Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: 3jH7HAzvXrdZOFOOyYC5mka0AYmGW+abOtfqLNIjTAc=
Subject key identifier: 31:7E:A0:72:6E:00:48:1B:AB:D9:3D:30:40:1C:56:D1:FA:E2:03:0E
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 0197887D553A03858BDFCF591640BAD15A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 159C
Signing time: Thu 19 Jun 2025 14:00:04 +0000
Manifest this update: Thu 19 Jun 2025 14:00:04 +0000
Manifest next update: Fri 20 Jun 2025 14:00:04 +0000
Files and hashes: 1: SOjICIUf3Q5KcvZmv_NHH5baNJY.roa (hash: CIXb+faY/LyAGhWDjXy0Uzmt28hgw4zuuv1ZndxzjNQ=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: DO+1VuBSwkcOzbsdOtAKXRPPim8K3nop0UWB/vP9ABU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:7d:55:3a:03:85:8b:df:cf:59:16:40:ba:d1:5a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Jun 19 14:00:04 2025 GMT
Not After : Jun 20 14:00:04 2025 GMT
Subject: CN=317ea0726e00481babd93d30401c56d1fae2030e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:15:e1:1e:15:34:64:1c:b8:83:80:f3:87:
ba:8f:8b:59:e7:79:91:cf:bf:01:99:e2:10:b4:68:
0c:e9:6b:d5:a4:3c:29:5d:7c:73:16:42:00:69:2d:
96:a1:08:cc:1d:5c:87:ee:20:d0:4a:48:05:18:8d:
59:93:af:a1:14:b4:a1:23:c7:4e:8c:c7:37:d4:fd:
d3:f3:de:5b:bc:cf:07:25:6c:81:a4:a9:dc:6b:99:
0b:d7:72:91:dc:8a:29:6d:f4:ac:76:dc:cd:20:94:
6d:ba:e0:c7:4c:f3:47:8a:14:c3:ac:49:5c:86:01:
6d:4f:7b:af:ff:8c:87:d3:b6:43:85:cd:4e:84:4e:
ce:49:ea:80:3d:3e:f3:55:31:2f:a7:da:33:eb:01:
9a:c5:15:af:17:84:e4:95:02:3b:91:8a:8d:e1:86:
df:3f:69:12:4f:ee:80:aa:01:58:b2:0a:90:50:43:
2d:4e:90:0a:38:dd:34:a4:a1:6b:3c:26:09:e0:3e:
50:7b:68:20:37:5c:6c:53:a0:f1:e3:3c:21:c2:55:
6a:99:1b:0e:00:a0:fd:9c:3f:0a:a9:bb:9f:79:cd:
ac:4a:1d:cb:e0:3d:44:fd:4a:95:71:16:c4:b7:e2:
97:42:8b:e6:ea:fe:95:99:7f:10:19:f0:3a:69:55:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7E:A0:72:6E:00:48:1B:AB:D9:3D:30:40:1C:56:D1:FA:E2:03:0E
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9c:5a:1d:0a:d6:fa:3f:0c:41:c2:fc:fd:84:ab:95:65:33:
67:4f:06:78:aa:97:8e:02:28:4f:9d:b8:e0:fb:99:79:92:0f:
2d:0f:7d:7a:30:d6:4b:67:62:a4:44:ee:3d:42:5d:45:a1:7c:
da:ff:2d:64:a7:64:1d:97:40:b7:71:b5:ed:57:4c:1c:c1:9c:
14:85:5a:98:b8:3f:a7:f5:84:c4:32:b9:10:53:31:45:7f:0e:
6e:ba:a1:82:76:15:ea:53:19:34:09:2d:e0:45:90:f9:7b:11:
7b:cc:d8:0c:70:3d:e4:bd:17:57:72:8e:4f:dc:90:5e:37:1a:
31:02:ba:c3:56:08:91:d8:f3:28:d6:73:d3:0f:c8:0e:9a:6b:
2a:73:96:56:70:a6:a5:32:ec:4f:76:90:5b:b2:57:2b:01:05:
cc:27:5a:86:91:6c:51:87:39:38:3e:5f:9a:26:a9:32:84:f2:
94:ab:f7:f5:b7:8d:6e:93:d7:ea:68:df:a3:33:e5:5c:35:56:
ce:6c:e7:5f:fb:f3:03:1a:b4:78:68:b7:bd:c9:b9:2a:86:66:
d6:f8:b6:24:21:e8:07:fa:2b:ca:7c:91:d0:c0:7c:1c:1a:fd:
ac:a0:73:b7:94:f9:d6:8e:9d:67:d3:92:11:92:12:11:bd:9b:
c5:df:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:33:27 2025 by rpki-client