Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: b0MqMht2u4K2a9FJBpqCT7zPk1lW2RtQzMFj9R0gOxo=
Subject key identifier: 99:31:18:73:1A:22:C3:17:EE:F9:64:15:DF:A1:8F:C1:91:64:A5:51
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 0197C048EADE191E3D9775C3BD174D747CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 016D
Signing time: Mon 30 Jun 2025 10:01:33 +0000
Manifest this update: Mon 30 Jun 2025 10:01:33 +0000
Manifest next update: Tue 01 Jul 2025 10:01:33 +0000
Files and hashes: 1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: hQ4o+K/Bcdrt316g4IRChoEGz+nisC0DVTqeWVIcYnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:ea:de:19:1e:3d:97:75:c3:bd:17:4d:74:7c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Jun 30 10:01:33 2025 GMT
Not After : Jul 1 10:01:33 2025 GMT
Subject: CN=993118731a22c317eef96415dfa18fc19164a551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4d:9f:7b:9c:41:a1:2f:d9:62:70:6a:fa:6a:
8d:62:42:23:b7:74:2d:c6:f6:c9:43:0c:c6:3a:84:
81:1a:bd:0b:ec:0f:64:91:f6:0f:53:11:77:aa:a2:
22:00:e0:32:e7:2f:b6:46:d2:d0:1c:fa:e7:60:30:
be:9b:09:07:0b:af:f5:18:3d:e3:98:73:c7:3f:0f:
e7:2b:3e:0a:84:b3:f9:d3:17:07:01:3a:03:3c:75:
cd:90:bd:51:3d:5c:42:3c:10:e0:22:9c:6d:d5:59:
86:46:70:70:6f:04:72:12:5d:ac:47:21:97:bb:9c:
bf:11:ce:de:ca:b8:e7:bd:f9:0d:70:e9:a8:1c:88:
61:67:ae:02:cb:54:94:23:24:32:31:19:2c:36:2d:
1c:44:5e:eb:b4:bf:7e:df:41:29:20:07:d9:62:60:
1d:0c:60:95:0b:a9:da:af:b6:30:ae:15:73:27:2b:
5b:65:ff:ef:31:06:46:f0:cd:14:78:c1:f2:eb:39:
71:7d:20:d5:fe:4d:b1:be:ea:9e:41:b9:4f:73:ee:
53:a9:10:13:a1:93:91:34:02:4a:4e:94:a7:ba:cd:
b5:73:7c:ff:ef:0c:08:14:07:ae:67:16:00:f5:5d:
10:81:50:fe:48:3e:d3:a5:0d:01:d6:eb:03:6a:96:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:18:73:1A:22:C3:17:EE:F9:64:15:DF:A1:8F:C1:91:64:A5:51
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3f:2c:3e:eb:47:aa:5e:ce:5f:dd:7b:fc:b6:4d:87:f2:60:
99:5f:b7:03:fe:63:56:5b:9d:ae:f9:ba:ed:a8:49:00:d1:1e:
75:64:6d:96:0a:bd:13:23:90:84:53:dc:2e:76:02:a1:bf:d5:
3a:76:75:11:60:30:60:40:88:d4:77:81:ae:12:c5:fc:06:cb:
4f:0a:63:a9:c1:ba:32:35:d8:41:d5:d4:a0:bf:2b:15:5e:f9:
47:f2:5f:e0:35:28:e6:4d:fa:f2:b7:21:ec:24:ae:a6:3d:f6:
c0:b2:b8:f8:8a:31:f3:93:13:1c:3f:6f:f3:8b:67:34:4e:f2:
96:dd:20:26:db:e1:ae:4a:25:8f:94:39:39:45:50:fe:2d:13:
bf:95:f2:d3:f8:93:d7:2f:94:16:59:a4:60:72:1f:f6:e9:28:
5d:9d:d9:18:c4:fa:f4:9d:c2:21:1b:fd:b9:ad:4b:d6:b1:c6:
0f:17:1d:d3:2e:34:26:01:74:45:b7:8f:08:d2:9b:6f:f7:bd:
61:88:3a:e9:44:97:b7:7b:b3:6e:52:7f:2c:f9:56:f8:4e:81:
2f:7e:6c:c5:d4:7b:ec:93:28:a8:fd:ec:39:41:75:a0:5b:05:
d8:27:e3:01:57:0d:42:c4:1b:c1:d9:a5:1a:73:0b:10:ff:b8:
fa:4a:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:48:39 2025 by rpki-client