Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json)
Hash identifier: Z5JGV7h0gKjlktaKM6S4qTDarE7KDHv2FUTYnXi0k2Y=
Subject key identifier: AC:63:DC:23:0B:9C:B0:F7:8C:A6:A4:12:A3:B1:7D:9A:B1:A4:26:41
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 01974A7BA31F2FBB44098B85A775FD896EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
Manifest number: 12C3
Signing time: Sat 07 Jun 2025 13:01:46 +0000
Manifest this update: Sat 07 Jun 2025 13:01:46 +0000
Manifest next update: Sun 08 Jun 2025 13:01:46 +0000
Files and hashes: 1: YyOogR6T7jG6zD-5lx-V8y_JBFA.roa (hash: jTd/5MNcv4fqMfKWtnfVXAAWAN6UzlPvaAV2hpZQQJw=)
2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: /H1kIp6dWSxZSqjbh9y3DhNH216B0P6cPB7tQ2L6Awo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:a3:1f:2f:bb:44:09:8b:85:a7:75:fd:89:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Jun 7 13:01:46 2025 GMT
Not After : Jun 8 13:01:46 2025 GMT
Subject: CN=ac63dc230b9cb0f78ca6a412a3b17d9ab1a42641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:f0:eb:89:e4:8e:15:70:fb:b2:3e:6c:97:
b5:b7:76:a3:74:fc:75:21:97:c8:f2:ae:7e:db:92:
22:49:34:93:d0:cf:4e:5b:f9:ee:70:bf:7a:b2:45:
2a:80:d6:50:f7:93:ca:e6:f3:b5:fd:c0:80:d0:a4:
5a:b2:47:ed:a5:89:8b:0c:77:4c:d1:ad:ec:8f:3c:
77:38:78:f9:f5:34:62:80:b9:68:2a:d2:18:a1:2c:
0d:b1:71:9f:b8:0d:42:74:4c:c7:3a:1d:ec:df:8f:
d9:9e:d2:88:ff:7d:9b:27:2e:ad:76:5a:13:34:87:
d7:c6:01:47:5d:45:5b:87:6a:0a:17:55:c5:af:d3:
5b:bf:34:4d:20:90:f6:5e:3e:7e:af:ba:98:5c:bb:
59:c2:49:ba:8f:b6:05:34:54:12:3b:35:73:f9:ce:
da:15:4c:b9:98:bf:71:36:d7:c7:47:d5:16:bc:32:
bd:72:04:cd:33:03:51:89:5c:84:16:f0:b4:43:85:
5f:94:81:f7:6e:23:9e:41:28:df:8c:6e:a6:ea:5e:
4f:aa:77:ae:1d:30:96:b6:6c:37:de:d6:91:34:6b:
a4:77:65:a1:08:b4:72:eb:d9:d3:ea:6c:68:19:5d:
e1:eb:46:86:a3:50:d9:8d:85:7f:a1:18:81:ec:de:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:63:DC:23:0B:9C:B0:F7:8C:A6:A4:12:A3:B1:7D:9A:B1:A4:26:41
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:27:86:d6:70:16:5e:b3:ff:2a:09:0b:24:e2:d1:33:25:8b:
2e:4d:76:87:67:88:82:2e:07:79:64:27:99:88:e1:61:b6:df:
39:3a:e3:63:83:41:25:02:13:37:e0:53:d5:c8:86:22:f9:af:
c7:6c:7f:e2:c0:8a:bc:0b:16:6c:6d:6f:a4:89:0c:49:87:15:
7b:9e:7c:53:74:06:2e:f8:f5:eb:9a:72:70:b3:06:1c:a4:ce:
fb:f3:12:20:7f:ca:2d:9d:f1:47:00:29:39:b0:81:f7:a1:ad:
cc:14:4e:dd:52:6c:1b:11:fa:bd:78:51:da:62:ec:06:a7:0d:
f0:e6:8e:06:5c:44:af:84:b6:20:bb:7e:df:2e:96:b9:ec:a3:
a9:00:22:3e:fd:97:56:ff:3c:58:38:56:2c:8c:40:f1:97:61:
e4:c8:eb:21:9c:16:4d:96:07:3f:17:33:df:5c:e1:46:8a:cc:
81:47:64:f3:a6:24:42:21:a7:70:2c:78:55:a2:89:ab:ad:c2:
71:1e:9e:be:08:e1:00:35:71:b5:e2:a5:1a:22:2f:76:1d:b3:
7b:24:10:a7:9a:67:b2:88:25:85:ca:76:e4:c5:eb:67:3d:89:
6f:c8:5b:fe:e9:ba:85:05:50:9e:19:ec:e7:6d:03:9e:c9:0c:
28:1f:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:14 2025 by rpki-client