Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: pPi+UumHqEh6UUZXuq8BXZzxtKElrP+zSFzcXBDmIZE=
Subject key identifier: 43:13:08:27:01:88:64:A2:9D:2E:FB:BD:D2:8C:B9:A0:89:F7:43:09
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 0197B6A1351CEC817BF6D1CD0044DC491CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 12B6
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: /llRgrfolarUD7QHGwp6x9h9eqOEEQ1aY9xcdqXN1u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:35:1c:ec:81:7b:f6:d1:cd:00:44:dc:49:1c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=43130827018864a29d2efbbdd28cb9a089f74309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:32:cc:5d:90:e3:33:da:89:51:50:b4:f8:
52:39:22:b7:2d:16:31:f0:e1:9d:ef:57:d3:a7:9f:
56:07:ed:89:67:76:33:16:75:0a:87:a9:9b:2b:8c:
48:e0:cf:10:aa:97:dc:0d:7b:b1:8c:04:47:bc:28:
94:15:63:0f:00:ac:31:92:fe:07:ce:c9:ea:95:53:
90:6b:32:cd:cd:37:26:79:a0:d0:7e:dd:80:d8:c7:
92:a6:27:d5:18:a2:91:b5:95:16:16:02:7a:8f:4e:
71:86:c6:fa:0a:2d:e1:28:ce:16:cb:88:26:b8:e1:
2d:fd:7c:ab:3f:b1:46:74:e5:20:cb:13:3b:75:19:
02:f9:f4:97:10:a9:54:8e:7b:19:4e:03:24:cc:8a:
d4:20:50:36:07:35:6c:b0:2f:04:96:08:f3:1e:7a:
d3:85:c3:a5:9b:86:42:1c:4b:fd:aa:a0:31:6e:b6:
05:06:18:26:62:86:f7:2e:f1:35:03:53:a2:51:4e:
60:19:d5:06:f1:b6:ea:97:4b:ca:18:de:74:b8:9c:
ac:a7:81:35:56:2c:6f:0e:14:d9:c6:7c:7f:be:aa:
8b:de:60:58:ef:fc:69:9e:f4:45:4f:b5:5a:6c:a7:
96:d8:85:8b:ad:fe:92:34:ec:b0:db:53:a1:03:1e:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:08:27:01:88:64:A2:9D:2E:FB:BD:D2:8C:B9:A0:89:F7:43:09
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0e:58:e9:b1:fa:78:2c:3d:e6:a7:8d:7b:1e:6c:70:30:4b:
3d:64:ad:00:96:1b:58:4c:8e:f8:b5:42:fe:4c:b3:df:01:16:
81:3f:ba:1b:64:f4:14:70:9a:6b:2d:c2:bd:bf:13:fa:8d:f8:
80:7a:38:42:e8:f1:86:2f:03:5e:03:33:d4:43:83:3b:53:a5:
2d:9c:56:08:8c:3e:1f:15:b9:f2:8d:8c:6c:24:c7:25:4a:0c:
a2:5d:d4:5a:f2:d4:fe:57:bc:ce:fe:6f:0e:5e:89:43:59:aa:
f4:8f:ae:33:3a:26:07:b6:30:59:5e:23:04:71:cf:c2:5a:c7:
42:2f:d2:c6:aa:88:11:3d:7b:e6:75:2a:73:4c:8d:82:88:e3:
47:94:6a:4e:52:bc:68:d2:7e:54:73:d8:ce:a7:d0:f3:92:3f:
d1:5f:c5:fc:84:8f:1a:f7:38:15:b8:12:52:26:56:9c:c5:44:
62:0b:54:23:03:b6:ae:5a:36:24:ed:b6:17:e1:45:b5:da:fb:
f6:3f:32:99:bf:cc:75:52:05:aa:57:a2:dc:38:4c:49:1d:df:
d6:ab:d6:96:95:c3:62:88:61:e3:8b:f0:7a:34:be:81:29:70:
ef:2e:e0:94:9b:49:df:bf:1b:8b:c8:3d:2d:64:12:65:08:3c:
4b:1d:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:53 2025 by rpki-client