Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier: 8RD9x1YQ4YhEHZANty2H6EUXQEdimDXmGa552V1YxXY=
Subject key identifier: B8:5F:B6:67:F9:E8:56:E2:55:FE:D2:8A:7B:5E:69:9F:9A:3A:B3:50
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial: 01976B86410E9E2D6A4B94936D7E4FEA64C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number: 1B
Signing time: Fri 13 Jun 2025 23:00:49 +0000
Manifest this update: Fri 13 Jun 2025 23:00:49 +0000
Manifest next update: Sat 14 Jun 2025 23:00:49 +0000
Files and hashes: 1: IqlpwJ2xW0fAs8ZGPBfSTtIDhwE.roa (hash: qbO1Ww6u5GvjQ0O8Z6mDFqL7l1gHc63dxnum3Lg38lg=)
2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: ZUExaDKXGHvd+fd2qIXkjw2tlgBTzXVuGUoRt9XgPIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:41:0e:9e:2d:6a:4b:94:93:6d:7e:4f:ea:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Validity
Not Before: Jun 13 23:00:49 2025 GMT
Not After : Jun 14 23:00:49 2025 GMT
Subject: CN=b85fb667f9e856e255fed28a7b5e699f9a3ab350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:75:cf:58:78:e5:aa:a0:05:68:79:31:2f:
bc:f7:a8:ce:f3:29:37:57:2e:9f:33:06:05:55:0d:
f1:44:2f:36:63:48:29:d6:e4:3c:b3:8d:91:3c:77:
ad:2f:4c:a2:66:36:7c:c6:5b:bd:7b:fd:58:56:d9:
55:0a:11:77:a2:e9:08:72:88:c1:22:5d:15:60:fa:
d3:99:a9:e6:35:0e:d5:6a:09:bc:30:c2:52:7c:a1:
a7:90:39:0c:0f:a6:b1:0f:b1:55:55:ef:a6:73:16:
53:88:dc:75:c7:63:f1:0e:32:69:b6:5a:1e:4f:33:
1a:12:6c:bb:c5:ae:f0:45:44:f7:8d:34:71:42:e6:
d3:0f:f6:a3:91:a2:8a:11:3d:fa:ed:a7:b2:58:6a:
8d:a4:19:a5:2b:5b:62:82:87:26:c0:f3:bf:89:88:
98:dd:bc:7e:0c:19:cb:8d:7f:75:85:e1:d8:cb:b7:
9c:b3:3b:43:db:ac:81:b8:3e:94:a1:a2:a5:9c:0f:
c0:5c:cd:78:eb:7f:c1:a5:fa:9b:45:14:86:89:bc:
ed:d5:d5:b3:9a:35:a8:bf:4e:f3:a2:e2:89:9a:a4:
78:d9:1e:3b:b5:6e:7b:01:9a:4f:35:14:5a:de:7e:
f9:d1:61:d4:1f:ae:19:ab:76:f1:b0:24:41:d5:31:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5F:B6:67:F9:E8:56:E2:55:FE:D2:8A:7B:5E:69:9F:9A:3A:B3:50
X509v3 Authority Key Identifier:
keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d8:68:6a:f0:01:44:af:11:13:2c:65:75:a7:24:48:18:f7:
3b:c8:ca:c9:5f:3b:43:e8:ad:1c:4a:f4:e0:21:00:e8:03:c9:
2a:e3:23:b9:6b:d2:bf:23:60:90:58:04:49:55:bb:99:79:d4:
9c:28:88:57:4d:eb:af:b4:b7:64:de:f4:d4:1a:68:db:28:3f:
47:94:39:cb:68:3f:9a:6c:f4:e3:67:8c:c5:02:63:62:4b:76:
e8:81:c7:73:0e:57:3e:70:0d:b8:a7:3a:c4:c7:d7:fb:e4:39:
50:19:a9:9f:ae:a5:57:54:15:e8:b4:14:ff:29:66:31:84:58:
0c:60:d4:29:36:84:ad:8e:f5:d1:e7:5f:ed:98:1f:39:42:6a:
46:01:60:fd:d2:53:84:a3:85:02:3e:07:ed:bf:fd:33:c8:ee:
ab:d3:b5:ea:fe:71:1d:6e:c1:f4:a5:98:2b:79:f6:f6:da:d7:
8b:a1:84:a3:79:3a:3e:f2:9a:a5:d3:fc:c2:b0:38:a3:58:07:
18:62:48:a0:4b:4a:21:f0:09:1f:ab:42:34:c3:08:c6:04:2a:
c8:48:e7:c5:fd:33:3c:74:c7:80:c4:6f:ab:b0:5f:bb:c2:44:
c0:0e:2e:22:ce:95:c6:85:8d:1f:b3:d7:8d:a7:df:ae:dd:55:
e1:dd:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:27:36 2025 by rpki-client