Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: UhFpIcdqTrGH/G6Ea2+bJDg5/KOsJhGmXBEMFpKA8U4=
Subject key identifier: D9:34:DD:7A:68:F9:79:D1:48:A7:92:EB:85:A5:67:68:C9:6A:19:F4
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 019768F2B338DD24B1ABFFCB0B20B21BEF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 11:00:25 +0000
Manifest this update: Fri 13 Jun 2025 11:00:25 +0000
Manifest next update: Sat 14 Jun 2025 11:00:25 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: xYD8qd0l6RsPZxUomXkuaSx6AkEGAtdaSVUFfKODhHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:b3:38:dd:24:b1:ab:ff:cb:0b:20:b2:1b:ef:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Jun 13 11:00:25 2025 GMT
Not After : Jun 14 11:00:25 2025 GMT
Subject: CN=d934dd7a68f979d148a792eb85a56768c96a19f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:33:f4:b8:bf:06:2d:69:07:aa:21:df:cd:
dd:d5:7f:cd:9b:1e:42:07:53:a3:1b:8e:13:00:8f:
41:18:c5:f7:05:7f:00:16:ab:c6:88:5a:b1:f5:2f:
7b:a3:a9:0c:da:2f:a3:09:9d:a3:ba:f9:0d:24:35:
c8:af:ac:1b:51:53:28:ef:3a:60:22:a5:56:71:9a:
f9:d8:7f:16:a5:cb:32:93:7a:83:6a:2b:5f:ff:90:
af:c1:9b:2b:6e:b3:c4:2b:01:a2:56:5a:5c:0b:f1:
c0:ec:46:f8:64:d1:1d:5e:a7:15:34:cf:98:68:81:
2a:fe:dc:7e:57:a5:bd:1a:b0:62:9c:0f:eb:cd:d1:
92:99:e5:ed:40:98:e1:d5:7d:29:0f:a9:b6:3f:b3:
d9:a1:ce:b0:ab:b8:33:97:bb:1a:b4:2f:a5:8b:25:
2b:80:aa:d7:61:73:a3:56:b3:29:d9:fa:fc:76:53:
7c:4d:45:7a:4c:c5:f4:29:f9:9c:55:3d:cd:ad:66:
00:bb:68:47:dd:e3:9f:5f:c5:07:4e:e9:4f:ba:f4:
06:74:15:2c:dc:94:e0:56:b7:1a:ab:75:17:d7:d3:
bb:9f:00:37:9e:c4:de:82:d6:4d:6a:2a:57:1d:5e:
9c:e4:bb:0c:0b:6e:ba:f2:fe:e2:ad:f9:77:cb:87:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:34:DD:7A:68:F9:79:D1:48:A7:92:EB:85:A5:67:68:C9:6A:19:F4
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c8:59:a4:43:ca:76:f9:7b:e8:99:35:e5:ff:23:ea:61:8e:
4a:73:f3:c9:c5:1e:4c:87:0b:01:34:95:4b:e1:a2:1d:3d:fc:
c1:99:48:31:60:5d:65:6a:be:ae:01:13:bb:7e:91:aa:f9:bb:
46:33:5e:2b:1f:b6:7f:8f:13:85:a9:c4:17:28:dd:fa:7e:f7:
83:64:01:7d:c0:62:8a:6f:9a:be:91:a8:24:9d:0c:18:00:1b:
10:ef:7e:0d:6d:9b:6e:e0:b6:76:ea:dd:ff:be:16:0d:4e:13:
11:09:b7:b8:d6:33:4d:6c:bd:00:6e:6d:14:04:62:3e:95:7b:
56:60:74:73:a8:bb:e7:bc:6a:5c:69:e5:97:9e:72:c5:08:18:
b0:c7:5b:90:70:76:d0:11:16:b3:06:e3:3f:a7:00:b9:cc:7a:
21:5c:e8:41:75:05:8b:93:74:5e:59:c0:93:3a:03:42:04:56:
7f:48:c0:5b:bb:8c:7f:0b:7d:14:af:06:37:fe:29:a5:28:3c:
ef:03:25:12:a9:01:a7:e4:7e:43:3f:c5:73:8b:b2:03:03:7d:
6f:c2:5c:1a:76:be:3c:f7:5c:41:58:6e:ad:37:bd:ee:fa:db:
3c:b7:6d:a5:e4:69:f6:9b:1f:47:7f:dd:4d:76:e8:fa:53:11:
8a:cf:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:48:40 2025 by rpki-client