Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
File: rYY6WJMusYMjlBahz2ao_8POchU.mft (raw, json)
Hash identifier: TyAlwtgd5cWywN78vSZTywJplgQ5j3ecI6V0Nx76Ys8=
Subject key identifier: DB:1C:21:E5:62:39:18:F0:01:C9:8D:D4:75:D5:B7:F2:48:A0:11:3C
Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
Certificate issuer: /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Certificate serial: 01974F3307221CF6A59BD1CC1B37F9DE3E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
Manifest number: 0C71
Signing time: Sun 08 Jun 2025 11:00:33 +0000
Manifest this update: Sun 08 Jun 2025 11:00:33 +0000
Manifest next update: Mon 09 Jun 2025 11:00:33 +0000
Files and hashes: 1: NsCamS0MlFkmbAx5_LAOWrtBals.roa (hash: LDrv3G809jHIGwEDwg2A1Kbn0Oo37yQBk0cRSClCqYU=)
2: rYY6WJMusYMjlBahz2ao_8POchU.crl (hash: Ks0DPlQVgOa2l5FGDN9ykvfHMwKyKQJ8dJrGQy+N09A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:07:22:1c:f6:a5:9b:d1:cc:1b:37:f9:de:3e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Validity
Not Before: Jun 8 11:00:33 2025 GMT
Not After : Jun 9 11:00:33 2025 GMT
Subject: CN=db1c21e5623918f001c98dd475d5b7f248a0113c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:f7:b7:56:81:69:45:61:6c:10:5a:5d:d8:
20:bf:d4:c5:59:f8:be:e2:38:04:41:7a:4d:29:1b:
8c:dd:d5:ab:8f:83:94:be:6a:0c:8c:09:82:2b:ae:
ec:6a:a3:28:09:13:b1:2b:96:9a:e6:94:0d:66:40:
8c:dc:ea:26:94:bf:26:80:43:c6:f1:f0:b9:dc:c6:
87:39:2a:0c:88:cd:b6:cc:55:9f:5f:20:ff:f0:cb:
63:f2:09:3f:1d:d4:67:76:72:06:a6:f2:4b:26:ca:
a3:9e:1a:c3:46:a1:78:5f:31:49:4e:8f:3b:24:64:
07:06:f0:b9:5c:d4:ea:21:16:85:dd:f0:0e:42:93:
ed:de:31:e4:ce:20:38:37:9e:b0:1e:31:0f:9f:5c:
02:a4:0b:d5:9b:0b:65:ef:f4:fd:0b:d5:43:c9:85:
1d:85:7e:f0:d4:7b:bc:03:ad:16:97:48:af:90:2e:
f3:ff:39:a4:a0:8f:47:5c:76:43:c6:bc:d9:c9:65:
d1:a7:ce:4a:9c:be:2d:86:24:2d:59:be:1c:63:64:
fb:36:a3:ed:ae:5c:88:b3:92:23:44:93:66:f0:d3:
c3:2a:c1:ed:e5:62:bd:17:4b:fe:6e:51:dc:d8:72:
69:41:57:d1:d0:58:34:f7:1b:f1:75:3c:ca:13:5b:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1C:21:E5:62:39:18:F0:01:C9:8D:D4:75:D5:B7:F2:48:A0:11:3C
X509v3 Authority Key Identifier:
keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:37:1d:cc:32:14:31:ed:f0:6b:c7:61:e3:14:f8:1a:39:
c1:11:35:72:41:4c:35:1b:eb:20:ab:fc:2f:47:f6:c4:f9:a6:
cd:3e:6f:58:db:27:d8:00:ad:7c:bf:d6:2c:54:aa:0d:b1:3a:
70:bc:25:d7:b4:2e:f3:ec:c4:dc:9a:75:03:1a:0a:b1:29:2b:
9e:d6:d4:a8:d2:ce:22:cd:cc:04:7c:a2:fc:9a:95:d1:a9:f5:
12:a4:e8:aa:32:a2:55:91:c0:24:ce:04:f8:64:45:69:68:7e:
36:1b:cd:a4:17:5f:06:8a:19:02:da:4a:01:f1:b1:c0:7c:01:
7b:8b:a9:84:e7:05:95:a8:e9:e0:00:ab:bd:e1:99:ac:be:8b:
a0:f5:86:44:17:f3:5d:98:21:12:43:44:09:c9:8f:e2:c5:38:
cb:e3:59:d9:87:b4:0c:c1:12:48:7a:a0:e8:2c:86:18:08:95:
d8:f9:da:4b:b2:e4:83:a2:4b:fb:80:b0:0c:73:f1:16:88:9a:
a2:4b:c3:15:51:0f:a0:e1:6b:81:37:49:15:5f:03:d8:82:d0:
b4:ea:70:de:9b:1c:19:6d:7d:8a:57:18:22:1e:83:43:bf:b3:
6b:f8:73:60:20:c3:b9:8c:3b:0b:4d:95:27:52:c3:47:d0:a5:
54:4d:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:47:58 2025 by rpki-client