Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: YdBfS7wQUkNHbjgnTDxf4TemHNdZ1Q8C/kst2dpgCeI=
Subject key identifier: 87:7D:9A:AF:D7:1C:5C:43:2D:FF:A3:D7:E9:0A:9B:5D:3B:EF:48:58
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 01975F4B0FA153D47542A0443FDBF076B0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 158A
Signing time: Wed 11 Jun 2025 14:00:44 +0000
Manifest this update: Wed 11 Jun 2025 14:00:44 +0000
Manifest next update: Thu 12 Jun 2025 14:00:44 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: MnplEUqhPU5DYsrxuzE8UMew1RjwQOkf7GRabWtejaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4b:0f:a1:53:d4:75:42:a0:44:3f:db:f0:76:b0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Jun 11 14:00:44 2025 GMT
Not After : Jun 12 14:00:44 2025 GMT
Subject: CN=877d9aafd71c5c432dffa3d7e90a9b5d3bef4858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:46:84:66:e9:39:7c:e9:be:b1:ce:e2:10:
97:f5:80:cb:fe:d7:0d:76:c1:ba:5a:13:16:79:58:
05:7a:03:3d:ba:59:73:60:c7:27:7f:ec:ff:2a:b8:
b1:52:f4:13:d2:ec:93:3a:fc:fa:7a:cf:b7:6a:5d:
43:4c:d7:ee:77:38:f5:da:bd:4c:5a:3b:02:3e:f4:
7d:6e:b1:d4:c9:9b:78:aa:d9:e9:05:25:f3:19:2f:
af:49:b8:92:6e:44:0b:de:2f:3e:bc:21:00:05:a1:
76:b3:c2:3a:3f:ae:f5:1d:42:52:05:9d:f6:24:59:
ff:2f:da:9f:5b:dc:16:73:a8:5e:a3:cb:bf:21:1b:
1d:64:bb:82:f5:91:1c:34:7f:a1:bb:0c:8a:1f:e9:
73:35:b4:a2:a4:68:37:ff:bc:55:5f:a6:2a:1b:10:
c9:21:0c:8b:c9:cd:1b:36:f9:b7:c9:87:a9:87:f6:
c7:33:6d:b0:d0:98:2f:36:60:9f:ce:1b:70:fa:91:
7f:c0:0e:82:62:51:a5:fb:26:94:6f:fa:11:4a:9b:
9c:04:dd:19:cb:f7:c4:4b:05:c8:01:b3:b6:67:10:
93:c9:da:7d:b7:d1:73:45:ec:2e:f0:4d:d2:9f:8c:
f1:fc:5c:01:bd:83:7f:98:d1:3a:38:d8:00:17:1e:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7D:9A:AF:D7:1C:5C:43:2D:FF:A3:D7:E9:0A:9B:5D:3B:EF:48:58
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b5:fb:13:ed:b7:00:3d:1f:7b:39:2f:cd:be:18:30:64:46:
da:7f:88:9b:c2:79:e2:60:0d:04:2f:34:54:a0:13:a5:c4:42:
8b:4c:27:c7:22:5a:87:f3:4e:e8:8e:2a:57:f8:7e:8a:23:fa:
b7:76:40:00:ee:16:85:11:b9:bd:09:98:2e:84:8c:c2:4a:de:
d6:49:51:d3:6f:ed:4e:80:59:2e:8e:58:8a:a4:c2:60:56:26:
55:68:70:21:fa:35:97:1e:62:5a:99:be:e2:b0:e5:26:9e:e6:
9e:ee:74:aa:ae:59:c8:5a:d9:a4:22:6e:f2:00:a4:84:2a:69:
fc:35:72:84:3f:ce:f9:2d:9c:71:07:6e:95:09:cc:8c:81:5e:
d5:52:12:7e:75:ea:d7:a5:cc:33:8f:25:70:4d:d7:4c:76:bd:
94:94:50:09:dc:aa:c7:85:5d:8d:ed:73:2d:b6:ad:af:6d:38:
86:ec:bc:7f:99:f4:35:36:c5:af:75:41:e4:88:8c:82:36:f2:
2c:52:d1:54:98:71:ee:33:d3:dd:fa:25:40:e3:a6:03:89:55:
78:df:a5:52:c3:8e:5f:ac:57:a2:26:c4:3b:ef:f2:b4:11:11:
42:e0:e0:03:a3:e8:c6:3c:ee:a7:24:c3:6e:d6:ec:ea:8a:2b:
5d:6b:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:36:00 2025 by rpki-client