Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: vMn+ICLEzer/k6umjcvYl8xzVG8iB8Js4uKm3uBvdxU=
Subject key identifier: 16:4E:2E:C5:C0:24:CE:8E:8F:C9:AE:32:90:19:BC:59:B6:29:52:E8
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 01987562E6114D69EE09F1B9BCE973EEB9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 12D9
Signing time: Mon 04 Aug 2025 14:01:12 +0000
Manifest this update: Mon 04 Aug 2025 14:01:12 +0000
Manifest next update: Tue 05 Aug 2025 14:01:12 +0000
Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: 49g3w1cLzrr1wrS5+mfOSiG7bgofnxuydu/DgSKpsXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:e6:11:4d:69:ee:09:f1:b9:bc:e9:73:ee:b9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Aug 4 14:01:12 2025 GMT
Not After : Aug 5 14:01:12 2025 GMT
Subject: CN=164e2ec5c024ce8e8fc9ae329019bc59b62952e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:bd:dd:fc:49:7a:87:b8:49:32:d0:8a:0d:
e0:c6:44:ba:aa:4f:8a:04:61:ce:87:23:ca:72:98:
01:c9:80:71:b3:90:88:52:d8:c5:f8:df:42:9f:43:
a8:8a:ba:e8:77:07:01:88:74:ad:57:df:5a:c7:20:
50:4e:ea:5e:fa:af:f1:97:6c:8d:02:64:28:1b:9d:
55:85:b9:f7:42:7b:18:40:16:0f:39:e5:98:3f:25:
32:aa:96:16:ba:9c:2d:df:7e:d7:64:80:ec:e4:dc:
86:95:eb:34:4a:db:21:4c:ae:e5:c2:81:09:b0:fe:
da:2d:d9:21:0c:c9:8b:54:b0:c8:59:8c:38:4b:3b:
45:50:6a:e6:7c:b5:de:5a:11:5d:82:cc:7f:6a:ea:
67:4d:c8:1b:2d:c8:62:51:2a:62:b6:f1:da:1f:05:
7f:56:dd:e1:71:6f:9b:93:dd:75:e6:fe:c4:39:a5:
87:b2:27:4c:4b:d5:e5:aa:09:15:6a:2a:e7:4c:2e:
fc:5a:7b:8f:54:ce:e9:fa:63:b0:57:90:99:13:42:
aa:6b:ad:ac:92:44:c4:58:25:1b:19:45:a4:ad:92:
70:b8:e5:47:0c:a8:08:1e:c7:3b:64:62:ce:a7:60:
e4:23:07:4b:d4:6a:56:7f:23:7d:0b:ee:15:6d:83:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4E:2E:C5:C0:24:CE:8E:8F:C9:AE:32:90:19:BC:59:B6:29:52:E8
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c8:c8:04:5a:9d:55:6a:e8:31:85:73:a7:51:f0:71:f0:4f:
7b:4e:02:38:1f:fb:cf:c4:d7:8f:d7:cd:f9:32:16:bf:05:18:
6d:d5:0e:cf:a0:9d:79:f8:53:97:fb:a1:8f:3c:a1:c7:90:75:
d5:0d:ef:2c:38:c7:30:29:a2:d5:1a:4c:4d:a3:77:29:15:47:
6b:83:23:d3:a6:05:c4:4e:cc:73:11:bf:be:72:f7:62:3c:4f:
7b:31:bd:a5:37:94:49:2c:dd:69:2f:d9:a1:be:53:9a:37:2f:
ed:59:40:85:4b:b7:6b:68:87:04:a2:a3:f0:c3:f3:8f:46:f7:
c9:31:c0:18:f5:91:02:f0:7a:f2:3c:34:4d:19:c1:00:86:d6:
60:a4:a1:7f:c7:ec:d7:e0:61:fb:3a:03:ac:82:12:5b:22:b6:
53:ac:bb:62:14:58:1a:af:4e:d3:46:cb:5e:73:39:21:86:93:
f0:f2:67:9a:7e:ad:83:a3:2b:a6:56:da:ae:83:8c:c1:22:7d:
d8:f2:47:35:31:fc:6d:54:25:7f:23:50:1d:4b:b3:c2:fa:c7:
1f:63:f8:f3:a2:d9:4f:f5:f2:c7:e9:ea:8d:3d:35:1a:8f:e8:
e7:36:10:2d:3d:2c:b0:8d:ee:3a:04:4a:08:fb:04:8d:6e:5d:
eb:94:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:12:43 2025 by rpki-client