Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: ar26O0lI2eda6S/3gyB49y2BtG0RN8fGKQrH1w5wQEI=
Subject key identifier: 81:2A:66:AB:BC:1C:17:FA:4E:31:7D:BF:26:F0:91:BB:50:0A:EB:90
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 0197469E4E3B6E0A821CB1784DB6B9C5FA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 1152
Signing time: Fri 06 Jun 2025 19:01:09 +0000
Manifest this update: Fri 06 Jun 2025 19:01:09 +0000
Manifest next update: Sat 07 Jun 2025 19:01:09 +0000
Files and hashes: 1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=)
2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: yx5jSeQjjew2cwLMUvUuBFhSk8HGGcmi37V3+YE9gGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:4e:3b:6e:0a:82:1c:b1:78:4d:b6:b9:c5:fa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Jun 6 19:01:09 2025 GMT
Not After : Jun 7 19:01:09 2025 GMT
Subject: CN=812a66abbc1c17fa4e317dbf26f091bb500aeb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:3d:23:52:0a:70:c7:fd:49:8f:4b:10:13:
37:e8:70:ed:e2:d9:07:e7:f4:b2:17:f5:fc:3b:bc:
d4:b1:9f:14:ae:e2:7b:d2:0d:3b:2f:f1:8d:e8:e1:
69:7d:f7:12:b3:0a:c2:a7:52:da:98:6c:ac:8b:35:
1d:c5:e6:3b:a2:79:21:60:d8:b6:d7:f9:31:5a:4b:
a4:c4:8b:b5:55:a0:91:99:e7:7e:1a:2c:95:81:16:
1c:e0:9e:f1:24:14:b7:fd:49:22:5f:7b:cc:b2:d4:
b8:81:d3:07:33:de:7d:11:c4:46:89:83:5e:39:0d:
b1:d0:14:69:f6:35:1f:a9:af:57:95:33:dd:4b:0a:
fe:18:75:65:9f:da:1a:43:75:f1:6b:0d:52:de:0d:
65:34:9c:7e:bc:d5:0e:44:5d:c9:d2:53:52:2c:2d:
48:88:d7:5a:d3:33:57:fc:c0:07:66:6a:48:68:eb:
ea:2a:64:21:f0:e8:46:67:6c:9a:90:5e:a0:04:c7:
19:a1:ac:6b:cd:5f:e1:f8:8e:dc:df:dc:ee:46:39:
1c:26:f1:96:a7:2c:ae:5b:46:69:f3:bf:10:64:de:
d5:77:6b:7e:42:08:b2:c1:9d:dc:d0:54:cc:c6:5d:
8b:c2:6a:38:fa:b5:9c:9b:c8:3f:68:e9:21:e3:d4:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2A:66:AB:BC:1C:17:FA:4E:31:7D:BF:26:F0:91:BB:50:0A:EB:90
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f9:b2:0d:cc:c1:62:70:88:24:c6:a7:dd:96:b8:2e:6e:f2:
76:79:10:4d:48:91:73:d6:62:df:21:e5:ee:a6:13:c1:87:8c:
d0:37:12:7c:b0:17:cd:e5:a3:b3:5c:1f:12:f7:ce:9e:c7:fd:
bb:9b:e3:25:13:33:35:af:c0:3f:77:98:60:b7:ac:91:6c:3f:
d2:88:6e:b4:2a:5e:10:ce:62:65:e7:b7:16:ff:88:6f:02:62:
ce:6d:17:3c:27:b6:26:19:b2:ff:fd:93:4c:9e:de:22:76:7f:
28:b9:dc:9c:74:03:ec:2a:8b:b7:c8:c7:54:37:fa:42:99:0a:
42:41:19:bf:0a:99:76:a2:be:67:f9:1d:34:3b:da:8e:6b:d9:
a9:11:66:fd:09:35:28:8d:c0:41:28:b7:a2:bc:10:88:14:1d:
00:08:ad:c4:25:45:b0:ab:e7:d6:28:9c:81:89:9e:d1:21:c1:
06:a0:fe:ec:29:db:01:44:1e:8f:1d:77:e8:0c:31:16:41:d1:
92:69:8b:e2:61:9e:27:b6:22:09:52:24:a4:f6:61:4b:48:0f:
f3:77:55:3c:18:b1:7f:c8:bb:1b:35:f4:fc:39:13:43:93:66:
7f:73:4d:89:b4:c7:65:20:3a:2d:76:a0:99:87:c0:99:18:d3:
11:60:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:20 2025 by rpki-client