Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: kddB5pZfGalJXfIO6N5vojxWcSm+tuv5RrnL3SpFBes=
Subject key identifier: EE:8B:11:4C:9B:3D:7F:B3:5D:B1:35:85:38:8F:30:F0:EA:D5:BE:1C
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 0197B88F9B06B10EB47502612416A84839EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: A0
Signing time: Sat 28 Jun 2025 22:01:48 +0000
Manifest this update: Sat 28 Jun 2025 22:01:48 +0000
Manifest next update: Sun 29 Jun 2025 22:01:48 +0000
Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: iXoQKwy2TRYAQ3ebn3nHieNUJ2fq1L+wFt7TK6Rqy9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:9b:06:b1:0e:b4:75:02:61:24:16:a8:48:39:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Jun 28 22:01:48 2025 GMT
Not After : Jun 29 22:01:48 2025 GMT
Subject: CN=ee8b114c9b3d7fb35db13585388f30f0ead5be1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:70:17:f1:5a:bd:8d:98:fa:16:0e:ed:f4:
61:7e:db:ea:93:99:76:2f:02:5a:8e:6d:c1:ce:5e:
f2:c9:92:c8:99:dc:fe:bc:6f:f1:7f:19:d5:87:5e:
d3:5c:ce:0b:3d:24:8e:eb:fe:12:ec:a7:9d:11:25:
1d:c2:c7:bf:5b:ba:22:45:4b:74:ec:3c:74:56:38:
36:00:44:d3:e0:36:1a:ed:ce:7c:c2:c7:21:ae:20:
d3:47:46:78:50:ec:a5:ee:77:f4:96:4b:2a:4c:58:
ff:11:05:7c:34:8d:0e:05:c4:0d:de:7c:fb:0a:26:
87:15:39:ca:30:98:b2:a8:2a:c7:8e:36:e6:e6:52:
a7:6f:d6:08:7f:c6:dc:0c:d6:af:33:5f:f3:bc:89:
71:5d:c7:03:69:68:0d:96:49:a6:c0:4d:bd:d1:43:
4b:b7:c3:fd:de:68:99:1a:59:5c:c5:4e:51:54:25:
62:7b:2d:01:71:b8:05:9e:d1:94:48:6d:ff:a0:ab:
98:d3:6b:29:3e:e7:57:c0:e2:7f:0d:d0:06:a8:8a:
d3:0f:dc:94:cf:5a:03:18:bb:30:96:03:21:b4:f6:
f8:c7:bd:0b:bf:d4:f2:c8:cc:8c:6b:63:99:db:80:
36:8e:17:cf:53:d5:7c:a2:ed:fa:a9:1e:4c:39:89:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8B:11:4C:9B:3D:7F:B3:5D:B1:35:85:38:8F:30:F0:EA:D5:BE:1C
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dc:eb:b4:57:df:13:89:cd:e6:8c:48:d6:9f:fb:87:78:24:
2e:84:c1:2e:df:4b:58:be:e7:0b:31:12:38:f5:d5:14:a6:8b:
bb:f2:45:85:cf:45:3c:d0:0b:32:45:55:5a:e7:4a:6b:8b:55:
67:15:e9:ca:db:9e:b9:45:f9:62:cf:14:de:2b:58:6e:68:cb:
ba:04:71:ba:58:75:5c:91:71:aa:32:4d:b2:41:25:7f:86:b5:
f7:d2:e4:72:4a:d7:98:e3:eb:fe:e9:41:b8:6d:1c:c4:10:fe:
91:07:0e:2f:ed:e0:76:87:51:c1:1e:46:99:1d:d6:bb:14:f5:
7a:11:c8:4e:b7:d5:59:f0:dd:dc:db:07:7a:9f:4d:2f:d0:f7:
e0:28:96:f7:be:b2:85:7c:84:18:3f:68:20:58:db:b1:89:a1:
e5:03:02:61:5f:95:f2:3f:cd:cd:ff:05:8a:14:38:56:79:b0:
e3:cb:e5:0c:97:a7:da:a9:8f:71:03:82:7c:6f:79:f5:fb:4d:
99:8b:3a:e0:6f:f7:f4:44:10:85:6c:73:93:1b:9f:b2:e0:f5:
bd:f0:fb:cd:1c:91:e8:d6:51:a3:a0:12:5a:5c:90:94:c6:50:
c7:8c:55:26:89:d0:77:48:f0:ce:46:ec:a0:db:a3:e2:88:a9:
06:33:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:30 2025 by rpki-client