Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: 95Kd4tvd5qg68BN2KQwryKseh3o3xMH1AJnyfaeddFo=
Subject key identifier: 1D:69:A9:8E:C5:14:59:5F:32:3E:1E:CB:D1:E5:ED:E5:B5:3A:C3:9D
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 01974C9FCDE9D9AFE56223AB1D4D1276BCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0C02
Signing time: Sat 07 Jun 2025 23:00:30 +0000
Manifest this update: Sat 07 Jun 2025 23:00:30 +0000
Manifest next update: Sun 08 Jun 2025 23:00:30 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: Iw5cdImhbr5dXLZw5qGwmUBbszPQ8M0zJ5imMwpJIg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:cd:e9:d9:af:e5:62:23:ab:1d:4d:12:76:bc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jun 7 23:00:30 2025 GMT
Not After : Jun 8 23:00:30 2025 GMT
Subject: CN=1d69a98ec514595f323e1ecbd1e5ede5b53ac39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:80:db:18:dd:6a:67:95:c4:ec:7f:ee:ee:
89:70:bf:d7:77:2d:70:89:9f:7c:5e:ab:65:e3:75:
f7:38:96:ca:a9:87:c0:be:dc:af:87:3d:ca:d6:c2:
27:6e:d2:54:4a:04:5a:72:3b:fc:a0:71:4d:93:78:
70:b6:4d:dc:f0:39:75:63:2d:05:ca:a4:aa:ef:db:
ed:78:61:61:32:e3:df:4a:e5:fb:31:d1:ec:99:7a:
b6:2c:f4:41:89:5f:f8:10:50:df:ac:86:dd:bb:30:
ee:36:75:5a:57:7f:ee:02:54:d6:e5:99:36:6d:09:
9a:fe:ee:8d:06:d8:17:c9:b2:89:eb:d7:76:76:94:
16:a1:03:14:f4:da:46:e9:6d:db:78:8e:48:36:c3:
06:48:83:d1:f0:59:28:32:aa:5f:e0:65:af:36:79:
5a:fe:27:10:b5:b6:8d:cf:4f:63:59:8e:43:f7:e8:
3b:ea:ef:04:1f:7d:1c:27:97:a1:aa:bf:d6:09:de:
64:2b:82:ca:73:c8:05:c2:6a:a1:b3:49:97:97:ed:
d6:83:9a:af:db:ab:fe:2f:29:52:15:a5:be:99:86:
e4:e2:a6:40:be:bd:50:67:7a:30:c0:d5:d8:c8:c1:
7f:d0:3d:1d:7a:11:c7:35:49:de:df:76:7a:07:02:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:69:A9:8E:C5:14:59:5F:32:3E:1E:CB:D1:E5:ED:E5:B5:3A:C3:9D
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:20:7e:21:f7:70:65:d0:e9:3d:18:be:41:dc:b8:48:e6:ef:
30:16:4c:a6:2f:76:b6:06:50:4d:5a:27:b9:33:ed:89:27:3c:
f9:00:3b:63:9f:75:04:30:84:a5:fc:89:ad:ce:a3:77:f7:72:
87:c4:c7:4b:d2:f8:9d:b0:c0:e0:34:26:45:c0:16:9d:7d:a5:
24:55:95:02:3f:ea:99:a8:6c:a6:1d:f8:43:04:c9:9e:39:36:
47:f7:bf:a1:9e:c5:8b:1d:c2:95:91:fb:b8:eb:a8:8b:ce:0f:
29:ae:fc:28:55:18:c7:d5:05:ec:97:2c:03:61:35:88:47:12:
dc:65:4b:4f:d5:5c:6f:59:ec:35:c8:1b:c0:94:6b:c7:5c:4d:
f7:4f:21:dd:d5:0c:ce:1d:d4:36:eb:16:ff:a8:84:d0:31:3a:
66:e0:15:f3:9e:ec:cb:42:60:74:f0:b1:f4:0b:88:4a:04:e2:
85:a4:d5:5c:ee:35:5f:26:bc:96:40:d3:78:cd:88:df:f8:ce:
58:6d:0d:97:9e:45:bd:20:69:20:87:de:fa:95:c2:29:ce:40:
ef:fa:37:a3:c1:f3:b3:60:8e:f1:0c:65:22:e5:88:96:aa:28:
b4:72:cf:8c:bf:ec:d8:a1:93:37:27:d5:11:f2:4a:b3:4c:f0:
ab:85:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:10 2025 by rpki-client