Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: gawQ4XB2ssoOosNMzhzEvzKxmD2fEHgHEgu7FR0ynr8=
Subject key identifier: 5A:81:85:EE:64:6B:C8:20:DF:23:95:85:65:6F:0E:CF:7A:8E:F0:0F
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 01976E875E508CA68CE473CEFD6A42EFB491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 15A1
Signing time: Sat 14 Jun 2025 13:00:54 +0000
Manifest this update: Sat 14 Jun 2025 13:00:54 +0000
Manifest next update: Sun 15 Jun 2025 13:00:54 +0000
Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: YMujs40W+4rMpzuSe2kIJBkow16wLAVDjmuIpH92yH4=)
3: lmtLzOVEBCMJmFDW97nmpW6PzFg.roa (hash: iVAnqzIcFvJJNH7mwFr2Z4NAC8vfHKTonzu7qSoeFDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:5e:50:8c:a6:8c:e4:73:ce:fd:6a:42:ef:b4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Jun 14 13:00:54 2025 GMT
Not After : Jun 15 13:00:54 2025 GMT
Subject: CN=5a8185ee646bc820df239585656f0ecf7a8ef00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:79:4c:d1:91:c3:f1:f2:48:0b:18:f3:99:07:
cb:40:91:7a:fe:07:62:8a:c9:35:9a:4a:42:56:b2:
fc:b3:c5:25:f9:fd:da:23:46:28:f9:1f:53:89:56:
83:23:5e:04:41:af:c5:e1:c8:dd:f1:19:36:2e:de:
ac:74:6c:d5:65:7a:ba:4f:d4:63:6d:06:57:2c:99:
c6:94:c7:3e:ee:28:0b:94:99:82:ed:fd:8f:c3:14:
86:00:b8:35:b5:95:95:88:b5:a9:9a:da:6f:48:53:
1b:45:63:bb:f5:a6:8f:09:af:0f:b0:c6:02:ec:af:
95:f7:3d:f7:d1:61:19:93:ae:b6:ea:27:31:fd:f7:
d5:f6:7b:9b:f7:fc:f2:df:53:dc:b0:98:63:99:6e:
7e:5a:a0:ad:f2:1d:a3:07:a5:0c:3d:7c:2e:08:62:
9a:c4:dd:04:7b:c9:e6:01:34:6a:0c:fd:9f:3f:eb:
32:b8:8f:7a:30:9e:59:c2:c9:05:28:de:00:a7:3a:
55:48:e3:63:cf:f5:c1:16:b5:3d:82:41:02:fc:ae:
74:bf:8e:58:4d:f5:f3:5f:7c:90:ec:51:c7:69:07:
c5:4f:78:7f:c1:87:4d:8a:78:25:cd:97:2e:2e:f6:
ee:ef:cc:39:e6:7c:74:f0:64:ae:de:ac:90:d6:63:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:85:EE:64:6B:C8:20:DF:23:95:85:65:6F:0E:CF:7A:8E:F0:0F
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:67:01:cf:b8:75:19:ad:28:56:e2:93:52:20:19:b2:fd:6a:
c6:b5:8e:1e:6f:c0:94:c2:33:c3:f3:94:6a:3c:b6:a4:46:27:
e3:3f:1e:0a:11:ae:20:8d:6d:c7:a4:94:d8:64:15:07:40:f0:
82:68:36:7d:ee:a1:e4:de:31:4b:c6:f4:d5:22:e7:18:d4:34:
48:61:e1:b1:d6:c8:ef:63:87:55:15:ce:79:d5:73:99:2d:9f:
d9:12:38:9e:c1:6d:e4:2f:ba:c1:bb:5e:34:c8:9f:26:d3:98:
6a:7a:88:f2:6b:be:d1:39:1c:ea:ad:98:58:63:50:0b:d7:99:
3a:7d:b9:00:0a:34:cc:6a:95:07:84:f7:85:4f:ea:ea:c5:b3:
9b:38:91:2a:c3:9b:b9:6e:ba:20:b0:ed:a9:f0:59:63:16:b8:
08:4c:0e:77:75:e6:79:22:5d:2b:7f:e0:a9:b0:f9:f0:82:2e:
d8:bd:37:0c:f7:23:6b:94:68:69:23:37:eb:94:f4:ed:4d:77:
e7:13:f6:97:34:e8:8d:a4:81:34:35:66:33:e1:f2:40:20:1f:
51:b0:04:51:33:89:0b:42:4b:7a:1c:a7:8c:80:88:f0:84:9c:
02:ca:0a:d2:8c:5c:bc:2b:48:d2:90:f5:19:88:84:29:5c:c3:
bf:96:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:23:20 2025 by rpki-client