Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
File: y5-GErfxR1ABa4SMQvYN82rYMtk.mft (raw, json)
Hash identifier: UVcQMCJTh44eWxkHxrwsNc8ICrawPsBqz+Ff1sW7ys4=
Subject key identifier: 43:66:93:BC:19:81:AB:12:C7:02:BA:1B:8D:F9:A3:29:48:C6:39:B7
Authority key identifier: CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
Certificate issuer: /CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Certificate serial: 0197488D3504C4F6249F5491D0987967EF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:43 +0000
Manifest this update: Sat 07 Jun 2025 04:01:43 +0000
Manifest next update: Sun 08 Jun 2025 04:01:43 +0000
Files and hashes: 1: 35Hkh6WGB56LhQUZWJy4fWu8adc.roa (hash: N+zjw78vBIKP/bKJa3b5qGQ6N/RlG9tWFNOT+GZrtRA=)
2: y5-GErfxR1ABa4SMQvYN82rYMtk.crl (hash: J1u/+TfwYI9sNLwFy20Ee+0fgvZlhbYpJIzfh2x+/bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:35:04:c4:f6:24:9f:54:91:d0:98:79:67:ef:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Validity
Not Before: Jun 7 04:01:43 2025 GMT
Not After : Jun 8 04:01:43 2025 GMT
Subject: CN=436693bc1981ab12c702ba1b8df9a32948c639b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:a5:eb:ce:83:22:fc:1e:ce:70:a9:bf:2d:
0d:f2:d3:21:3a:23:f8:59:ca:b6:f8:2d:b1:1d:de:
9d:c4:2e:a8:dc:d8:9d:b8:98:18:ee:51:97:a5:c9:
53:d1:a3:6e:be:e9:a9:2c:1e:bd:89:05:7f:bc:d9:
fb:96:6d:10:7b:ca:14:69:a9:f9:13:7a:da:89:a1:
35:bb:40:f3:df:41:be:76:16:1e:17:1b:5a:0e:8e:
e3:83:41:a1:8e:a4:b7:11:a1:20:42:e3:0b:ab:2f:
57:4b:a1:92:f3:7c:65:3a:d5:bc:c2:2a:5f:9e:78:
cb:a0:aa:3c:e2:04:ba:58:c4:cd:b6:5a:d2:a1:6d:
04:55:2c:96:f3:51:a3:f7:d9:c9:b0:28:a4:c3:d9:
53:f5:65:48:68:c3:e3:bd:ba:12:7d:03:71:6e:18:
5a:ab:19:50:f9:d3:f9:0d:be:bd:31:eb:c9:63:aa:
4e:3a:e7:2a:46:26:aa:6a:82:ac:d2:28:9c:fe:b9:
cc:18:fc:d8:ee:41:fc:df:65:33:f9:02:3f:5b:25:
6a:8d:1b:fc:4c:75:b8:7f:1a:2b:81:2a:d3:3a:f9:
aa:ac:58:5d:1a:51:e9:b0:53:08:69:42:00:ab:d4:
75:e6:b1:94:1c:9f:cc:ed:25:87:81:01:7b:7a:ec:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:66:93:BC:19:81:AB:12:C7:02:BA:1B:8D:F9:A3:29:48:C6:39:B7
X509v3 Authority Key Identifier:
keyid:CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e4:22:4f:66:3b:a1:eb:6d:4c:45:82:a9:c9:7d:ef:43:76:
1c:74:c0:97:68:79:d4:be:7b:8e:09:39:0d:dd:ef:35:7d:75:
0f:b5:c1:78:69:91:bd:02:5e:7a:f8:78:91:61:0b:1a:85:32:
dd:8b:d5:0e:02:24:5e:4d:b7:23:60:25:e4:c7:ee:20:3c:d8:
e1:29:18:0f:3f:21:e7:65:a7:4a:92:d7:83:65:fa:ea:cd:9b:
53:98:f7:fe:f2:85:ef:cb:03:01:72:e5:92:fb:6a:cf:b6:bf:
9d:d5:99:36:96:69:bd:4c:ee:4e:83:d5:fe:5c:97:34:b4:7b:
3d:78:ca:33:2c:9b:40:bb:45:fc:0c:18:fb:30:ee:10:97:38:
f2:a2:30:db:12:be:7a:fd:f0:73:60:0c:6a:c6:97:fc:a0:9c:
13:5e:1d:a7:85:9c:15:fc:7e:05:ed:d6:27:49:57:a3:1a:e6:
cb:01:ee:aa:11:a0:b2:70:51:5f:97:bb:0b:d2:bf:72:bd:af:
6e:8b:13:c8:c8:b3:af:2d:94:c4:14:0a:9c:f0:6e:62:82:d1:
ae:de:76:e9:b5:c4:2e:14:2f:e4:b9:98:fb:38:b9:b1:ec:02:
51:38:9d:b2:60:35:a9:c9:77:64:eb:0d:4f:8a:2a:95:ac:77:
ac:73:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:55 2025 by rpki-client