Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: qQ5yrSgkOqNEFVVMjFIN7DhWRm7aiHlDf1BbW8J+ikA=
Subject key identifier: 76:10:22:5D:42:5D:59:CB:89:F6:FF:DF:22:BF:E0:F2:2F:F0:04:D6
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 019763278E4C11EF5D7AE9B7F3ECDA23ADCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 08:00:26 +0000
Manifest this update: Thu 12 Jun 2025 08:00:26 +0000
Manifest next update: Fri 13 Jun 2025 08:00:26 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: GgLgI0b3Jn9igChSPbWlYdMvCtzdWXlCMmDKBpPkpRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:8e:4c:11:ef:5d:7a:e9:b7:f3:ec:da:23:ad:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Jun 12 08:00:26 2025 GMT
Not After : Jun 13 08:00:26 2025 GMT
Subject: CN=7610225d425d59cb89f6ffdf22bfe0f22ff004d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:26:46:63:91:22:9b:0c:23:cf:f9:e6:6f:
03:b2:4c:df:ce:ab:8d:9e:13:ca:de:ae:f4:9b:be:
8e:bb:e2:cd:06:f0:d2:5f:5a:fe:01:73:57:16:5c:
e2:66:2f:b9:90:0f:fd:02:c1:fe:3c:62:25:71:a8:
35:38:4d:43:ba:61:6e:74:ce:5e:a0:9a:8f:93:6f:
b1:90:22:22:18:9d:9d:57:1a:d1:b7:46:c4:c4:2d:
34:a1:62:ba:b5:97:93:1e:d9:e2:06:7c:02:76:06:
56:cb:ac:95:35:22:ea:a5:84:ea:aa:ac:f4:0e:1d:
f3:a5:c5:0a:ad:5e:18:d2:3a:a3:ff:e8:47:5f:31:
97:90:56:59:63:e6:36:93:ea:db:da:c4:c9:bf:d0:
6e:f1:bc:dc:1a:d8:b3:71:10:99:ac:ca:39:43:c4:
41:74:fd:fb:c8:c5:d3:d2:67:c7:62:f4:93:a4:a1:
2c:45:64:c2:dd:e1:2f:13:26:e2:fc:fc:64:78:6a:
24:fd:64:ce:ec:38:fb:18:3e:fe:5e:99:b9:aa:69:
31:11:89:61:24:14:f3:7c:29:57:3f:19:82:75:de:
1c:a8:1c:c0:d9:09:b6:35:03:cf:6a:1a:47:e9:8e:
49:e2:40:fc:a9:ba:85:19:65:e8:fb:f0:74:0b:36:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:22:5D:42:5D:59:CB:89:F6:FF:DF:22:BF:E0:F2:2F:F0:04:D6
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:22:1f:a1:af:59:c0:88:db:e8:32:15:41:2a:4f:b4:d7:5b:
f9:4e:26:a4:1a:7a:de:b6:9b:21:ff:3b:d7:79:18:fd:1b:a3:
fc:76:a3:34:f1:1c:ff:2d:78:72:23:4a:9d:05:6b:4e:ae:13:
40:a0:7f:00:59:8f:f2:e8:ad:3c:d1:fa:da:0d:11:c3:c8:f9:
b4:7d:a1:d0:ad:8f:e3:47:f7:ec:59:bd:31:0b:c3:43:5c:63:
15:88:bf:8f:ec:66:b0:7d:6a:b0:17:26:d5:c1:95:23:e5:82:
1f:9f:b6:1e:dd:00:ac:19:b2:b6:17:6e:32:58:fc:f0:ab:13:
42:29:e1:3a:07:50:2f:db:8c:45:4c:a0:34:eb:fd:25:08:65:
34:ef:4f:a9:5c:5d:bb:77:4e:a5:03:d3:39:3e:bd:2c:7a:06:
68:63:f8:89:99:12:39:80:1b:fc:40:8e:37:51:e3:f1:7f:b5:
fc:f4:79:dd:24:93:87:2d:1a:e1:61:c1:51:36:2a:53:51:d4:
e9:6b:8b:62:c2:09:33:03:35:fa:3e:ce:51:12:5d:df:00:e1:
8a:ed:36:c8:e9:38:73:4e:29:88:8e:f0:0b:3c:81:42:f0:a8:
36:97:1b:46:ca:12:b2:78:cd:a3:4c:ca:32:f1:b3:02:f2:e6:
b4:df:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:04:30 2025 by rpki-client