Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
File: y968bG1L0_xlGov0ILHtIs7pMq4.mft (raw, json)
Hash identifier: F7DNZIf89u1lQ1H4j6Jb+eytImG+2/gdLqNuX7S3uRk=
Subject key identifier: 89:5B:50:92:4B:4C:01:6D:92:7F:BE:F0:89:0D:AD:EB:90:6E:B4:F5
Authority key identifier: CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
Certificate issuer: /CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Certificate serial: 0197B6A0EBD5F1AB331F2A1131A3C9C443D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:28 +0000
Manifest this update: Sat 28 Jun 2025 13:01:28 +0000
Manifest next update: Sun 29 Jun 2025 13:01:28 +0000
Files and hashes: 1: y968bG1L0_xlGov0ILHtIs7pMq4.crl (hash: k5mTOw/l93yp3Bv/FOlBjRMUuaRW5UW8oRYWNVcNs34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:eb:d5:f1:ab:33:1f:2a:11:31:a3:c9:c4:43:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Validity
Not Before: Jun 28 13:01:28 2025 GMT
Not After : Jun 29 13:01:28 2025 GMT
Subject: CN=895b50924b4c016d927fbef0890dadeb906eb4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:d0:3d:49:ee:01:96:10:bb:d7:90:ba:30:
d0:70:cf:4f:70:1d:cf:c2:75:84:e3:2f:08:5c:00:
50:48:5a:03:3e:67:aa:2a:1d:34:55:6c:37:59:10:
03:08:c9:74:cc:c7:1d:69:a9:a2:54:6e:b0:6f:fa:
e7:63:e8:d2:53:93:67:04:32:41:4c:37:53:b6:eb:
af:95:3b:ae:9c:8d:c3:b2:9a:e2:a8:b3:43:90:c9:
3b:e8:4d:ca:37:6c:8c:bf:02:13:f7:c9:b2:a3:71:
2c:8e:7d:eb:c4:f5:0f:52:1c:6f:1c:e1:d5:8c:b0:
e5:af:11:37:21:35:ec:1c:21:e6:1b:ac:9e:3a:c0:
e3:af:36:7c:7a:bc:51:f0:3e:3a:c6:3b:e0:c4:fa:
4a:12:9a:45:ef:0a:21:73:0e:fd:2c:61:c0:b3:05:
dd:c8:c1:66:2a:b0:2d:2b:1a:2c:4d:b1:05:04:d8:
33:9a:e4:c1:41:26:cf:b1:78:0c:45:e1:4c:5f:82:
f1:f3:df:f3:0e:70:5b:40:a6:0f:be:49:f4:d8:6c:
f4:2e:6b:d0:98:77:43:df:cd:7d:46:fb:0c:aa:37:
54:36:d5:97:a5:7f:9f:da:0f:50:b0:ae:6e:64:73:
5a:32:25:56:4d:d8:84:4a:39:47:8d:ee:c2:c8:b1:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:50:92:4B:4C:01:6D:92:7F:BE:F0:89:0D:AD:EB:90:6E:B4:F5
X509v3 Authority Key Identifier:
keyid:CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5e:9a:94:78:ee:d3:2f:a5:ab:e8:5e:fb:af:6c:fd:1a:91:
04:81:de:a5:a3:e9:01:7f:d2:d2:3f:01:56:a7:a1:f0:70:ba:
ba:e0:19:d6:e4:35:83:77:ee:56:f4:4d:71:55:2f:5f:c9:5e:
29:e4:a7:fb:04:f7:e7:1c:94:e4:cd:9d:08:e6:17:fe:67:50:
a1:fc:8c:bf:e6:89:d7:99:dd:52:07:86:3e:af:05:72:84:9b:
54:84:2c:8a:22:d5:c3:da:ce:b9:03:e0:69:f2:42:da:31:16:
8d:19:f5:1e:d4:95:81:6f:1f:2b:a8:ea:74:b7:d5:ff:7c:e1:
66:ce:4b:5e:41:74:b8:0a:02:11:54:f1:69:00:0d:99:95:f3:
ea:60:ec:2f:66:05:31:12:62:d1:2d:dd:cd:5f:1f:f9:2e:2e:
d5:57:38:34:3f:95:c2:81:4d:33:39:95:e7:d9:5d:b6:87:ec:
fc:04:65:83:9e:1c:c1:2e:71:74:e9:d0:07:42:ef:93:68:e7:
9f:2c:58:d3:76:78:a6:2d:84:42:00:c6:fa:35:99:0c:75:36:
9b:d1:3e:9b:2d:0a:a8:75:87:5f:b5:77:6f:98:bf:a7:a5:13:
85:31:8d:16:e1:64:17:95:d9:e0:70:70:80:4f:eb:4e:0d:d6:
5c:06:09:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:24 2025 by rpki-client