Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier: BRkvIdevAs2BE8JIVxl3Z+XwhGtl3EktyVzruOgJPl0=
Subject key identifier: C3:44:0A:3D:C4:A4:AE:13:55:ED:6D:7C:8F:71:BE:9C:8B:86:F0:86
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 0197B6D7AF1BC7C73D45DA37BE2DC2756A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: 2c5hJsdBUeeCiChk_4V2w2gh6lU.roa (hash: D53Q1f7eGpeEwEpkqzHT1XzbHYkVzvcMu+bdTa1FNsw=)
2: TEuCPuBwv_2lyF72kvKuFoWc7_M.roa (hash: PAEddVQWD0GjFhS/Z0wF1zxF3c8P9Lqj+mpgI3WA80g=)
3: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: HyKXtq5IjPpHjnFAEiwNLusDLBOO5riPZrSPVenjALw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:af:1b:c7:c7:3d:45:da:37:be:2d:c2:75:6a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=c3440a3dc4a4ae1355ed6d7c8f71be9c8b86f086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:13:ee:b0:1d:81:b7:c7:de:d5:43:9c:fe:
59:65:c6:b9:0b:56:c4:9c:61:80:05:13:27:65:0b:
24:ee:bb:93:75:7b:55:16:35:0e:23:9c:46:da:6c:
95:68:49:f3:0e:a4:db:d5:80:f2:43:51:7a:13:9a:
68:cf:71:e3:f8:90:f9:01:54:c5:65:39:9a:bc:58:
70:77:ff:5d:31:31:ea:55:1d:2e:60:61:30:4c:2b:
4b:f8:2c:98:dc:f2:39:c6:75:a1:bb:bc:7e:e2:28:
d2:fa:c7:e3:a9:e0:fe:43:d9:23:7f:87:64:b9:88:
5c:35:20:c5:3e:28:52:ca:93:ab:a7:be:bb:5b:31:
57:48:3e:1e:a3:07:e5:bc:de:67:39:4a:1b:ab:1a:
ca:0c:59:f5:de:c0:b2:d4:45:ac:2b:85:ad:ee:15:
fc:81:7c:e3:92:1f:4d:0d:db:9d:8d:5b:81:b7:d2:
b1:15:5a:51:1a:b2:ff:29:b8:be:1d:7c:99:f4:97:
b5:cf:fd:1a:c5:22:36:f0:25:fb:45:5a:87:54:32:
39:d3:d6:a2:3c:c4:b0:1d:32:1c:e0:8f:4e:d4:1a:
d6:ec:b8:68:4b:66:3a:82:f5:d5:6c:12:ed:73:1b:
d3:e9:f5:6e:a9:9a:8e:49:1c:d6:83:e7:b9:65:6f:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:44:0A:3D:C4:A4:AE:13:55:ED:6D:7C:8F:71:BE:9C:8B:86:F0:86
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:16:4b:83:d9:4a:7b:0d:16:7e:80:3f:3c:79:83:4a:f9:86:
21:d9:d6:a4:1d:c9:a1:1f:59:01:92:2f:a9:9d:92:ae:5f:d3:
87:42:a5:c1:d4:58:32:c9:a1:1e:4a:07:aa:c3:dd:cc:1b:88:
6f:c0:3d:58:00:3b:6f:62:f2:06:0c:fb:c2:7f:82:5d:0a:70:
05:25:00:e4:01:4f:a4:db:47:27:d8:80:eb:7e:d9:59:53:77:
ea:df:75:85:f9:5a:b8:7c:27:65:0a:a2:40:f9:0d:91:18:05:
15:c2:b2:05:22:a7:91:00:77:d3:22:5b:f1:2d:41:0d:a9:c6:
1e:01:b3:08:a5:c2:60:fc:1c:84:82:d8:e8:15:af:c9:19:6e:
91:67:0e:fc:e0:e5:d3:33:ab:83:a9:77:69:03:ee:42:c2:1e:
8a:f8:61:4d:f8:a6:37:7f:07:18:eb:8d:f5:47:17:3f:cb:d0:
c9:d0:66:a3:5e:33:88:2d:e3:d5:fd:df:49:26:d6:61:00:7c:
16:aa:5f:fa:35:fb:2d:c4:a3:17:2d:3e:b6:97:41:32:b8:58:
8e:9b:c3:f9:61:45:fd:31:b1:25:de:72:ff:4e:6f:58:57:d0:
67:84:75:e2:e5:36:dd:bf:4c:31:c1:4d:82:1d:20:5d:0f:b0:
de:9d:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:22 2025 by rpki-client