Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json)
Hash identifier: KXScaYNu6saXOk/6U5lkfg4mBqyJm+bsRhgKyCIz0hQ=
Subject key identifier: AD:BC:45:3A:11:7E:E5:E8:16:6C:04:7E:95:B7:0E:2F:34:D0:0F:61
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 0197711B0B7FB7C9E30B536E7390AC0BFA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
Manifest number: 12D7
Signing time: Sun 15 Jun 2025 01:01:27 +0000
Manifest this update: Sun 15 Jun 2025 01:01:27 +0000
Manifest next update: Mon 16 Jun 2025 01:01:27 +0000
Files and hashes: 1: YyOogR6T7jG6zD-5lx-V8y_JBFA.roa (hash: jTd/5MNcv4fqMfKWtnfVXAAWAN6UzlPvaAV2hpZQQJw=)
2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: m67ATvAuyx7xqb/KKpt8JM8iK7+12JuzvWpBrv5UaQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:0b:7f:b7:c9:e3:0b:53:6e:73:90:ac:0b:fa:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Jun 15 01:01:27 2025 GMT
Not After : Jun 16 01:01:27 2025 GMT
Subject: CN=adbc453a117ee5e8166c047e95b70e2f34d00f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:78:c2:7f:b7:16:b4:d4:96:b7:f8:98:f1:
de:9f:45:60:e9:3d:27:e1:a4:6f:60:da:08:cd:49:
29:2a:fa:95:a3:7d:31:6f:7c:0e:ea:38:33:3c:6c:
36:d0:c1:0c:28:12:a5:30:a9:7b:29:74:d5:e7:2b:
7a:36:96:3d:35:67:3b:69:9b:e9:51:70:22:6d:09:
c4:8e:93:7c:f8:ec:78:6e:c7:79:e8:cb:05:07:4e:
7e:cd:43:0e:bf:39:22:8e:81:76:8b:c2:21:a8:cc:
f8:84:36:45:34:dc:b5:08:cf:c9:e3:37:1a:db:b9:
c3:9d:4e:45:bb:ec:d6:87:f2:29:80:27:1c:22:fa:
b3:f6:df:5c:37:ca:7a:c2:6a:fc:34:75:17:aa:c6:
f4:31:82:06:a4:74:90:f6:a4:f2:82:9a:36:28:18:
e5:dc:4e:00:75:d3:37:fc:75:2c:4e:1d:59:3e:d7:
71:d9:e8:15:ee:ff:ba:ec:d2:40:25:e3:86:f8:8d:
f1:5b:9c:5d:ff:2a:17:51:e3:ba:68:1a:0c:45:e8:
68:dc:49:7d:77:fe:45:f4:e7:c0:21:df:53:e9:d1:
4c:a6:e3:1b:fc:b0:28:c1:a6:4b:f9:48:9b:57:96:
ec:e9:9e:69:d4:eb:7e:68:b5:54:fe:55:27:86:35:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:45:3A:11:7E:E5:E8:16:6C:04:7E:95:B7:0E:2F:34:D0:0F:61
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2f:6b:2a:34:bf:8d:7a:07:46:13:90:87:fd:91:c2:8c:27:
b6:53:0f:b5:5c:a6:48:d2:e4:b3:20:a9:fe:44:a9:d9:ea:1f:
3a:4d:6c:85:af:c0:2e:5d:e7:ff:79:62:ed:42:74:49:2a:7d:
63:12:4a:c1:49:70:8a:62:53:b4:cc:1c:0b:8d:67:73:eb:63:
61:61:72:89:3e:b5:28:a1:8c:80:d7:c5:33:dd:4f:e9:aa:56:
a8:f0:61:3e:ec:b9:81:9c:88:7e:7e:db:da:cd:fe:b4:9f:b6:
76:74:c2:a3:98:6a:35:d6:dd:fa:5f:a3:f8:e1:78:11:90:dd:
1c:3d:15:93:34:1e:09:14:95:12:db:1f:54:48:65:7f:30:e5:
db:7e:ac:96:4e:a1:c2:13:5b:cc:2e:b0:eb:dd:19:2d:1a:05:
aa:eb:1e:1c:2f:54:8a:57:30:07:ff:93:ec:d9:a3:a8:1f:88:
23:e6:a0:b6:f0:aa:8b:5b:7d:e0:a6:55:bc:21:ae:ad:7e:1c:
df:32:d0:66:55:4d:d3:c8:0a:25:ec:2e:6a:03:da:e4:45:63:
d5:86:ef:37:ee:c6:1b:dc:86:3b:af:1c:9b:15:11:1a:da:a5:
dc:b0:75:a0:ea:14:d5:bd:2c:c1:4f:de:df:3f:6a:f4:f5:a3:
f3:da:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:14:35 2025 by rpki-client