Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: AnO61edoQZobur/NAQBINUIs6gQVR2AxuxDpZSBHaL0=
Subject key identifier: 3C:DF:CB:87:15:F7:8B:CD:24:7C:17:6C:4D:E8:A8:73:1C:75:FE:8A
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 0197481E1E85C245FBB7BC7A814A4494B285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 02:00:22 +0000
Manifest this update: Sat 07 Jun 2025 02:00:22 +0000
Manifest next update: Sun 08 Jun 2025 02:00:22 +0000
Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: aRfKXJoC73liyNY68Uwt7CcMMexWSMiILFXFy85dLgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:1e:85:c2:45:fb:b7:bc:7a:81:4a:44:94:b2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Jun 7 02:00:22 2025 GMT
Not After : Jun 8 02:00:22 2025 GMT
Subject: CN=3cdfcb8715f78bcd247c176c4de8a8731c75fe8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:b2:9a:ea:d0:2c:88:6d:f3:f1:cb:0d:7c:
11:3f:3c:79:87:d9:c0:c1:87:a1:74:5d:73:27:0c:
d2:7a:1d:9c:58:1f:5b:9c:5b:4c:4c:f1:a4:ff:51:
7a:42:0f:c7:cb:38:f4:73:27:4e:0a:9a:67:40:45:
8a:ae:3b:68:3b:b6:6e:e1:cc:9f:43:bb:bc:96:b7:
88:7e:e0:4e:a9:6d:57:5a:c1:06:47:f0:cd:d9:f9:
2f:32:87:78:90:4f:6f:d2:27:38:a8:50:22:3e:5b:
e2:a9:22:1b:91:9c:37:3e:3f:bc:98:d7:84:3a:ba:
20:74:c5:50:bd:b1:95:6e:af:8d:f4:25:fc:a6:52:
6f:4d:9f:4b:ad:08:e6:3f:22:48:2d:ca:33:c3:cf:
3c:e5:73:ef:f8:72:68:07:3c:d5:a7:c1:54:15:75:
28:04:51:a4:e7:f8:01:23:b9:1f:8b:47:46:05:18:
a3:a1:d5:7a:7e:23:e3:5a:94:2f:c0:e1:d4:e4:5b:
c7:db:6f:54:6f:eb:19:41:0c:cc:8f:92:1a:ae:3d:
df:3e:a0:08:fb:0c:2a:9c:ba:70:8b:7d:35:52:93:
65:ea:c2:05:06:12:40:87:4c:af:6e:93:0c:98:13:
1d:37:1d:d6:c7:68:40:ef:3a:95:9c:0e:c2:cb:ed:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:CB:87:15:F7:8B:CD:24:7C:17:6C:4D:E8:A8:73:1C:75:FE:8A
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:76:39:36:59:a1:fd:e9:b3:da:ca:ce:50:5e:02:86:64:59:
4c:04:57:ad:4d:27:a2:db:56:58:d8:d8:41:b0:ec:9d:dd:ac:
da:ae:bf:56:7e:d2:48:7c:6c:19:f8:08:61:fe:c6:f8:12:e5:
5b:4c:f7:86:a5:c8:69:ac:c3:de:e7:66:95:48:56:ea:5f:b8:
ac:a1:65:bc:13:60:b1:78:8b:bd:bb:eb:cc:90:5e:39:03:62:
2b:fb:81:95:aa:c3:7e:f9:75:30:4c:e1:31:ee:64:f8:64:cd:
11:b0:37:84:61:f0:bc:7e:de:cf:01:27:ac:41:a0:d7:ce:ce:
7d:6f:0a:bf:82:c6:df:4c:3a:64:d8:2f:ca:97:60:ea:e6:73:
7b:86:2d:f1:2d:9f:da:06:97:b8:e1:ab:d7:46:99:a5:55:82:
46:d9:81:75:40:c7:f1:f5:39:17:6e:91:c6:d2:c4:c3:8c:25:
44:d5:b6:66:44:72:90:ac:18:a2:1b:22:04:69:53:88:d4:19:
0a:52:96:43:bd:02:18:66:66:63:c2:41:b6:49:65:bb:80:b0:
de:ad:00:c8:65:3f:08:f4:32:66:1a:2b:35:5f:b1:37:7f:3c:
b3:89:70:3c:88:15:47:2e:11:1b:92:65:ca:a6:31:89:b5:e0:
d3:ae:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:02:57 2025 by rpki-client