Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: 7HLsto3b9P3Q91MuXxWSH752KctLiGuXY88d6ZOQ3yU=
Subject key identifier: 2A:57:3F:DA:14:E4:2A:BB:A0:88:BE:52:B0:38:50:E0:C4:AA:01:10
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 01976EBDF2C3242AA3BBD764E633466FCA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 06ED
Signing time: Sat 14 Jun 2025 14:00:31 +0000
Manifest this update: Sat 14 Jun 2025 14:00:31 +0000
Manifest next update: Sun 15 Jun 2025 14:00:31 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: jQuDMa+93tLVGo3m2vi8pbfHfJH5rGxA7Ai6ffMTQiw=)
3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:f2:c3:24:2a:a3:bb:d7:64:e6:33:46:6f:ca:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Jun 14 14:00:31 2025 GMT
Not After : Jun 15 14:00:31 2025 GMT
Subject: CN=2a573fda14e42abba088be52b03850e0c4aa0110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:be:c5:9c:d7:0c:93:b2:0e:66:af:30:4e:
c4:58:69:3f:a1:64:cd:f6:f8:ab:47:a6:d4:cd:5a:
1e:f0:5b:29:38:92:3f:f9:9d:b8:cf:e3:5c:a5:bf:
06:a3:29:8a:d1:86:2b:8f:23:3f:3b:e0:8e:23:1d:
50:47:f0:60:5c:1b:66:35:b9:a3:4e:58:6b:1f:60:
9b:e8:f7:50:58:b5:f4:e2:02:f2:54:0f:5e:97:66:
ea:d6:c3:7c:d0:3b:7f:a3:60:dd:3a:1c:57:0d:c6:
f6:01:65:2a:d9:7f:8a:3c:cf:f8:5e:5b:a3:88:35:
3d:be:db:30:dd:ba:f6:64:14:15:b0:79:14:de:cf:
47:a6:e0:a1:37:cd:fb:ee:89:fe:c3:03:a7:63:d7:
74:8c:91:a5:ee:c1:dd:28:04:a7:5b:aa:ca:4c:7b:
6f:87:b2:6e:2e:2e:9a:77:07:bb:cc:30:6b:2e:7d:
46:95:fd:e9:f1:39:d5:c5:a0:43:50:b9:cd:44:2e:
97:d1:c4:49:91:6e:bc:92:b9:82:95:42:7d:c7:9f:
8a:da:68:89:4c:98:4f:6f:47:0f:4c:3c:9a:e1:91:
62:27:a7:95:10:96:d4:21:aa:9c:7a:a5:52:27:e7:
22:cf:64:0a:8b:ea:52:09:26:17:5b:f0:ea:9d:91:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:57:3F:DA:14:E4:2A:BB:A0:88:BE:52:B0:38:50:E0:C4:AA:01:10
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f4:f4:1f:63:e9:fb:81:2c:85:b4:d8:9c:7a:e8:4a:57:80:
44:4c:48:07:87:37:08:5a:84:e4:7d:2d:5a:82:3d:fc:a3:87:
06:05:fd:9a:4e:0e:8e:66:d2:64:9e:8a:d4:3c:7b:81:0b:7a:
69:e2:4f:14:a6:75:55:fb:e5:30:a2:e8:c6:31:13:49:f5:42:
a7:71:7d:d4:32:8c:2a:15:ec:33:c8:4f:23:f2:94:ed:78:4f:
15:95:59:08:1c:54:e4:8d:d9:19:43:f8:2f:58:ce:54:a8:b0:
74:e8:a3:ad:52:b4:4b:de:a6:f0:2e:b3:21:23:5d:bb:dd:f8:
eb:3b:d5:35:7d:67:10:91:9e:7f:95:bd:91:1b:a1:d5:6e:94:
37:ee:19:87:d4:d2:8b:3c:d2:e9:fa:ef:73:ff:0b:c1:a5:c4:
e3:7e:91:e7:38:42:ec:2b:d0:ff:11:13:77:26:9b:48:5a:8a:
24:b5:9d:e0:37:fd:79:30:ce:bb:01:9b:5e:1e:22:5c:d0:17:
b6:8b:bc:39:fa:da:5e:4b:d0:61:17:7c:2f:65:3b:b2:d7:c2:
f0:1a:06:c4:0f:88:ac:c6:f4:62:cd:50:15:a4:1f:97:73:0e:
e3:c6:f3:2a:4a:c9:fd:e0:1d:cc:a3:52:04:5f:a8:61:77:30:
b0:1b:a5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:29:21 2025 by rpki-client