
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: GL9NqhNtjBLVTQBsTLVUIEM1rsrh1i122V8SoRrAjgo=
Subject key identifier: 28:8E:08:35:94:4B:50:28:C3:1F:FF:E0:48:8A:AE:AD:BD:6D:B7:27
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 0197598027299D2F35896AA3E8B4C8E36D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 11:01:00 +0000
Manifest this update: Tue 10 Jun 2025 11:01:00 +0000
Manifest next update: Wed 11 Jun 2025 11:01:00 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: Vln2Ttd6HQ4S2VgD/8lkRYhQsnAuEdeBbLOhD6SHNqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:80:27:29:9d:2f:35:89:6a:a3:e8:b4:c8:e3:6d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Jun 10 11:01:00 2025 GMT
Not After : Jun 11 11:01:00 2025 GMT
Subject: CN=288e0835944b5028c31fffe0488aaeadbd6db727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:b9:bc:fa:a6:f0:08:70:1e:05:f8:cd:84:
50:5d:e4:a0:79:c7:b0:b0:67:d7:0b:ce:51:67:54:
4e:28:7f:91:a2:03:fd:c1:08:2f:5e:1d:d8:a0:c7:
a2:14:9d:c4:26:1c:4c:5b:8c:61:cd:83:2d:32:52:
b8:52:29:bb:40:fc:41:0f:7f:43:45:38:60:95:ee:
2a:6e:4b:b9:59:83:9e:a2:7e:5c:03:8a:db:b6:4a:
9c:b1:0c:c8:72:30:be:42:79:0b:a4:02:0f:18:d0:
6f:ec:97:02:82:e0:de:ca:f5:d8:71:0c:62:37:c6:
c8:e6:72:d0:49:71:cd:5c:3f:3c:46:20:b6:87:7c:
36:f9:17:09:53:91:c9:cb:1e:22:1e:a2:d4:fa:f7:
50:fa:8e:33:4d:09:68:95:c9:8b:32:27:6c:24:9b:
6a:7f:80:db:c1:31:50:12:28:aa:85:57:98:a1:8a:
ea:fe:c7:72:97:21:90:6f:cc:c7:16:ff:b3:f2:ab:
d1:05:37:cd:80:58:56:d6:e6:3d:f3:e4:70:7e:30:
47:b6:5c:09:73:77:65:11:86:4e:6a:23:65:80:70:
c6:2e:63:1e:a9:cf:02:b0:b6:26:9d:5b:ce:22:01:
bc:c1:d5:e7:11:e9:f1:c4:bf:70:a4:49:10:68:23:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8E:08:35:94:4B:50:28:C3:1F:FF:E0:48:8A:AE:AD:BD:6D:B7:27
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:60:b6:e8:d1:7b:ac:14:64:1f:be:5b:2b:fd:09:d1:80:a7:
d8:e9:75:d7:04:a7:2a:3d:19:33:dc:75:80:41:cd:82:54:aa:
74:80:b9:42:cc:d7:c0:68:e2:6a:11:82:f6:f2:45:da:e3:03:
cd:55:9c:e8:c6:30:03:49:c3:fa:32:7a:0e:0c:f8:9d:b8:23:
f0:7b:c6:f3:ae:79:79:a1:6a:0c:3c:eb:89:99:8d:cc:b9:12:
88:77:f4:6c:14:15:d5:dd:38:76:e5:6e:b6:aa:df:82:8a:19:
3c:db:d8:6d:9f:a2:f8:08:9e:a4:1f:69:96:17:ad:63:5b:61:
ac:f8:33:80:84:3c:7a:70:85:5c:aa:78:68:11:26:30:b7:69:
a4:c2:c5:cb:ad:53:fc:39:de:40:6b:2f:d5:87:c4:3d:53:8d:
78:03:21:5b:c2:81:e4:73:42:ee:58:e3:c0:d0:8b:e3:61:92:
fe:2b:6a:18:5a:ae:f6:46:57:cf:f1:c4:6b:62:e0:e7:20:26:
78:d0:c6:a7:fd:ed:10:7f:64:07:e7:43:31:06:1a:4d:17:12:
58:47:8d:3a:10:c4:17:58:3d:2f:98:5f:d2:dc:d2:50:00:bc:
f6:4e:c7:1c:e1:fa:17:80:9e:ec:f0:64:67:b2:85:b4:a4:a4:
9b:f7:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:55:29 2025 by rpki-client