Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: gCnucGS7gp8dR5kW8lffwCmeUUnNlo8tYg61AqmJQs0=
Subject key identifier: EF:8F:14:7E:BB:61:64:AD:F2:AC:B7:42:9E:43:81:21:37:FE:57:D9
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 0197771C8166BEE938421B8F9367CDD16D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 0E81
Signing time: Mon 16 Jun 2025 05:00:46 +0000
Manifest this update: Mon 16 Jun 2025 05:00:46 +0000
Manifest next update: Tue 17 Jun 2025 05:00:46 +0000
Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=)
2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=)
3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: ibsQlx4H/6laKTjjCTWQ14rTmmQICAjzdNkjD7mA6Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:81:66:be:e9:38:42:1b:8f:93:67:cd:d1:6d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jun 16 05:00:46 2025 GMT
Not After : Jun 17 05:00:46 2025 GMT
Subject: CN=ef8f147ebb6164adf2acb7429e43812137fe57d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:86:c2:89:72:9a:d9:66:62:b3:43:32:ec:
47:1f:53:4e:7e:e5:1d:22:e1:dc:04:35:96:b8:f6:
dd:96:91:1e:b1:38:53:65:68:02:1d:73:ef:f6:7b:
85:04:b8:b0:c5:f0:60:5c:b7:a5:9c:d1:63:30:db:
e4:f8:b4:ce:4e:de:50:0c:f0:de:11:6e:e6:2e:e4:
f4:0a:19:4a:f3:aa:87:ec:61:1e:94:2c:e3:1c:67:
0d:06:be:46:0f:f1:c0:71:fe:99:7e:11:35:e8:56:
2f:98:e6:b8:7e:65:81:ef:6b:7f:15:f1:7c:2d:e6:
7f:92:f6:db:cd:22:9e:2a:47:f5:6d:11:75:9e:05:
ef:55:9a:51:d0:7c:6b:ab:5d:39:79:f4:b3:36:49:
e4:38:86:27:4a:fa:2e:eb:37:89:4e:a3:d9:e7:e4:
ad:25:a8:55:cc:bd:e4:5c:1c:72:28:2f:30:b9:be:
85:4b:35:d3:f3:d1:90:c3:a8:8d:cf:a2:3c:3b:8e:
67:53:e1:68:5b:df:48:89:6d:cf:f2:32:4b:46:1b:
a9:b9:39:95:2a:b6:a6:f5:b4:c3:35:9a:d7:c5:96:
49:23:dc:36:c6:34:e3:33:89:e2:68:9b:5a:5d:03:
d9:d0:db:fd:12:b4:ac:be:69:89:07:50:be:01:3e:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8F:14:7E:BB:61:64:AD:F2:AC:B7:42:9E:43:81:21:37:FE:57:D9
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d9:9f:27:22:fc:4a:94:b2:80:7b:99:9f:05:56:2f:f0:a7:
1a:bc:ca:71:97:17:a8:e4:6d:0d:dd:1d:2e:82:83:f8:29:a8:
cf:9e:86:0d:2d:d5:12:76:5c:14:6d:02:23:1c:c3:d4:0f:4c:
90:c4:53:37:6c:e6:11:74:94:2f:24:e6:81:48:e1:3d:e9:97:
e6:34:66:63:2f:92:b6:b9:7d:d6:48:73:33:3b:e0:7c:2b:f3:
d9:b7:8c:a5:8f:2d:58:11:fe:8b:0a:42:d3:3b:2d:67:72:5c:
6c:6a:bf:3a:f2:74:54:b0:ed:db:38:95:68:ee:c9:33:64:c6:
89:52:01:d0:97:02:ce:52:e1:9c:7c:e0:1e:27:4b:ce:ac:c3:
fa:85:de:a3:71:db:81:66:bf:52:ec:d9:36:7d:6e:f9:8e:8b:
80:54:bb:59:da:25:06:c6:12:70:d0:66:34:aa:de:b6:dc:5f:
44:83:a0:17:01:93:73:b5:b3:03:0c:81:49:cb:95:48:f8:70:
b8:78:fc:b2:a7:d4:ca:59:ff:18:44:90:f6:5b:98:b8:88:b7:
82:2b:b3:49:39:e1:b6:02:b4:c0:68:4c:b7:86:3c:bf:5e:db:
e2:f7:85:2d:36:98:65:ef:70:95:96:17:9c:10:15:d1:ee:68:
ee:c3:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:56:37 2025 by rpki-client