Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
File: 63yCLR6UUXyIUVzJs_wr3hKbRUw.mft (raw, json)
Hash identifier: JqxFnQwHNI+d0xEFOtalAXYFszaC8G2zva3aYwaI2nw=
Subject key identifier: BF:BC:0C:AD:EF:1B:7E:E8:B2:29:5D:00:85:42:0A:98:97:EB:5F:14
Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
Certificate issuer: /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Certificate serial: 01978A6C0BD30281BBAACAC2D470EDFFD5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
Manifest number: 159C
Signing time: Thu 19 Jun 2025 23:00:25 +0000
Manifest this update: Thu 19 Jun 2025 23:00:25 +0000
Manifest next update: Fri 20 Jun 2025 23:00:25 +0000
Files and hashes: 1: 63yCLR6UUXyIUVzJs_wr3hKbRUw.crl (hash: /kT72u6psmkgm+/Xk7tqidMcpATv4ZllhtD+atfMYWg=)
2: Hped2Nzw9BDgcMc7ThR7ZTJVfxo.roa (hash: EKotSeR3NXVLufe9gjVtCFUvkJNJlOJcwE3m9ndLGj4=)
3: hEjknnJNpRTS-Fn_xua20G61iFo.roa (hash: KjipElk/Xw3oiobuJ6dReVGkdCa06cXee6pklMf/SxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:6c:0b:d3:02:81:bb:aa:ca:c2:d4:70:ed:ff:d5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Validity
Not Before: Jun 19 23:00:25 2025 GMT
Not After : Jun 20 23:00:25 2025 GMT
Subject: CN=bfbc0cadef1b7ee8b2295d0085420a9897eb5f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:66:06:0d:55:83:d0:51:c4:2b:b1:7a:66:
a4:df:10:eb:ae:f2:83:77:42:dd:e4:d8:c5:66:fd:
de:00:b4:d8:3c:54:61:96:61:0d:b4:b8:fb:9c:fd:
88:71:db:84:ac:f4:51:96:8b:97:52:f2:4c:81:d5:
7b:85:c6:a9:45:49:3d:e6:cd:32:f5:70:b8:c9:c7:
da:25:32:3e:ec:67:e6:26:0d:4d:45:8f:a7:0c:71:
5b:d7:98:39:dc:65:95:7d:81:42:a6:6f:04:3d:7e:
34:2d:6d:60:f8:f0:04:0b:95:52:76:36:b1:4f:80:
f9:83:1c:26:e7:0e:e4:a8:38:ef:ac:7f:0a:29:5a:
7b:ec:b1:96:7b:b0:a9:40:6a:7b:37:0c:ad:43:f2:
84:08:08:f9:af:40:a2:48:37:5d:f7:87:0e:61:ac:
87:7f:9d:6e:ab:f1:ff:5c:15:05:61:29:ba:da:7a:
f7:48:ac:a2:7a:ba:d8:2d:88:ff:45:a5:19:2f:c0:
d6:6b:f0:c0:6a:62:43:14:82:e3:83:93:69:e0:9c:
b6:7a:d9:67:f7:03:d8:fe:55:19:39:6b:3c:ed:25:
d4:63:31:96:0d:34:ad:9d:c9:1b:96:7e:6f:a3:c7:
37:85:d3:45:27:a8:df:94:86:65:e2:91:2e:da:61:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BC:0C:AD:EF:1B:7E:E8:B2:29:5D:00:85:42:0A:98:97:EB:5F:14
X509v3 Authority Key Identifier:
keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d3:9d:09:0d:a5:6a:a5:33:97:b1:65:72:74:b8:32:7d:ae:
8c:a4:88:f0:b3:85:4d:26:5f:82:a3:c8:b4:b5:32:24:61:1d:
ae:1c:b7:ce:2b:b4:33:c7:ef:f0:a5:d3:f4:86:e5:46:4b:db:
6f:23:c4:c4:80:82:00:45:02:15:a8:9b:56:2b:56:2a:5e:6b:
2b:5f:43:e2:01:94:d1:5c:b8:81:4d:55:68:a3:5e:d8:17:de:
90:6a:1e:7b:ae:0f:91:ec:63:b1:08:35:3f:e3:3c:a9:c1:41:
a7:1a:50:2b:7f:30:f9:d0:7c:f8:05:54:fb:64:50:0b:d7:ed:
1c:57:ef:2b:fa:8a:b4:05:37:99:7b:e1:62:ab:0d:54:12:40:
0e:69:2a:0a:c4:94:a8:5c:8f:82:bd:fa:ff:4d:38:7f:9f:a5:
ce:f2:01:aa:4f:9b:46:15:2a:3f:10:46:b7:e4:fd:8c:f8:65:
e1:1a:a3:70:da:9a:2f:8b:67:59:d4:30:ab:25:90:f5:6c:1c:
20:24:e4:f4:b3:b4:50:d1:66:ea:dc:97:39:33:54:ae:64:3b:
d4:8f:ae:24:0f:24:d7:84:b4:28:72:d7:b0:ed:38:1a:e4:9f:
af:2f:4e:cc:21:43:5e:9f:d0:29:5d:04:a3:75:16:2c:9d:57:
72:ac:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:48:09 2025 by rpki-client