Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: ZtB9OYZkP1Xzbv6+c7fyvAwxA9hOvqE/6Y7M4V14VDI=
Subject key identifier: AA:78:CF:F6:3F:D3:BC:0C:6E:40:6C:4D:36:8C:A6:E2:6F:B0:C1:96
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 019768F2B9511E46387DB3FF4BF2E7254A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 12DE
Signing time: Fri 13 Jun 2025 11:00:26 +0000
Manifest this update: Fri 13 Jun 2025 11:00:26 +0000
Manifest next update: Sat 14 Jun 2025 11:00:26 +0000
Files and hashes: 1: LM0g69HtGp_batQfV5x1NEUMmOk.roa (hash: 7VtBpd+wuDX24L0fq4Y7fsMl9oygXrzXXYzNLlqhtLg=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: hLkpOy14oEihkEEMasq7ZX1r6mR1juF4WBG60O2/3yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:b9:51:1e:46:38:7d:b3:ff:4b:f2:e7:25:4a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Jun 13 11:00:26 2025 GMT
Not After : Jun 14 11:00:26 2025 GMT
Subject: CN=aa78cff63fd3bc0c6e406c4d368ca6e26fb0c196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:1d:db:c1:d1:04:cc:69:5a:bd:84:c0:68:
73:3d:67:0d:7b:f9:86:05:28:c9:b8:f3:8a:1a:2d:
54:1c:1c:5d:75:50:98:d2:22:8b:fc:e9:dd:5a:75:
05:6f:f9:76:a6:d5:46:b0:21:46:12:1f:39:88:ba:
4e:07:af:96:c4:7b:9d:b8:30:2f:00:48:1f:0e:f2:
11:86:52:09:98:ee:b4:1f:1d:85:b1:87:26:7f:b7:
be:d8:33:9e:61:75:d8:28:5e:96:ce:49:00:5c:19:
27:f6:ab:c2:f6:70:8d:30:d9:d1:9e:d4:3f:4c:29:
f4:1f:f7:fd:87:c4:aa:ca:b1:5a:28:9e:39:cb:ef:
28:10:ed:fd:2f:13:a8:c7:69:97:d5:a6:8a:87:38:
a9:15:eb:c1:cb:98:01:cc:c1:6c:da:27:14:f8:07:
db:89:7d:0b:6b:31:e5:3e:99:0c:7a:de:02:8e:b7:
86:03:d0:50:f4:b2:43:72:a9:30:0d:0e:38:7d:83:
3e:9f:49:98:0c:d7:ba:fb:d0:b2:c9:e0:47:4b:5b:
d7:ea:9a:d2:e4:3a:30:e1:01:18:8c:fe:9e:90:18:
5e:35:af:bc:db:5a:22:f3:1b:59:7b:6d:d7:55:0f:
a0:e0:66:cf:6b:84:db:fa:87:4b:e9:84:47:e1:80:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:78:CF:F6:3F:D3:BC:0C:6E:40:6C:4D:36:8C:A6:E2:6F:B0:C1:96
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b4:d5:a6:84:09:ec:ce:1b:09:2e:0c:04:34:cc:f8:f4:e1:
ab:3c:b0:a0:f6:49:d5:96:e0:ca:69:6c:cc:21:6f:29:0c:2b:
76:9d:5a:58:a5:e9:29:e6:1c:5a:7e:41:9e:70:fe:c7:53:43:
dc:d4:07:59:2e:24:ce:36:08:cd:e5:42:58:b6:0e:c2:5b:84:
41:4f:64:78:17:7d:44:f6:87:05:59:d1:e2:8f:c8:5c:e3:b9:
67:16:45:ce:53:0b:f1:ba:cc:1d:69:ac:91:95:7f:86:02:61:
64:2c:a3:4c:2b:05:1c:7d:e6:61:0b:32:ab:b4:e3:27:fa:98:
2b:95:53:50:89:a0:7e:ae:ee:8d:83:e2:10:8d:f3:3e:25:d5:
34:6b:ee:e6:22:39:f7:f8:16:a8:63:3e:80:fb:eb:ed:24:3f:
d1:99:b0:dd:6c:8b:00:11:d2:25:52:af:f9:57:7d:f8:84:33:
e0:55:9c:72:73:36:c5:f2:ae:d4:6e:b2:7f:68:3a:98:a5:56:
d9:bd:1a:46:8f:ff:3c:79:fd:d0:76:f2:da:d6:f1:fc:13:82:
bd:f7:0f:1d:89:28:15:f1:17:e6:ad:7c:93:de:79:ad:fc:74:
7b:6d:99:03:36:c9:35:71:5b:c6:88:b0:45:89:10:a9:28:1a:
06:22:8e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:14 2025 by rpki-client