Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
File: Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft (raw, json)
Hash identifier: pRdy8WIo8BrpimV6xBv/uoGM85YkUZP2vrIAiEvi6VY=
Subject key identifier: B0:4C:60:75:57:0C:0D:67:27:73:4B:2F:2F:12:79:BF:0B:4C:5B:73
Authority key identifier: 63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10
Certificate issuer: /CN=63642c1ca3d38c7e15e687e0d9485c7826938c10
Certificate serial: 0197B6A1DB7771FC1050B2BC4DD3A94846F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
Manifest number: 02E1
Signing time: Sat 28 Jun 2025 13:02:30 +0000
Manifest this update: Sat 28 Jun 2025 13:02:30 +0000
Manifest next update: Sun 29 Jun 2025 13:02:30 +0000
Files and hashes: 1: Qzda_dpxvv_9oCqZ0rKtNjYGFYA.roa (hash: yhmVIZybj8mBYPvdFgcuCe4v8sYhgAuDZKiw+Hdv0f4=)
2: Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl (hash: L6YgMgoMFx3fqF+E3T9T2WgoG9pkit+Az5Xe2k/lQ84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:db:77:71:fc:10:50:b2:bc:4d:d3:a9:48:46:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63642c1ca3d38c7e15e687e0d9485c7826938c10
Validity
Not Before: Jun 28 13:02:30 2025 GMT
Not After : Jun 29 13:02:30 2025 GMT
Subject: CN=b04c6075570c0d6727734b2f2f1279bf0b4c5b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:86:e4:44:7e:b3:f2:9a:49:8f:fb:2b:76:
54:22:f4:40:d9:4a:59:41:79:9f:fb:e7:e5:93:27:
d5:4e:2d:7a:8c:0e:c4:83:de:f0:9f:cb:b6:c2:44:
6a:83:ca:3b:8e:58:10:b4:23:6d:d2:98:d0:43:ce:
99:f6:d8:a3:d5:be:26:59:f3:b2:4f:33:71:c9:9b:
9a:58:be:96:c4:2f:49:01:26:d9:fc:26:91:49:86:
b3:b4:db:e4:a0:3d:eb:8d:46:29:c2:9f:bd:15:d3:
00:71:8c:4d:d4:95:0e:42:e9:e8:4b:ac:10:7b:e1:
5b:1b:21:1f:65:85:31:80:98:52:35:1f:fc:a6:dd:
2a:79:dc:a0:f1:2b:83:2d:26:7d:ad:c6:72:12:6a:
65:54:c7:c7:87:b9:cd:10:a2:bc:8a:1b:5b:9a:46:
68:3a:73:99:4e:55:94:8f:c8:9f:1e:e2:02:df:0c:
aa:d6:3c:09:51:96:c2:75:75:98:21:8b:50:3e:34:
e0:36:51:b8:a1:a2:e6:b9:92:b1:e7:8a:b5:6d:be:
96:bc:82:3d:c5:70:ed:f2:be:08:f1:2a:fe:f0:18:
ae:49:76:ed:9a:d0:f8:68:74:fe:1b:57:91:46:fd:
bb:ac:cc:4a:9e:1d:a9:81:d2:68:78:03:31:1f:52:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4C:60:75:57:0C:0D:67:27:73:4B:2F:2F:12:79:BF:0B:4C:5B:73
X509v3 Authority Key Identifier:
keyid:63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:df:59:1a:92:d1:db:ce:37:3b:84:0a:1a:3e:a4:64:28:ce:
b4:c2:a8:15:19:d6:eb:db:36:d5:45:53:47:d6:1f:7c:c8:90:
3b:d0:9d:41:f8:83:bf:8a:1e:e5:f3:47:88:97:e1:b0:44:1a:
52:dc:d5:8c:d6:1e:8d:2b:1b:cb:ad:a9:e1:ea:ba:a6:07:90:
4d:7d:9b:5b:a2:de:fa:2d:05:be:fb:47:98:f9:f3:fa:10:b4:
6b:1a:5f:97:eb:5d:c9:5f:95:45:1e:7c:35:bf:b5:3b:13:f6:
c5:80:9d:42:42:48:ee:da:ed:32:48:29:6d:26:8c:db:f1:c5:
1a:02:28:d7:19:66:db:bc:e8:55:d6:86:0d:7e:ac:ce:07:df:
12:a4:5c:e3:de:32:10:eb:a3:4d:1e:f9:26:f7:2f:77:8c:a7:
c3:df:4e:42:61:f1:59:3e:e0:04:9c:44:0e:d8:19:b8:6c:1c:
5e:03:b3:88:8e:a7:97:af:ce:b4:6c:8c:57:cd:96:f9:47:41:
a8:b9:0e:45:6b:3b:af:07:5a:d6:64:c3:c9:d9:0a:73:35:cd:
9d:72:56:af:a1:cf:22:6b:6d:fd:13:0b:99:bd:3f:89:0f:57:
35:5d:b7:3a:46:16:f6:1e:32:fe:54:c2:6e:9d:20:70:07:28:
40:11:53:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:37 2025 by rpki-client