Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: Ag3sEfAw4ugkMHZmBBZP9Qz9PWLi/KmwynrjGfoSdAg=
Subject key identifier: DE:65:86:7C:13:2A:A0:DF:F4:34:AF:5C:E7:34:2A:BB:EE:1B:0C:69
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 0197B632985CBD20DD3E6ADE42E313B480C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: 57
Signing time: Sat 28 Jun 2025 11:00:58 +0000
Manifest this update: Sat 28 Jun 2025 11:00:58 +0000
Manifest next update: Sun 29 Jun 2025 11:00:58 +0000
Files and hashes: 1: 78p7eZsSQ8zonV0TNMaLaLjK96I.roa (hash: +QO+TKXARPaWdOJ8baQ83Q+fqGFHJ3lndWpB+9vwuT8=)
2: Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa (hash: s3KelrVfC9+y7bPujzwFv1EKOWZnruzzVkasMV5xnU4=)
3: Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa (hash: xVI7un3YDJ74QBZKCGBUFc9S59Re+F08cwvGlwnT43k=)
4: LuLOUOJIGHxq7ykgB21inUS-57w.roa (hash: ab5+eNLQ6Vj2WxgXbW4Ku3+IuOco/UzZZHvYaaD6UKw=)
5: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: 4uscwUjat3lz+3FC+d0i5iPR62aa4b8IQw+xoVJWac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:98:5c:bd:20:dd:3e:6a:de:42:e3:13:b4:80:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Jun 28 11:00:58 2025 GMT
Not After : Jun 29 11:00:58 2025 GMT
Subject: CN=de65867c132aa0dff434af5ce7342abbee1b0c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:ee:17:d3:f4:ea:e5:27:7e:13:de:27:fd:
09:7d:d1:9b:bd:36:bb:f2:66:b2:84:c3:c2:d2:b1:
3a:7c:81:a1:f0:f2:e8:cc:86:18:4f:da:be:d0:71:
54:bb:ee:f0:9d:e9:6c:ca:f2:77:64:5c:c4:e6:b7:
9e:5a:fd:0e:5b:af:73:02:7e:bd:a8:d9:a6:ff:01:
d3:72:0f:bb:28:20:24:ee:a3:48:d9:47:d7:99:17:
2a:0f:21:0a:49:7d:a1:55:43:9f:84:ae:d7:23:7c:
56:fa:c3:23:7c:ff:4c:0b:6b:ed:47:63:e1:12:d9:
03:ac:94:f0:a1:a1:0f:20:8c:5b:50:14:c6:14:0d:
46:cf:fd:45:e6:a0:c1:d9:1d:31:28:66:85:ca:38:
ed:7f:b0:01:e3:7b:66:67:5d:3f:40:5a:0e:cb:bf:
c8:75:7c:d7:d9:d6:f5:a3:e7:fe:80:b7:77:79:67:
46:7a:17:66:bb:83:ab:d0:7b:23:68:38:32:ad:d4:
a2:4f:90:f7:0b:6d:c8:20:14:e9:0f:87:d7:06:04:
f8:97:8d:97:0a:c6:0c:40:fc:ae:68:2c:d2:66:5c:
08:50:ac:1d:44:4b:31:26:78:bb:eb:d9:8d:b1:96:
52:ac:0a:32:51:24:92:7c:36:97:a9:c4:06:d9:fc:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:65:86:7C:13:2A:A0:DF:F4:34:AF:5C:E7:34:2A:BB:EE:1B:0C:69
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b9:a5:f3:7b:bb:38:f2:c6:2e:2f:60:c0:b2:c0:50:49:7c:
b2:fe:4d:c8:84:b2:d8:86:09:e1:1e:1d:7b:ce:c3:dd:bd:51:
26:29:dd:65:2e:4c:7c:f4:c7:c4:40:7c:04:db:1c:42:71:a5:
06:ce:db:68:ed:a5:27:d3:16:f4:85:1b:37:fb:78:65:c9:a5:
07:cf:cc:1e:8c:f9:5c:4b:c5:61:db:9e:32:6d:14:e4:74:9d:
44:84:b2:65:ed:db:75:bd:72:fc:73:c7:6c:19:79:4d:9a:39:
0a:f8:c6:58:17:9d:78:a8:6d:0d:00:3a:71:15:10:21:3c:88:
d0:05:8d:65:a4:24:70:2d:3e:e1:ba:f3:1e:59:43:08:38:60:
bd:5e:37:b0:77:93:ac:19:6c:89:95:c0:9e:68:90:8d:2e:16:
a6:6a:e7:d1:14:34:0e:8e:2f:ae:fd:29:87:68:0c:77:ce:5c:
7c:0b:eb:41:fa:5b:7b:e7:42:db:91:05:f4:25:09:d3:d7:14:
74:8a:e8:20:4f:af:09:92:26:55:1c:35:19:79:dd:f3:ed:74:
eb:cf:4c:10:50:b7:5b:be:88:0f:5d:d6:98:af:98:dc:ef:82:
f2:c6:7f:ee:91:ae:2b:a5:cb:62:cb:8e:65:a6:f1:14:56:45:
bb:ef:6a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:07 2025 by rpki-client