Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: 4Vw2keshiCqG6bP56VJoWRuZEX8IkbWK/uJQw8bMssw=
Subject key identifier: 36:F8:8B:61:B6:20:1F:0A:B7:48:08:28:FE:A9:E8:2B:2A:1B:53:74
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 0197B820D6AE17BE4314BEB250BDB6A552C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 08C1
Signing time: Sat 28 Jun 2025 20:00:49 +0000
Manifest this update: Sat 28 Jun 2025 20:00:49 +0000
Manifest next update: Sun 29 Jun 2025 20:00:49 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: GPSHxJJpbEB3OJgdnidHNbgjhvE84mf8U/wo0YYadMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d6:ae:17:be:43:14:be:b2:50:bd:b6:a5:52:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Jun 28 20:00:49 2025 GMT
Not After : Jun 29 20:00:49 2025 GMT
Subject: CN=36f88b61b6201f0ab7480828fea9e82b2a1b5374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:b0:55:b5:fd:33:11:9f:eb:f7:a6:8d:91:
6c:43:72:eb:d3:30:73:3f:e7:1f:c3:24:0f:fd:76:
6b:6a:91:8e:db:96:7b:b5:d3:1a:46:37:20:34:6f:
6c:43:b6:8f:91:d0:4b:53:a5:03:75:7b:23:50:64:
c2:22:4d:99:ef:b5:2f:1e:79:6a:d4:59:5e:91:f4:
27:30:6a:a9:19:9d:b3:bc:12:9a:1e:0d:53:19:dd:
c3:f2:d1:b9:f5:5d:69:1d:ac:10:ec:2b:25:91:eb:
43:34:cf:57:99:46:b8:c4:06:20:5b:20:01:31:ef:
1c:65:08:bb:26:0e:59:37:43:2a:ad:66:06:da:d4:
3b:ad:7e:45:30:ce:55:3a:c9:f6:54:08:02:4d:42:
a8:67:81:86:0d:b8:06:37:aa:dd:cc:c0:7b:cd:c3:
f9:51:a1:2b:29:16:83:55:d9:39:de:5b:23:2a:8c:
0f:d3:ef:ac:2a:59:08:33:38:95:b2:31:99:92:ec:
78:46:ea:ed:ca:12:d7:a4:1b:c3:43:1f:17:54:db:
66:d6:04:2e:37:58:94:29:a0:70:27:39:e1:51:e1:
38:fe:21:da:53:45:37:b3:c1:0c:e8:50:65:fd:df:
03:79:36:23:ec:c9:5f:49:de:db:38:7b:39:66:d1:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:8B:61:B6:20:1F:0A:B7:48:08:28:FE:A9:E8:2B:2A:1B:53:74
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:27:34:a1:59:a1:df:e2:37:7a:19:f2:d5:52:26:15:02:
63:2f:2f:8b:03:e6:30:47:23:4d:81:e8:34:a3:53:55:55:dd:
60:0a:6d:90:61:6c:ca:8e:1f:95:93:e3:f5:f3:69:e4:14:f5:
cf:27:d6:aa:f7:f2:31:c1:30:0e:c5:91:57:6c:7c:8b:ca:45:
dd:89:c5:a6:22:31:49:fc:6e:99:49:65:f9:53:fb:a3:bf:aa:
d2:23:82:e3:b2:19:d1:4c:1f:26:1e:f1:4d:13:96:dd:e7:ce:
8c:b4:5f:e3:48:22:05:0e:9b:29:4d:be:2c:ac:6a:4d:f1:8c:
2b:b2:74:47:71:84:3f:ef:a4:59:9e:99:ff:04:14:8a:ac:bd:
45:2f:e2:7e:63:f2:31:39:03:21:aa:68:c3:f6:9b:d7:27:79:
3d:31:66:47:0e:ef:64:6a:17:0f:20:22:1b:8c:a5:a3:06:40:
b3:67:a6:4c:36:0f:ef:59:af:7d:e8:60:f0:7a:0c:7e:f1:78:
18:5d:f6:19:87:81:f3:af:73:2b:06:ad:a4:e5:97:0f:da:41:
7a:65:91:1d:cc:e7:93:9e:a2:98:b6:6c:59:94:ab:36:50:4b:
62:6a:32:97:95:75:0f:ae:9f:be:e9:04:a0:6d:4c:43:f6:81:
21:4e:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:29:46 2025 by rpki-client