Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: tlG0DszVPMYjUCekPC72LMuZHZV1Kx16Gf3qkUPMs5A=
Subject key identifier: 3B:60:A8:6B:DD:30:AA:93:32:4E:48:9E:D7:2A:BD:8D:BB:A2:36:13
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 01974666EA16679024AE127D7E72BE4B38A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 13FB
Signing time: Fri 06 Jun 2025 18:00:39 +0000
Manifest this update: Fri 06 Jun 2025 18:00:39 +0000
Manifest next update: Sat 07 Jun 2025 18:00:39 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: 1gX9kBBWqb4YMyxVcU4FEU1DhDQh+pINdbbfA7Vhc4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:ea:16:67:90:24:ae:12:7d:7e:72:be:4b:38:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Jun 6 18:00:39 2025 GMT
Not After : Jun 7 18:00:39 2025 GMT
Subject: CN=3b60a86bdd30aa93324e489ed72abd8dbba23613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:41:79:e6:30:c3:aa:b1:1a:24:e8:ed:67:
77:f1:17:ea:aa:49:b7:4e:75:c6:15:b2:bc:a4:f9:
34:09:56:2f:de:51:e7:f7:01:7d:2b:77:39:24:30:
5c:df:e5:2e:b5:2e:b6:8d:38:bd:e4:47:4e:2f:3e:
0e:b9:17:99:3c:df:bb:fd:5d:b8:d3:ad:72:be:55:
19:7e:3b:4e:bc:44:9d:e4:4d:26:70:10:55:ba:11:
dc:91:21:d8:c4:77:35:fa:eb:4b:8c:80:ce:ff:5f:
80:d4:e8:9a:43:21:68:cd:9d:64:61:25:ec:97:97:
3d:b9:e0:6b:ba:2f:49:56:39:89:3c:6f:a4:70:15:
1b:21:eb:98:57:46:6d:b2:af:7f:00:00:a6:5c:d2:
20:bd:28:57:05:8a:b9:dd:af:df:05:8b:7c:d6:2a:
04:99:ec:99:47:21:a5:eb:40:6d:25:26:79:70:97:
15:d7:42:bc:bf:8e:eb:b8:13:9a:ba:ef:f1:38:ee:
c8:cb:d4:45:cc:b2:3d:92:a0:6a:0d:aa:27:71:27:
82:bf:15:db:2c:8f:7b:a1:9c:01:68:ce:cf:b9:9a:
93:45:3e:1b:0f:7e:49:70:bb:a7:c5:5b:07:76:b0:
00:8e:4f:b7:1e:14:6c:0c:00:ad:51:10:bf:76:ff:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:60:A8:6B:DD:30:AA:93:32:4E:48:9E:D7:2A:BD:8D:BB:A2:36:13
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f3:42:06:23:7a:dc:f4:04:9c:1c:5a:e1:17:4a:6d:58:0a:
63:22:61:54:a9:09:65:39:6c:98:cd:48:4a:89:31:c8:22:63:
3d:c7:5c:75:38:7f:07:b8:20:ce:71:74:fe:bb:d5:f6:d6:1f:
eb:c7:95:c8:ea:fd:ef:4f:ee:41:78:a8:b2:a8:4f:e7:10:4a:
70:df:a6:8c:cd:50:70:c1:64:2e:86:c7:81:09:66:e2:c8:c9:
8b:ec:dc:74:74:da:df:5e:a1:17:bd:f2:9a:41:62:2b:03:ac:
14:59:83:ab:a9:1f:8a:8c:c3:c2:f5:92:60:e3:32:7f:7d:4e:
2a:f4:3f:72:07:01:c8:25:fb:2f:98:f3:57:43:6b:71:ee:b7:
73:93:25:a3:7b:bd:9e:11:94:e2:25:67:51:ae:04:62:45:d0:
1f:d2:4d:08:7d:63:a3:a3:f5:2e:e4:48:e6:f1:5d:6c:eb:e1:
0a:1a:73:c3:a9:21:e3:2a:38:4c:8c:88:3e:42:d6:4f:67:62:
95:bf:8f:8b:07:17:90:c7:dc:30:a5:d3:e0:b6:c9:c3:16:b3:
d9:e0:d2:54:b2:5c:07:06:1b:af:6d:df:5d:2e:94:cf:8d:de:
f0:2c:11:0a:c6:81:48:1c:48:93:3d:cd:6a:67:cb:45:24:ea:
57:2f:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:32 2025 by rpki-client