Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: HFfgxtLNbnFkETy6qpMh1o2fzZlgWRaLG18qcLGuths=
Subject key identifier: 6D:A5:48:55:79:84:39:CD:BD:4B:30:6B:65:90:92:BC:05:34:33:65
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 01977ED613D79904C3DCA73F8003BF9B9506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 17:00:48 +0000
Manifest this update: Tue 17 Jun 2025 17:00:48 +0000
Manifest next update: Wed 18 Jun 2025 17:00:48 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: Uv9L+khJsuz67lBZjtFQYZjzBAWeYaKgw4DwpS8KHDU=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d6:13:d7:99:04:c3:dc:a7:3f:80:03:bf:9b:95:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Jun 17 17:00:48 2025 GMT
Not After : Jun 18 17:00:48 2025 GMT
Subject: CN=6da54855798439cdbd4b306b659092bc05343365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:ea:03:23:b6:12:d1:30:90:8f:67:fa:43:
26:82:56:d2:22:87:e2:d3:f0:ae:13:7a:b3:64:75:
8b:e9:8a:96:22:df:55:7b:0c:80:a1:46:da:bc:40:
a1:e5:08:12:4b:91:35:1c:b6:2b:c4:51:b7:72:ad:
13:1c:ab:8a:29:98:51:f8:4f:34:ae:b0:45:ab:f3:
eb:82:d5:63:70:68:d6:0d:4e:49:99:41:b4:f7:0c:
80:c8:66:6b:62:ed:e6:f3:41:33:0c:ab:b2:d3:e5:
bb:24:f0:0e:d3:4e:17:d3:6c:b4:1c:ea:7c:6b:93:
ec:87:12:e3:be:41:64:66:e2:59:f7:00:10:dc:42:
68:6b:f5:07:8f:35:ec:0e:f4:d7:a3:a5:56:64:83:
0e:06:09:79:ee:86:75:5d:83:34:b6:c8:86:81:91:
7b:2c:69:35:82:23:b2:cc:bf:14:45:d9:be:fc:4d:
4b:21:25:ba:c8:7c:0f:5e:5c:88:9a:87:af:72:f8:
01:d2:42:00:dc:bc:c5:1e:19:4c:f4:06:a7:ca:ed:
32:d3:02:01:36:55:d5:ca:8a:b7:89:1a:2c:2a:15:
cd:27:2c:6c:32:0a:ff:36:1e:4e:db:9c:4a:73:0d:
79:76:46:ed:ea:3f:f2:b0:a2:26:84:56:67:0c:c8:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A5:48:55:79:84:39:CD:BD:4B:30:6B:65:90:92:BC:05:34:33:65
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d4:8a:02:fb:5c:7f:30:77:39:eb:23:04:ad:95:ce:60:af:
8d:f9:b2:d2:b0:5b:ca:c1:0b:b4:c7:da:ec:85:4d:59:0c:c2:
4c:30:4e:6f:eb:93:c2:52:59:e6:e6:73:bf:d7:ac:9a:a5:f2:
dc:9d:4a:56:1a:26:53:6d:50:97:e3:44:28:16:b7:56:74:21:
6d:a7:78:d2:19:6e:e0:9f:bf:81:78:72:e1:c2:dc:99:e0:9a:
7d:fa:9e:8e:73:7c:9d:a8:18:e6:3b:5e:2d:b7:1f:fe:0b:8d:
be:d2:9b:1d:ee:12:57:d4:68:6a:d2:e3:66:e6:fd:91:0e:21:
09:26:2c:6e:e8:96:dc:57:34:1c:e1:53:dd:63:71:0c:86:8b:
f7:06:06:ce:14:b1:ab:99:2a:d2:61:24:60:64:7f:33:44:9a:
0e:25:d1:4c:6c:02:36:a3:6a:83:96:1b:cd:84:ad:da:5a:1b:
14:4c:96:17:79:1c:d0:c2:ef:28:99:58:b8:6d:6d:b4:79:89:
32:bf:f2:4e:3f:19:99:6b:c7:3a:a1:01:4d:0d:32:b6:8d:65:
24:fd:6a:5d:b9:b8:46:a7:77:c5:4d:fc:22:55:f8:8d:b4:6b:
20:8e:71:4d:f2:c3:5d:e5:c9:a6:1f:0b:69:21:4b:31:3e:60:
8b:c8:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:59:19 2025 by rpki-client