Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: DyrQrMbqO8HgpI2dn4h6wi9L6nuZ5tnLPVrTif8TX9o=
Subject key identifier: 88:DF:AE:C3:CE:4D:D3:7D:4E:1F:D2:23:5B:68:85:E0:C4:07:25:76
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 0197DAE3A91AF46B89FA5B61DCE4B432CA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 1065
Signing time: Sat 05 Jul 2025 14:00:42 +0000
Manifest this update: Sat 05 Jul 2025 14:00:42 +0000
Manifest next update: Sun 06 Jul 2025 14:00:42 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: KNP7rjPeXiGBhz9jGhAaOtzcU/4lfPt8s5rgXSTJf2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:e3:a9:1a:f4:6b:89:fa:5b:61:dc:e4:b4:32:ca:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Jul 5 14:00:42 2025 GMT
Not After : Jul 6 14:00:42 2025 GMT
Subject: CN=88dfaec3ce4dd37d4e1fd2235b6885e0c4072576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:f9:0f:b7:b2:e0:0f:ac:e0:85:54:77:2f:
2e:88:b7:d4:0b:9f:de:27:6a:7c:a8:32:44:24:93:
6c:b3:b0:2c:d2:59:94:dd:d5:66:e5:2a:04:03:c8:
be:31:02:09:29:0f:a7:9c:8b:bd:23:40:f0:6f:d3:
5e:41:fc:64:43:46:60:fa:5d:49:68:6d:49:ca:3a:
8f:46:a5:d4:a7:b4:f5:a1:9b:7e:30:9a:8b:37:c0:
aa:d5:c9:8b:c9:f0:95:d8:63:2f:e2:2e:51:b3:8d:
34:5b:7d:22:30:67:a8:97:d5:ea:a5:af:5f:f7:f4:
c6:86:b8:59:f1:2a:17:a5:9a:65:a2:52:bc:48:c3:
b7:3b:6a:45:cd:c1:dc:22:79:d4:a8:36:71:64:3c:
2a:bb:ad:ce:6d:16:f6:05:bf:75:a3:39:eb:75:b9:
02:9b:b5:94:aa:4d:4a:b8:f6:35:da:00:b3:af:56:
e8:a1:a0:e9:65:79:9f:84:d2:f2:53:72:a2:9f:7b:
1d:c1:05:50:d6:f3:b7:ec:9c:7b:f3:b0:78:a1:8e:
5a:9d:48:29:8a:61:b9:fa:00:3a:7b:e7:23:61:72:
06:9e:93:63:68:10:d2:db:72:f2:5e:36:7f:1b:c8:
be:bf:3e:ae:bd:b4:07:68:80:e2:cc:9e:f0:57:28:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DF:AE:C3:CE:4D:D3:7D:4E:1F:D2:23:5B:68:85:E0:C4:07:25:76
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f9:6d:c5:dc:9d:ce:b5:f4:48:51:ba:08:31:8c:0e:31:a4:
4f:2b:4c:78:33:3c:9d:d0:cf:93:e3:8c:e6:3b:36:8b:2b:44:
4f:0f:cb:39:f2:1a:40:97:fd:79:bb:1b:26:55:9d:36:d4:17:
f8:b0:e7:5a:cc:49:66:6c:80:ff:6c:09:24:b4:76:f8:4a:1e:
4f:8e:f9:c6:a7:5a:13:19:b7:16:0b:be:2d:a8:d5:0a:66:1d:
7c:cb:48:2e:78:0b:85:33:30:68:08:78:e9:89:67:da:72:c1:
fc:83:5b:38:1b:86:30:cd:d3:b2:86:60:69:de:70:3e:38:fd:
0f:d6:1c:96:b3:72:ec:8c:cb:8c:fa:95:1e:14:f2:ca:da:8e:
bb:04:3e:f1:ec:be:44:6e:83:77:52:34:04:76:36:8b:27:32:
3c:ec:aa:10:d8:89:cc:db:0e:35:73:c7:b9:9b:07:4e:a2:cb:
ce:ea:98:94:75:6b:a2:68:a5:30:c1:ec:07:3e:f7:f3:85:fc:
e5:6e:4d:39:a4:f1:ab:89:5f:73:f9:e4:17:e7:85:a9:20:f5:
cd:b2:9b:de:ec:60:05:c9:f3:3d:7d:b6:06:b6:cb:50:54:4f:
14:81:5d:d4:35:8a:74:89:b3:80:b2:89:20:97:8b:7d:7e:25:
9b:26:85:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:08:04 2025 by rpki-client