Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: SIFQjBG/VXY8BgNYBsVbHZ69bTfNyZLdOptvMDFDZIo=
Subject key identifier: 0B:B6:3D:BF:90:0A:49:09:20:31:BF:0D:DB:2B:32:93:5E:B1:57:DF
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 01974EFC1790A6E4EC96DE2E862C757E83E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 10AB
Signing time: Sun 08 Jun 2025 10:00:33 +0000
Manifest this update: Sun 08 Jun 2025 10:00:33 +0000
Manifest next update: Mon 09 Jun 2025 10:00:33 +0000
Files and hashes: 1: ghqg6ujuEOV4Vw3b6x6YkQU8aSs.roa (hash: IATpDK+kaz0czhsEzmLbtPDJ492YJfivjvGQ/3AgHO8=)
2: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (hash: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=)
3: x5FwTTVorsGfIV2MDa8IC9dozSI.roa (hash: cVCSNkZBBh3ZJGnim77LdgANipO1Ai7iWjVLFMe9HIY=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: Oxxeoz6tGsiP0WArA9MlDJJKRZTsiYTuvplpPKOtPsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:17:90:a6:e4:ec:96:de:2e:86:2c:75:7e:83:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Jun 8 10:00:33 2025 GMT
Not After : Jun 9 10:00:33 2025 GMT
Subject: CN=0bb63dbf900a49092031bf0ddb2b32935eb157df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:94:01:e1:0d:fc:05:ee:98:67:03:2b:42:
e3:df:57:23:54:a7:9c:68:fb:89:38:06:ed:f2:cb:
1a:c6:e2:97:7d:cf:38:ad:0c:93:06:bd:8f:7e:4c:
aa:fa:95:19:7f:2b:32:aa:03:00:57:a1:67:64:71:
c7:df:87:82:53:34:6c:6a:d6:3f:73:0f:4d:41:a8:
9f:9c:f4:4e:42:bf:e9:69:b7:5a:ee:96:1b:3b:e6:
64:24:f3:7d:1c:c6:1c:5e:1a:f8:7f:4e:5b:1f:73:
d9:1a:cc:71:57:ea:ed:4e:82:e7:b4:4e:55:da:e6:
7d:a2:dc:4d:3f:90:f6:15:2b:be:98:9c:06:fc:0b:
41:b7:ca:43:cc:54:44:df:c0:b3:c2:ea:eb:4d:48:
49:0e:60:1f:de:b7:4a:04:4f:69:ac:51:57:da:59:
71:69:b6:22:d8:4f:74:9f:64:89:dc:9c:a9:42:c7:
93:b5:c9:53:06:d0:1c:ee:9d:fc:b9:db:c3:be:1c:
41:84:dd:71:aa:e0:9a:38:5f:65:1e:d6:cf:3f:6f:
a4:51:2f:c8:bd:e5:72:97:92:82:8b:12:79:c8:bd:
8a:af:1c:be:11:08:ae:40:6e:f0:3a:9b:60:5b:ac:
50:5d:a3:c2:6b:06:4b:da:d5:f6:be:50:e6:24:a3:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B6:3D:BF:90:0A:49:09:20:31:BF:0D:DB:2B:32:93:5E:B1:57:DF
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:12:9f:93:7a:d8:04:0c:ca:21:45:23:59:41:14:cf:13:5d:
6d:5f:9e:9a:15:f6:8b:01:10:db:d3:d0:79:d3:8e:c0:a5:24:
57:de:34:c1:ba:f2:0d:bf:96:e4:62:b8:a9:f6:53:52:7b:64:
32:b8:df:77:e9:ef:70:8e:12:6d:05:d6:2f:b5:72:bc:97:c5:
ca:de:02:ec:54:96:40:66:52:33:c9:fa:c5:01:b3:1a:f3:aa:
aa:dc:2a:7f:9a:41:17:5e:cc:3e:23:0f:00:2a:b5:03:a0:ba:
73:2b:c2:c7:30:29:db:70:bb:36:ae:54:c0:8f:86:5c:a4:88:
25:19:92:3d:62:53:18:dc:74:b8:46:7a:44:75:ec:b4:c1:83:
77:a2:ad:a2:3f:1a:19:c3:0b:24:12:52:06:8e:0a:46:f7:2e:
be:f8:eb:de:15:77:77:6e:2b:d7:5c:7b:04:eb:2b:4a:cf:a5:
ef:9e:13:58:00:9f:76:55:c0:60:98:16:24:37:5b:e7:03:97:
d7:9b:c0:84:e1:92:63:8f:e8:18:cd:8c:0d:fc:91:89:dc:91:
e5:3d:33:a6:47:e9:8c:a0:38:29:17:b5:ea:7a:f7:91:61:c7:
da:15:d0:94:3c:8c:81:43:d5:41:c4:4a:30:65:dd:18:f2:3d:
51:8e:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:56:26 2025 by rpki-client