Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft
File: You5JTbCD0KwW-UywNuquYt1XzU.mft (raw, json)
Hash identifier: eL2fmjSaIcvx6fD12YwRyOURK25RGC9cUG99/BvVnVg=
Subject key identifier: A7:3F:70:49:60:D4:F9:4F:CB:D8:22:CE:8C:B6:66:4D:F8:06:5B:A4
Authority key identifier: 62:8B:B9:25:36:C2:0F:42:B0:5B:E5:32:C0:DB:AA:B9:8B:75:5F:35
Certificate issuer: /CN=628bb92536c20f42b05be532c0dbaab98b755f35
Certificate serial: 0197B820FCF3BAD2C96C7F7CE8A42814A77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft
Manifest number: 6B
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: You5JTbCD0KwW-UywNuquYt1XzU.crl (hash: K6yb+TJ29436A/ZG0BPXNs3thKhoCoPLKt/G7x6w1JU=)
2: lUZIxGhzOYxZGWoE_bPIsAcvBns.roa (hash: 181xs0vbEO2Q9NjKNLp5nMH7XagJ9a8i0PdC3k4WAwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fc:f3:ba:d2:c9:6c:7f:7c:e8:a4:28:14:a7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628bb92536c20f42b05be532c0dbaab98b755f35
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=a73f704960d4f94fcbd822ce8cb6664df8065ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:b0:11:cc:21:e3:f6:fd:33:6a:b3:20:d2:
ea:44:b8:be:b4:73:7d:0d:7a:38:56:e4:41:6d:0a:
45:b9:dd:1e:7c:f2:30:7e:62:2e:f3:ce:c3:97:b9:
ed:85:99:43:c4:21:78:6f:04:28:38:c4:b1:ff:01:
dd:3e:50:2e:93:bf:32:b6:17:95:ea:61:ae:f6:e2:
a1:e8:15:08:d0:c7:83:96:c4:4b:1b:75:4c:cb:0d:
47:96:8f:f2:e4:f7:18:07:be:d8:e8:46:90:e8:93:
73:ab:50:c6:68:d3:f1:a7:61:16:47:99:c7:f6:65:
e4:72:81:3f:f6:db:14:5d:04:63:1a:68:bb:fb:ae:
bd:16:3c:d0:53:2a:c9:ec:12:8b:4b:a7:52:b8:93:
80:d7:1d:4f:f6:e3:c0:54:1f:ad:5d:33:ce:fc:b8:
df:1e:c0:0c:57:e3:d6:a6:fd:ed:94:c9:0d:11:91:
c7:96:11:1a:62:38:28:bf:21:e3:1e:1d:17:5a:37:
54:74:73:6d:f5:54:88:90:47:4a:51:4c:35:0a:23:
fd:bf:36:2b:74:49:d9:e7:d2:e9:ba:07:5d:17:41:
30:68:6f:e7:8d:9e:8e:4e:81:b6:5e:9a:4c:1c:61:
a2:f2:35:4b:31:15:75:ac:7b:62:bd:c6:23:99:65:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3F:70:49:60:D4:F9:4F:CB:D8:22:CE:8C:B6:66:4D:F8:06:5B:A4
X509v3 Authority Key Identifier:
keyid:62:8B:B9:25:36:C2:0F:42:B0:5B:E5:32:C0:DB:AA:B9:8B:75:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0b:cb:3e:7e:1c:a7:bd:89:9f:50:09:2d:7c:7e:ae:73:e4:
3d:25:f3:96:fc:74:8e:fc:ba:1f:8f:14:ab:cf:1b:06:bf:91:
f8:3e:bf:f0:fc:f4:37:ae:13:56:41:06:40:51:ee:ab:a7:47:
6d:2d:4b:26:a9:42:85:4c:d0:43:d0:a3:cf:3a:c4:53:2d:e8:
7d:ee:d2:c0:f4:42:cb:86:fc:b2:74:cd:6b:cd:48:ea:70:65:
db:8f:6a:45:e0:4b:22:fc:87:73:19:eb:c7:5d:e0:1d:42:88:
8a:26:2b:b0:29:ab:91:b4:c4:7a:3e:9d:9a:d4:91:09:91:2d:
9d:a4:ce:a4:7b:05:93:50:0c:7e:ef:b1:f5:2f:8b:34:80:e7:
7d:68:90:3c:95:2d:a8:e6:53:3e:ed:3d:89:76:97:e1:8e:5f:
61:70:cd:6e:24:bc:50:44:40:0a:1e:9a:f0:b6:d6:cb:df:49:
6c:45:f6:a3:ae:7b:01:ee:b2:ba:a5:e4:37:f4:09:85:e2:ee:
b4:35:65:b0:74:7c:9a:42:91:fe:7a:91:6a:fc:ef:3d:7a:e4:
08:b7:e2:21:d1:67:84:fd:42:46:cd:c6:aa:bb:6e:9b:98:ff:
69:dc:f3:22:2d:4d:77:8b:a3:2c:1a:3a:b4:cb:3d:16:93:34:
cc:d0:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:02 2025 by rpki-client