Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json)
Hash identifier: HZ0e9l9RvNG2Sg3jxbJQyVVGyvK72IZcbzo9TUcYN1s=
Subject key identifier: E1:8E:7F:80:A2:A3:34:7F:EE:B6:49:2C:2F:69:DB:5F:6D:D1:1D:93
Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858
Certificate serial: 01975490ED5AF4302A5C90D299B27204371B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
Manifest number: 016D
Signing time: Mon 09 Jun 2025 12:01:13 +0000
Manifest this update: Mon 09 Jun 2025 12:01:13 +0000
Manifest next update: Tue 10 Jun 2025 12:01:13 +0000
Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: 1JS2zVhtWeIXdXVqk+SziEU2spemWuAXu2Ep6+9jukA=)
2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:ed:5a:f4:30:2a:5c:90:d2:99:b2:72:04:37:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858
Validity
Not Before: Jun 9 12:01:13 2025 GMT
Not After : Jun 10 12:01:13 2025 GMT
Subject: CN=e18e7f80a2a3347feeb6492c2f69db5f6dd11d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:30:dd:64:fe:d3:b7:5a:c4:91:c5:d2:29:
64:4f:60:40:9b:bc:31:47:cd:92:84:db:f8:ec:f4:
97:de:91:81:80:cd:35:8e:c7:77:c7:b9:64:60:81:
67:c9:0c:8c:f4:ec:96:d3:76:2b:d9:e4:be:9a:8a:
79:7a:11:04:f1:a7:c4:5e:2f:e5:05:5f:b1:56:e0:
8b:05:9f:86:f3:c8:d2:75:ce:de:9e:7f:6d:c0:0d:
40:8c:72:70:b9:70:8e:70:9b:d3:2b:4b:4f:d0:97:
93:a4:02:f6:ff:ac:23:dd:35:bd:98:9d:61:c4:1b:
71:84:61:76:6f:ea:54:0d:6e:8b:88:11:b7:21:b5:
92:53:7e:5b:51:53:2d:c6:ba:2c:63:8d:70:ce:b4:
ac:32:2d:01:e4:b0:cf:08:69:0a:f4:17:9f:b8:10:
17:9e:2a:57:dc:5c:17:1f:48:57:66:59:a3:e1:5b:
d6:8a:f7:ef:e8:19:62:74:0b:db:f7:53:4b:43:e0:
d4:5b:14:57:20:48:6a:de:93:c4:5b:1c:4e:27:76:
56:87:6f:69:e0:80:3c:26:01:42:2e:d5:10:ed:75:
5a:bf:50:a0:40:ef:d3:43:10:c6:dd:82:48:73:82:
c5:8a:55:1a:27:e7:1f:33:da:93:ab:1b:6a:1d:83:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8E:7F:80:A2:A3:34:7F:EE:B6:49:2C:2F:69:DB:5F:6D:D1:1D:93
X509v3 Authority Key Identifier:
keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b3:94:9a:2e:91:30:7f:3d:d8:0d:9c:ee:aa:61:53:ab:ba:
e0:35:78:65:2b:df:44:e4:15:bf:fd:02:99:02:23:2f:95:51:
4a:99:b0:76:a2:ac:f0:55:4f:6b:05:6b:af:9d:7e:e2:d9:dd:
58:c4:75:b1:85:75:89:34:15:9b:1b:51:87:fd:e8:05:51:0f:
ca:48:2a:3e:3d:e0:ad:e4:57:c2:e8:d3:4f:1b:0d:48:01:55:
66:9b:52:2e:67:00:6c:56:ea:25:79:1a:ec:8b:7f:86:b9:de:
66:36:65:8d:00:37:c1:3f:a0:ef:af:53:77:b7:07:a0:0b:f3:
0c:67:5b:19:b3:a0:25:a2:58:1b:13:5c:f3:c3:a5:83:bf:56:
3f:19:55:a2:8d:be:c3:62:45:0c:b5:87:3d:47:94:63:44:e9:
a5:24:2e:3a:37:15:01:6c:7a:19:71:d7:0f:2d:4f:ad:95:15:
55:f9:d6:fa:d5:3d:c7:ca:50:16:86:5b:79:6a:33:10:8d:53:
2d:ae:62:a9:5c:2d:01:7a:b8:69:dc:07:6f:c3:d6:05:79:31:
d8:6e:36:9f:39:8d:77:4d:96:b5:97:98:74:1c:ad:3d:26:ed:
f6:4d:26:07:1c:fd:a7:6f:99:9b:03:8d:85:41:a9:94:02:80:
44:f4:d6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:50 2025 by rpki-client