Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: E5bGsQrRL9U+uliVHsBHsg2bbGWSky4HuwL1k/1agW8=
Subject key identifier: EC:51:0B:5B:CB:9F:0C:69:46:21:65:F9:33:16:9E:C6:55:64:EF:13
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 0197B820C824B0A6A6447F6CD9C4B92E4839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 124A
Signing time: Sat 28 Jun 2025 20:00:45 +0000
Manifest this update: Sat 28 Jun 2025 20:00:45 +0000
Manifest next update: Sun 29 Jun 2025 20:00:45 +0000
Files and hashes: 1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: zv0V0K30wj02AtPJcY7L0Zifvc3tV0W4OK1/YtE3rs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c8:24:b0:a6:a6:44:7f:6c:d9:c4:b9:2e:48:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Jun 28 20:00:45 2025 GMT
Not After : Jun 29 20:00:45 2025 GMT
Subject: CN=ec510b5bcb9f0c69462165f933169ec65564ef13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:45:6b:dd:d7:98:f3:cd:8c:8b:38:8b:fa:
c3:dc:84:72:93:21:d2:f4:36:6f:66:ec:a0:48:0e:
37:5f:1f:02:fe:d6:b1:16:52:98:55:47:1e:4a:be:
a3:56:df:61:5c:54:65:5a:0f:d7:0a:9e:e6:e6:7b:
d6:40:fd:1a:31:5c:80:1d:85:dc:7b:0b:64:d6:46:
8b:ad:e1:fd:67:09:3f:27:d1:8c:f5:89:d6:1f:df:
24:33:c3:36:49:ec:9a:9c:76:ae:fe:f3:29:d9:af:
61:be:ac:bd:a3:19:5c:ca:44:bf:1a:aa:98:75:b2:
b1:b4:d7:44:25:22:a8:05:89:4f:52:a4:46:25:bd:
00:d0:73:c4:d7:59:b5:00:ed:ec:31:fd:55:fd:bd:
73:00:b8:9a:6c:e4:42:a7:65:b1:ea:eb:4b:b7:b6:
92:59:c5:bc:54:fb:83:7b:a2:46:c0:6b:1c:7d:d3:
c0:e9:b7:4c:be:4e:22:72:5b:14:0b:50:7b:30:93:
d0:3a:88:c4:5a:fd:db:09:34:d9:e1:57:4a:e5:f8:
1e:e6:97:03:35:be:67:bc:12:02:0e:27:37:ee:82:
d8:36:4a:95:d1:07:64:c2:9b:7e:3a:21:53:24:4e:
8c:04:0a:3c:3e:40:f8:d3:b0:a1:de:c7:9e:61:13:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:51:0B:5B:CB:9F:0C:69:46:21:65:F9:33:16:9E:C6:55:64:EF:13
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:13:e6:eb:8c:00:fd:3f:be:b6:48:99:f5:02:1d:a7:e0:19:
81:a9:ad:bb:dc:f4:0f:49:53:27:7e:e7:0a:8f:e1:60:cb:ab:
16:c7:15:76:ca:de:ab:38:2c:8b:c0:58:66:59:8f:f1:05:c8:
bf:aa:19:42:0e:0e:fa:97:5a:5c:9b:6e:0c:4b:f8:0b:a1:7f:
bc:9e:23:e7:b7:6f:e6:f9:7b:b2:d0:8c:bd:8a:99:ca:e7:a9:
d9:f0:eb:fa:bd:36:f5:10:5e:3f:bd:d1:c3:97:84:89:24:b7:
63:d2:72:c8:60:d5:33:cf:ea:89:c2:ef:6c:7f:ca:4a:61:92:
51:8d:fe:e6:f7:6a:af:0e:bc:55:eb:38:39:5b:a0:93:54:08:
33:92:cf:fa:76:97:5c:20:cb:27:a1:1a:77:a8:62:8e:d6:7b:
03:f0:1b:14:b1:b9:5e:5d:da:1e:83:87:47:e7:c0:b1:aa:03:
65:a5:5f:ee:bb:67:d3:5d:28:18:4b:58:d0:7c:0e:70:e3:b6:
f4:aa:18:46:72:98:f7:79:a0:c2:09:23:d2:b0:68:c4:fc:de:
9c:5a:b2:fa:94:1e:5f:bd:8e:78:c5:3b:52:be:67:d0:07:f3:
42:d5:df:4c:6b:a5:02:e2:06:7b:5d:a7:5c:ef:89:55:60:39:
78:67:68:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:43 2025 by rpki-client