Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: MUZl5trrtLe1XSRGdWqrDgyuPy1LtnQq8+Ti3f8HKGE=
Subject key identifier: 43:7A:D0:5F:08:A4:99:8D:B8:39:50:00:DA:0D:C0:66:F1:EE:DC:04
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 0197B8C5D0098E67E5A3FFCDD45C87943F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 0E9E
Signing time: Sat 28 Jun 2025 23:01:00 +0000
Manifest this update: Sat 28 Jun 2025 23:01:00 +0000
Manifest next update: Sun 29 Jun 2025 23:01:00 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: ca5rF7DrIHJuQLLuQ9Wz5GsBcikgHtNcYIqrS6PpKyc=)
2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:d0:09:8e:67:e5:a3:ff:cd:d4:5c:87:94:3f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Jun 28 23:01:00 2025 GMT
Not After : Jun 29 23:01:00 2025 GMT
Subject: CN=437ad05f08a4998db8395000da0dc066f1eedc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:c0:7c:3d:a5:91:5e:0d:88:de:a7:de:76:
39:95:7a:d3:43:d1:2c:bf:4b:50:41:55:bb:60:ec:
2f:b5:12:a8:7f:c6:b4:7b:d6:74:4f:48:57:eb:2c:
50:ad:ab:08:28:ab:10:81:5d:b9:c8:83:25:2f:42:
0c:64:cb:2e:14:16:8d:30:f5:da:f3:35:8a:58:48:
ef:6c:d9:0f:2f:17:f4:48:5f:d5:f0:c3:0e:e1:bf:
b2:1d:18:b7:48:d9:0c:7d:67:ad:65:13:06:d7:4c:
b3:df:5d:b8:31:47:24:5f:4d:a2:8f:cf:69:8a:15:
21:63:6b:1f:36:2f:c5:25:e2:53:81:42:b1:83:86:
b8:7c:e1:14:58:aa:f2:c0:8b:6a:6c:e4:67:bc:bc:
ff:bc:83:0b:28:51:12:a9:64:7c:de:f1:d6:35:dd:
fd:b9:8c:64:84:4c:d5:ba:7a:60:b1:86:9c:b4:bd:
2b:f5:df:eb:60:0d:75:bc:33:ea:85:ce:22:5c:2a:
d4:d8:db:98:ed:48:4e:68:76:ba:68:d6:54:b6:26:
e5:e2:f6:77:47:c5:ce:54:36:f4:19:6b:2d:c0:a2:
ef:e2:19:99:fd:a1:3c:09:cf:09:55:38:ad:a5:2c:
83:22:44:79:2e:4e:57:b1:a9:72:d4:f7:95:f0:75:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7A:D0:5F:08:A4:99:8D:B8:39:50:00:DA:0D:C0:66:F1:EE:DC:04
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2e:51:2b:6e:cd:9e:53:a7:39:19:a5:3b:38:c3:38:d8:56:
11:19:75:a6:e5:4d:df:de:f3:0b:26:33:fd:4d:28:51:6a:6d:
8d:db:bc:1e:d3:ed:cf:c4:b9:79:0a:3d:00:af:bc:7c:8b:48:
ba:71:58:38:41:48:1d:d6:6f:20:1e:3b:36:bd:01:c2:09:1c:
84:cf:a2:c9:5f:80:4e:cd:89:68:40:94:e2:e1:8c:ad:04:93:
cf:8b:45:58:b0:4b:ff:2f:f2:ed:a4:2d:d6:c2:ae:14:67:d0:
e0:f9:6f:a2:16:05:18:28:de:04:e4:32:ea:f0:08:58:76:d4:
e4:68:cd:21:bc:88:7c:22:c5:9a:fa:0a:c8:b5:77:c5:f0:fb:
e8:e5:7f:3a:28:13:b5:de:b6:86:6a:8e:12:d0:59:5f:7a:1e:
b6:e1:d2:f3:81:14:95:26:a3:44:74:59:d5:c0:be:a6:f9:9c:
e6:1e:bc:82:b1:1f:ee:6a:b6:df:b7:2b:e5:21:c1:af:6e:51:
f7:29:8e:54:9c:81:9b:16:45:93:66:3c:36:d0:9e:a8:1c:c2:
4f:32:17:b5:2a:23:09:a2:16:40:1b:67:a4:d3:2c:11:fd:27:
df:b7:a9:48:13:9a:61:8c:7c:f5:21:dc:f5:aa:d7:79:8f:90:
2f:bc:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:02 2025 by rpki-client