Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: BH3cnjTWp53AXuQrIEehiV2PBtb5xDrxwDJ+25yyKlA=
Subject key identifier: 3E:0D:55:C7:3B:1F:C1:C8:60:56:7C:4E:D6:CE:06:F8:B7:91:EF:7A
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019780567D6822DB03434B3D4E3A5B20FD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 10B8
Signing time: Wed 18 Jun 2025 00:00:40 +0000
Manifest this update: Wed 18 Jun 2025 00:00:40 +0000
Manifest next update: Thu 19 Jun 2025 00:00:40 +0000
Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: DmLinze8KlddP5HPhDM0Lz0am9IWafp3uci5uItbaQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:56:7d:68:22:db:03:43:4b:3d:4e:3a:5b:20:fd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Jun 18 00:00:40 2025 GMT
Not After : Jun 19 00:00:40 2025 GMT
Subject: CN=3e0d55c73b1fc1c860567c4ed6ce06f8b791ef7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:8d:59:71:04:c8:ff:9d:6b:83:79:2c:ff:
99:d7:0c:ac:26:d8:dc:8e:74:29:eb:61:b1:5f:a9:
10:60:0c:2a:8b:48:92:cf:cd:28:ea:dd:af:eb:71:
5d:02:36:c9:12:6e:cc:8f:5a:71:4b:16:c0:37:6a:
4f:46:90:ce:e6:ac:98:0f:a2:a1:72:4d:bd:af:8e:
46:19:f8:61:d7:cc:07:2a:db:5a:4d:67:d1:a4:16:
c0:de:04:b4:87:e6:90:c0:6c:5a:d2:fa:8c:ec:ab:
35:61:5a:e9:7f:83:a8:ce:21:6d:3f:d4:71:36:fd:
69:c4:b9:d4:24:ce:15:d6:9d:d8:cb:14:34:24:e0:
95:ba:7c:2d:5a:2a:e3:f5:d5:f6:98:a5:30:39:0b:
f5:04:66:ed:bc:81:f5:79:0a:e8:05:0e:f4:3e:af:
c9:d2:e7:dd:69:c1:c5:6c:e6:f6:3b:cb:1c:01:87:
9a:36:f8:73:28:38:a7:72:f3:9b:24:6b:ff:a7:d3:
2a:89:c6:6c:c8:3b:ae:13:5d:3e:d1:56:c6:ab:92:
1d:d0:40:35:79:fa:91:88:1b:b6:af:2d:f2:15:24:
42:a4:ed:79:6d:e6:67:e6:4d:85:39:38:25:ce:e0:
e3:21:0a:44:69:ef:8c:39:93:06:70:f1:c0:3a:97:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0D:55:C7:3B:1F:C1:C8:60:56:7C:4E:D6:CE:06:F8:B7:91:EF:7A
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4f:99:2d:ee:d7:0d:57:bc:48:52:e5:0d:0b:52:73:62:0f:
cd:87:56:ac:97:2d:f8:b0:e5:cb:8f:2d:f8:47:38:fb:2f:50:
ae:73:1c:e0:32:f8:2d:31:4e:0e:88:ea:80:7a:3c:3e:ee:a2:
e4:29:dc:45:9c:48:a3:d7:93:23:25:d4:44:14:a3:46:ed:f4:
b5:f3:bb:bb:4c:0f:41:eb:80:8c:e1:29:a9:53:44:ea:a1:e2:
81:64:e6:10:06:c8:86:3d:4d:cf:26:9d:89:f7:31:b3:81:5c:
e1:a2:ed:0d:b8:44:00:b0:6a:09:ad:a0:93:ca:d0:d0:b8:60:
ab:d4:1e:7b:d1:c2:b5:39:fe:a3:fc:a0:49:7c:49:bf:81:33:
26:5a:a5:d7:aa:89:53:e6:c2:8e:2d:15:ee:0f:bb:18:ee:ec:
29:38:97:4e:f5:55:e4:52:9e:a7:11:bb:db:00:b4:da:a0:74:
8d:26:f4:74:2b:aa:b5:b1:e5:eb:c2:02:01:10:8a:2e:8a:93:
bd:33:e8:47:11:ea:9c:45:8a:ec:02:d1:36:2f:3a:b6:d7:6d:
87:00:f1:81:b7:ab:8a:eb:b1:e0:83:8a:98:b9:f0:49:32:cc:
3d:cb:c1:e0:1e:e6:12:25:ca:b6:29:2c:dc:29:fc:71:9a:38:
5b:3f:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:11:20 2025 by rpki-client