Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier: gj8pumSYk99bewYsbDwAx/9cqSP1Z1oKLqz/7UpTqoE=
Subject key identifier: D2:B0:E7:C4:19:9B:6D:EC:C0:43:4F:03:48:17:A5:20:DC:38:EF:7D
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial: 01976D0689825C7BADBEB5579C3B037FAD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number: 0697
Signing time: Sat 14 Jun 2025 06:00:34 +0000
Manifest this update: Sat 14 Jun 2025 06:00:34 +0000
Manifest next update: Sun 15 Jun 2025 06:00:34 +0000
Files and hashes: 1: Kukv8lguLlqo8syva8to6ZRKCQQ.roa (hash: 6TsYNWvLqQDFoSOz1kHCV3IHIsfRZkDxe8fDivBN+2k=)
2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: ZB8/pkk1MXRNPTFOu2uEJTk4uUE3XLljaGDS364q7sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:89:82:5c:7b:ad:be:b5:57:9c:3b:03:7f:ad:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Validity
Not Before: Jun 14 06:00:34 2025 GMT
Not After : Jun 15 06:00:34 2025 GMT
Subject: CN=d2b0e7c4199b6decc0434f034817a520dc38ef7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:98:c3:a5:10:8a:cd:01:1c:86:20:7d:a4:
b7:42:7a:55:b3:d1:b9:7a:01:ad:f6:6d:69:82:76:
8d:b0:67:26:c2:16:42:06:be:2e:d2:bc:d3:96:a8:
95:7a:be:12:6e:95:c0:2f:d6:e1:2f:0e:46:86:50:
3d:19:1b:1a:cc:71:77:10:11:d2:85:5e:75:2f:82:
6f:9e:f0:87:68:29:bd:bf:81:05:0f:0a:94:21:45:
1b:c5:24:64:03:8c:ee:13:7a:80:ae:62:9b:09:18:
59:aa:d1:06:d6:ea:2c:79:04:4c:fa:16:18:01:6e:
df:73:8d:8a:1d:2b:c4:c0:6b:6b:b3:ac:03:bb:cb:
53:c8:c2:b1:63:62:be:01:54:fb:7f:94:ad:7f:24:
cb:5e:43:90:9f:b4:63:88:c4:40:ab:ca:cc:c2:fc:
d9:2f:e1:63:7e:78:62:3a:dd:05:66:b8:e9:40:fa:
39:94:cb:1c:42:8a:c2:8a:40:3a:e4:ba:51:0c:74:
98:f2:5c:86:ee:2c:f1:7d:cc:ca:ad:7c:67:a1:64:
22:8a:45:71:6d:7c:d4:f7:86:11:6b:d8:3b:99:9f:
17:24:fc:b9:c2:13:01:5a:d9:65:99:e6:bb:63:06:
3d:bb:6a:48:37:b8:0a:72:45:c1:11:63:0b:26:19:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:E7:C4:19:9B:6D:EC:C0:43:4F:03:48:17:A5:20:DC:38:EF:7D
X509v3 Authority Key Identifier:
keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c4:31:10:ae:90:4a:19:3b:e5:b7:19:c8:7f:ff:4d:85:cb:
88:7c:59:73:99:00:4f:f7:9f:97:59:41:27:88:e5:54:b9:24:
16:0a:51:87:31:fd:a7:6a:a8:dc:ee:9c:dd:57:f3:d2:db:3f:
48:db:bc:f5:07:c1:5e:c4:c8:78:04:9b:17:fb:f1:ec:04:9a:
24:3d:2f:a4:e4:79:09:b9:9b:5c:bb:e2:fb:e6:7f:09:bd:4a:
9b:5f:34:77:87:6e:c2:f3:6e:3d:2c:1e:76:ab:15:c5:56:0d:
7f:1d:96:04:5d:d0:b9:d2:5b:a4:b6:2e:1a:b2:da:cd:90:4f:
41:b5:8c:d3:7a:e9:fd:41:c7:14:e9:67:4d:23:b6:e9:1b:d5:
db:51:16:ab:75:c0:10:fa:06:03:89:16:5e:2a:a4:4e:8b:67:
b7:32:6a:0b:cb:e9:73:9f:0c:b0:26:ca:fe:ff:7b:a7:19:84:
52:ef:4b:33:69:3e:38:0e:de:99:2f:cc:da:52:d1:eb:12:15:
a1:f2:71:87:05:a8:07:4e:c4:af:2f:63:3e:3d:5c:ee:1a:94:
e1:d9:fe:fc:3f:90:ed:9e:13:c7:09:1c:65:cc:ae:5c:64:77:
95:ef:d0:d0:3e:08:80:9d:72:95:45:59:c8:87:24:a4:c0:64:
89:ff:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:41 2025 by rpki-client