Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: 0a6MbA90OdO9yDWzIWxp5Xyz1X2SzXhP37XjZZ+dGiU=
Subject key identifier: CE:38:D3:88:49:51:86:65:0D:D1:B5:8B:AD:2F:25:6B:B8:32:A1:2B
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019768BBED6809F7F39BD908B1D3F658E851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 10:00:35 +0000
Manifest this update: Fri 13 Jun 2025 10:00:35 +0000
Manifest next update: Sat 14 Jun 2025 10:00:35 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: Ne7F66YIBqdutkXWCwViE/81xHrT/rtjpGTR7XGvm64=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ed:68:09:f7:f3:9b:d9:08:b1:d3:f6:58:e8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jun 13 10:00:35 2025 GMT
Not After : Jun 14 10:00:35 2025 GMT
Subject: CN=ce38d388495186650dd1b58bad2f256bb832a12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:0b:8a:35:eb:34:fd:e5:07:01:70:0a:69:
f9:bf:f4:52:93:6a:7c:a2:01:47:fb:10:e8:97:1f:
fd:2b:19:65:46:fb:65:33:e2:25:2c:fa:64:77:5a:
0c:0f:e3:80:d3:d9:41:d2:32:91:0c:b2:3b:ce:ad:
3f:d4:bb:01:e6:52:b4:a5:8a:3d:84:01:39:17:77:
2f:3c:78:3e:c7:76:d4:3b:9c:76:46:33:42:fb:81:
e7:ab:a0:5f:7f:c0:23:17:b5:f3:4b:dc:c0:54:7a:
82:90:ff:b5:48:4f:d9:6e:7a:06:0b:26:5d:76:07:
3f:63:98:5f:6c:32:00:28:b6:7c:4d:74:7b:51:b7:
52:1a:fe:f1:39:d2:41:8d:94:fa:10:5c:83:7d:33:
f9:df:a2:3b:34:8d:02:33:d6:f7:4d:7a:d2:e1:12:
d7:d4:15:9d:d4:4c:49:20:c6:9c:2f:a6:09:e5:2d:
f8:e5:9f:6a:19:19:40:37:77:b5:3f:20:9b:62:b1:
c8:b4:bb:39:75:cc:63:9a:ba:80:7f:7f:98:d3:ae:
40:2e:d5:2c:0f:1b:59:fa:ea:3c:03:49:31:bb:69:
e8:88:cc:76:6f:b4:8f:40:4a:4b:52:82:e3:45:7d:
9a:66:8f:4d:cd:69:ca:b9:a8:aa:13:58:0c:c2:60:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:38:D3:88:49:51:86:65:0D:D1:B5:8B:AD:2F:25:6B:B8:32:A1:2B
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9b:75:5f:f0:74:7c:b6:24:8f:9a:ae:e6:5d:9a:59:a2:a8:
92:bc:f2:af:2c:45:1b:88:f0:f2:a6:c7:1b:ce:d5:da:62:72:
d2:26:b1:c0:0f:cc:ca:94:7e:45:d6:5e:a6:18:3a:51:74:88:
4a:23:5c:17:08:1a:c6:07:f4:c2:c8:33:2e:c6:e9:a9:f8:04:
3d:75:b5:b3:49:cb:71:3c:95:18:48:5d:b9:01:84:5f:c4:a4:
82:0d:00:2e:a5:18:c3:94:ee:41:3e:76:cf:0e:66:b1:62:0a:
b8:d5:7a:79:09:b4:f4:40:d3:47:95:68:47:66:ea:bb:ce:5b:
0f:85:fe:d5:8d:ec:3a:00:19:a2:17:37:f2:d2:1c:51:e1:14:
a9:e3:f8:43:fe:c5:4c:84:bd:0a:7d:64:0e:80:11:fe:c6:69:
c5:9e:0c:71:20:24:39:28:b7:72:06:87:0a:3a:a9:48:63:94:
2b:31:47:04:b6:51:60:92:03:bb:48:4f:2b:55:30:ea:5f:bc:
43:c2:31:8d:36:08:2d:39:61:22:7f:7c:bb:cd:39:7a:6a:e0:
f7:92:c1:a7:b5:cb:7e:ed:91:7f:e0:14:df:71:84:a2:df:d3:
d1:84:6e:5a:d1:56:45:da:f3:89:36:d4:cb:42:21:1c:4d:eb:
35:38:28:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:58 2025 by rpki-client