Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: vq305E+VStWZI0wA0xV5GiBWYKZM+8bZ0yPnBFMoQn4=
Subject key identifier: DD:3A:4D:32:A7:96:1D:9E:EE:3C:0A:48:16:4E:94:98:05:63:0C:61
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 01974A7AE8448E611D2FD1016EF1CB5B47EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 0316
Signing time: Sat 07 Jun 2025 13:00:57 +0000
Manifest this update: Sat 07 Jun 2025 13:00:57 +0000
Manifest next update: Sun 08 Jun 2025 13:00:57 +0000
Files and hashes: 1: TFa2ZOwxN7oGU3_kx6uIZniyCkM.roa (hash: HhfxSeGnWIjZES5ZMXYca+rgo27hAD/QZjezzNFWuIQ=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: 11j2hOKeuumeUWN4iZiIr6krTL691MxoZZcXH7EeC3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e8:44:8e:61:1d:2f:d1:01:6e:f1:cb:5b:47:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Jun 7 13:00:57 2025 GMT
Not After : Jun 8 13:00:57 2025 GMT
Subject: CN=dd3a4d32a7961d9eee3c0a48164e949805630c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:bc:b8:78:76:b2:62:48:c0:84:37:63:47:
33:fa:22:10:90:12:61:fb:4e:22:da:3f:f1:70:4b:
97:47:0e:3f:a9:bd:b9:4b:7c:21:4f:d6:2f:70:9b:
c2:60:7e:a8:96:15:92:e1:24:09:c8:37:f9:da:44:
2e:7d:04:52:c9:3c:fb:90:3b:9e:5a:55:63:42:70:
7e:7b:ce:c9:cb:99:45:3d:24:39:31:d6:ee:a8:b6:
1e:4d:64:9e:46:1f:7d:e2:bb:86:fb:9a:bb:bd:8b:
ff:33:59:0c:b7:22:db:57:c7:bf:b8:40:b2:6d:a5:
65:ef:55:63:df:e4:7f:f7:0b:c7:2a:ca:0e:82:18:
bf:12:22:ca:0d:ad:de:d2:cf:f5:bb:9b:4f:49:69:
bd:58:03:98:c6:5f:c7:fc:7d:d7:a0:c7:b2:7d:90:
32:cd:f8:bd:86:8e:da:43:07:b1:12:cd:ae:be:23:
c2:e6:e4:80:1c:f4:39:79:7a:27:c2:9d:8b:3b:82:
e7:14:87:ef:5a:03:7f:85:9e:31:93:73:f2:fd:98:
63:6b:f7:cf:54:91:20:d4:53:8d:2f:81:ff:bf:b9:
a4:33:1b:61:3b:8d:7e:82:fe:82:e3:1c:d0:a2:8a:
d8:18:1f:a4:3b:0a:b0:3b:c3:af:e7:ee:dc:fd:23:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:4D:32:A7:96:1D:9E:EE:3C:0A:48:16:4E:94:98:05:63:0C:61
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:88:de:a3:08:5d:61:7f:4b:27:41:30:93:d1:ce:55:0e:9c:
86:27:9f:d5:6f:15:72:1f:f4:a7:b6:91:a3:69:3e:15:c5:57:
66:7e:59:64:a4:fd:f1:d1:2c:0b:5c:01:5a:b7:e6:b5:a0:c0:
5c:56:68:ef:2f:6c:7f:70:66:a6:9b:6b:44:76:b1:8b:d2:56:
ed:de:82:cf:3f:dc:09:e1:2b:fd:ef:f7:a6:96:23:4d:32:df:
1e:f1:41:cd:b2:8c:b7:25:fa:f1:c1:a8:94:42:9a:6e:8c:a6:
06:dd:da:1f:22:81:7b:b3:95:e7:a4:f3:b9:32:95:53:cc:58:
f9:f9:3e:22:5c:f5:4e:9d:58:a0:82:68:56:8c:b1:be:42:70:
45:26:83:47:c8:ee:4a:ec:d4:0c:13:42:b4:4b:e7:21:35:fb:
e0:e0:52:4e:38:71:dd:70:e0:11:2e:86:76:87:d6:68:82:8f:
f2:8a:8d:d0:55:d1:d1:38:55:24:20:82:cf:64:73:1d:50:52:
e2:cb:56:16:6c:0c:4f:0f:80:e4:7e:a3:f5:5b:32:9d:2c:e2:
2a:7a:06:34:37:6b:19:3e:68:ca:96:ed:c4:eb:32:16:95:78:
70:25:35:60:7e:04:70:0c:a4:8d:66:52:6e:fc:5a:49:a2:45:
2a:0c:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:33 2025 by rpki-client