Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: zb5j4Yk0IVAY2gP8MFE1YJCOjAyV0qCHjAoxbojZNYI=
Subject key identifier: D7:9A:7A:C5:38:A5:5F:CB:14:A4:C1:7E:55:C8:DB:BC:29:4D:2D:60
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 019768F29B99837009A25025F77D58244687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 11:00:19 +0000
Manifest this update: Fri 13 Jun 2025 11:00:19 +0000
Manifest next update: Sat 14 Jun 2025 11:00:19 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: 13yqcLgTb3Bcwslb3A3cgBi3yFnFb82SEY3KTB1H8Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:9b:99:83:70:09:a2:50:25:f7:7d:58:24:46:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Jun 13 11:00:19 2025 GMT
Not After : Jun 14 11:00:19 2025 GMT
Subject: CN=d79a7ac538a55fcb14a4c17e55c8dbbc294d2d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:f1:d7:16:4a:53:1d:12:be:18:49:78:d3:
19:9e:28:99:bd:dd:dd:6b:39:e6:4c:50:1f:c8:0f:
ef:6d:1f:18:64:7a:26:c4:c2:1d:e4:37:17:47:6f:
ac:ca:09:0a:92:84:fe:4c:b2:f1:5e:3b:29:f6:93:
d8:9a:f6:32:0a:80:2e:b4:62:b7:2d:ef:f5:3b:72:
af:87:8f:2e:95:8b:2c:54:97:cc:80:de:28:a2:66:
49:89:59:81:58:17:a3:de:70:f6:b9:f7:5c:53:16:
44:ad:fa:66:18:c5:47:da:46:2b:0a:db:cc:1c:dd:
e5:1b:2f:f3:4c:d5:03:f8:83:2c:79:7e:43:00:2b:
b4:16:99:7d:e2:1d:e7:18:df:9e:d0:2d:ce:70:60:
4d:35:5d:61:c1:52:a5:b7:bb:11:a3:9b:a0:e4:06:
b6:44:e5:d2:de:c7:95:33:40:36:46:f5:8c:7b:58:
b0:c9:c5:21:a3:34:c6:6f:74:b2:7a:08:92:9d:74:
13:61:19:03:23:75:8b:60:3e:6c:21:0e:93:7d:58:
22:5b:e7:42:66:ea:48:bb:14:2d:ed:d9:ba:6c:38:
fd:88:bb:e6:a0:b8:f2:ca:16:54:46:d5:4c:32:f6:
6c:da:d3:09:51:92:5b:45:e8:8f:b8:fa:63:6d:c0:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9A:7A:C5:38:A5:5F:CB:14:A4:C1:7E:55:C8:DB:BC:29:4D:2D:60
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8e:7a:c1:85:76:35:f2:93:7b:31:a2:db:86:38:d2:48:23:
52:63:d6:39:c7:64:7f:35:9c:25:b6:42:6d:2a:1a:a3:44:b8:
8f:28:5f:1b:2d:6b:f8:10:65:56:f6:ec:90:6f:39:10:89:7f:
8a:05:0e:a3:35:e9:fd:48:02:22:4c:81:1b:83:37:c8:db:8d:
36:62:6e:c8:83:3e:02:af:45:f0:18:bf:9b:f9:6d:48:10:0e:
cb:58:d9:a2:4b:34:b0:c9:5a:90:af:20:6a:af:1f:5d:9c:53:
73:48:bd:d8:92:59:09:28:82:b6:fb:42:12:36:78:d6:f8:b2:
90:f8:66:db:79:04:61:dd:73:17:f5:14:75:c1:8d:3c:aa:b0:
94:bf:e9:ce:82:47:5e:03:bc:6b:1a:5a:37:ce:14:38:e1:a8:
04:14:06:bb:cd:d6:5b:e6:f1:55:3b:f4:25:d6:65:e3:93:b2:
36:c5:bf:63:7c:0e:e5:97:0d:b9:91:34:75:61:c3:ad:77:f2:
0d:6c:03:e9:d5:28:e2:84:9c:c5:09:af:22:de:a9:42:f4:bf:
ef:7e:59:3a:f6:a6:d5:97:5e:bd:1b:04:2c:13:32:ce:a1:ca:
67:f4:c1:79:ed:24:2e:31:37:41:6d:e5:2d:87:0d:1f:97:37:
3a:3e:f1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:13 2025 by rpki-client