ef:c2:63:ed:67:a3:5a:53:19:0f:2e:0a:b2:e9:86:
a4:16:cb:e1:6e:97:49:08:3d:e6:7d:16:31:5b:4f:3f:9b:99:
42:42:aa:f4:4e:e8:6f:78:12:45:ea:f9:6a:6a:e5:a5:ae:e0:
6d:cc:1a:ea:4a:50:2e:93:15:90:b3:8c:7b:09:95:d7:e3:fe:
2c:8b:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:08:01 2025 by rpki-client