Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: Bv6AqOuLwS/e02sOk1R3LW4AMKM1/0xbQXxT4F1D4mk=
Subject key identifier: 79:C0:D3:00:76:88:12:3D:50:47:BC:5B:32:1E:ED:F6:26:57:15:8B
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 0197B6A0A9FD49C781BFCF085C8769639A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 08EA
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: PTFth6FZT32J6iKZF9JDl9GbDdbR44PGaDfKEYQjrmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a9:fd:49:c7:81:bf:cf:08:5c:87:69:63:9a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=79c0d3007688123d5047bc5b321eedf62657158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:59:c1:8b:59:4a:55:c6:72:b7:05:8b:7a:
21:07:a1:f3:cf:15:7d:d4:64:3f:1f:03:3b:58:d0:
e8:8f:ff:aa:8a:ca:30:17:9c:51:a4:6d:8a:ea:e2:
08:a0:38:fb:26:89:2f:c8:50:03:b2:0f:4e:0f:51:
30:d7:6f:79:c9:4c:dd:e5:0d:ed:3a:7b:05:75:8a:
b2:fc:69:a6:9d:1e:01:c8:3b:31:0e:e2:52:dc:37:
95:2a:99:02:e2:93:10:cb:75:30:a3:e2:2e:15:cf:
3b:7d:d0:40:37:cc:e7:db:92:6c:4f:1b:ac:8d:4a:
f9:9c:d0:94:fd:1e:a7:49:16:99:5e:80:bd:a7:1f:
51:59:a1:3d:f6:38:b9:bf:d7:1a:c4:9e:ca:1c:3a:
4c:de:60:c0:d9:ce:09:d4:30:ec:fb:6c:d0:3c:47:
00:f4:5c:6b:6a:ed:2d:77:71:4e:19:a1:75:fe:1e:
28:b2:7e:31:8d:77:6e:08:b4:fc:55:93:83:26:06:
51:2f:f0:de:3b:06:6b:e5:7b:5f:44:7e:af:8d:22:
8a:ca:9b:11:5c:f6:ee:91:55:d9:18:81:0d:57:07:
8e:44:96:6e:ee:cf:1c:4a:75:b8:61:bd:0d:e8:bd:
61:48:b7:29:ab:e3:37:4d:d2:8d:0d:01:0d:43:2e:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C0:D3:00:76:88:12:3D:50:47:BC:5B:32:1E:ED:F6:26:57:15:8B
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2f:40:0b:0f:8d:87:e3:9f:db:b8:e9:66:10:d2:5d:c4:e5:
86:82:05:52:b9:00:c1:89:98:2d:76:a2:83:43:93:1a:97:7a:
46:60:03:38:25:6b:eb:3e:88:f8:3a:bc:bc:9f:3f:62:dd:e2:
82:52:4a:0e:81:9e:b9:98:ab:be:5a:52:45:94:c2:86:ef:9b:
c5:20:37:33:43:6d:71:ab:8f:c9:91:8c:74:8f:95:3b:9f:20:
f3:9a:5f:d9:05:e5:b9:d6:ae:b2:de:e7:4e:92:71:d5:3a:38:
98:cc:90:d9:1a:18:30:79:0d:0c:a0:d2:0e:2b:7c:d8:62:25:
f8:a0:1c:0d:35:1b:e4:6f:e5:53:f0:78:95:01:86:df:cc:65:
61:24:9b:71:2b:a9:4e:64:69:e7:13:fc:8d:3d:4f:09:68:00:
31:d9:9f:e3:8b:8c:43:cf:59:ce:91:c4:1d:bc:a3:86:d1:22:
17:de:d0:cc:2b:ae:1f:ae:91:25:21:1e:c5:9f:a7:2e:46:50:
34:7c:99:e1:15:7a:46:0e:67:d0:09:94:4b:f0:7a:19:cb:a5:
3c:f1:c1:e6:a0:77:c5:06:f7:16:6b:14:61:f5:53:07:1e:49:
c2:e9:87:3f:08:ea:17:2a:a4:d8:ab:6d:f6:b5:bd:03:e0:e3:
20:46:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:54 2025 by rpki-client