Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
File: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json)
Hash identifier: Ldl+15ApzRB/e/MJxG4k2Ww1v5fBK08CHVXq5p5qOMY=
Subject key identifier: 1C:1D:3E:1D:BB:D4:4E:82:29:F5:48:A4:EC:5B:6C:61:DE:50:CB:44
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial: 0197B7B3684768592F69B8910FB8E3528081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
Manifest number: 0159
Signing time: Sat 28 Jun 2025 18:01:17 +0000
Manifest this update: Sat 28 Jun 2025 18:01:17 +0000
Manifest next update: Sun 29 Jun 2025 18:01:17 +0000
Files and hashes: 1: bh_jxWLWM4ERu-tO2W_vtiAaR34.roa (hash: q67OJI4bSTnxGyWpXxOC2jeYAfoLHFvQvpzctzRe0VE=)
2: sibHr2FGPjo5CfPD_x82IFZOyjI.roa (hash: 5o3OHC/8KmGr6JnUosFKoE0TLY9c878SbcJe1V+5e/c=)
3: tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa (hash: dYA2gqzlNnRY/+Z83i04orn08vaFeOTWTefS4wKcEJw=)
4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: DuDZwnudK548ibqrWYpq+qxik5RQ47k3cM5h9qRJuj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:68:47:68:59:2f:69:b8:91:0f:b8:e3:52:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Validity
Not Before: Jun 28 18:01:17 2025 GMT
Not After : Jun 29 18:01:17 2025 GMT
Subject: CN=1c1d3e1dbbd44e8229f548a4ec5b6c61de50cb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:b6:f8:f8:a1:93:82:6d:a9:87:c1:ca:0b:
79:72:bd:21:06:0d:32:ae:93:45:9f:a6:10:8a:b2:
c4:27:61:62:51:2f:7e:c1:15:0f:77:a7:5e:d3:ee:
e6:b7:5e:35:fe:70:4d:cf:e9:4f:ca:e2:4a:4f:43:
c1:f3:fb:bb:27:e7:dd:1f:a0:11:74:82:ca:b1:30:
e9:5c:d5:38:70:21:51:d9:28:63:7f:ff:5f:3d:10:
69:24:c2:17:43:b0:bc:5f:f3:ae:05:18:40:1f:40:
b4:5d:1a:43:05:cb:2b:60:85:0d:f1:3d:4b:fb:f9:
ee:24:44:e7:05:0b:45:ce:6b:af:a5:ad:0f:bd:a9:
e5:33:bc:71:8a:25:60:74:3e:72:86:96:a4:d6:43:
bb:85:dc:f5:ac:79:2a:10:ce:65:31:be:84:74:c6:
c7:f5:3a:ad:a6:bb:74:f4:6f:c9:1a:f8:2f:71:71:
94:0e:ab:28:f6:8e:39:18:76:6d:3e:c1:87:e4:05:
4f:ba:c8:c5:a4:b5:0f:fe:15:91:22:59:3a:ea:ef:
e1:2c:f9:bf:75:f3:08:1a:25:e3:29:4f:83:d9:6e:
79:ce:5f:8a:3b:f1:2e:91:70:2c:65:70:a1:8e:a6:
c6:03:fe:62:f6:38:49:2c:46:05:29:f0:91:bf:a5:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1D:3E:1D:BB:D4:4E:82:29:F5:48:A4:EC:5B:6C:61:DE:50:CB:44
X509v3 Authority Key Identifier:
keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:89:1a:8c:ed:3f:c8:ae:88:4b:0d:46:88:3e:7a:6b:2a:ae:
15:aa:57:ba:6c:16:99:68:2e:5e:83:9a:df:1a:75:9a:06:09:
02:99:6d:99:8c:a9:31:6e:9e:7e:52:fa:29:85:90:9b:8c:85:
1f:cd:cb:c0:af:a5:88:4b:fd:d4:fa:60:7a:9a:c5:3f:28:56:
0c:67:00:e6:65:3e:0a:1a:0c:6b:bf:b0:d3:ca:0a:c1:6b:34:
36:c6:f5:54:25:30:c4:ba:23:5e:56:0a:c3:7b:d8:8d:74:4a:
bd:fe:98:e6:75:a0:da:93:3b:58:42:2a:d3:d3:13:0d:c8:18:
d3:df:e2:86:14:4c:59:01:41:9f:e4:27:47:90:56:1b:51:15:
7c:7d:77:32:18:f9:c3:20:ed:29:63:35:3f:0f:ee:66:86:2e:
a5:dc:3f:74:47:7a:b9:28:f4:92:36:f1:1b:d5:a5:91:60:67:
68:0c:35:19:f1:29:df:a0:a1:9e:cc:cb:fb:6e:ca:e0:d1:e1:
68:07:dc:ee:29:32:c9:ab:61:90:ab:3e:4e:3a:ab:86:83:05:
dc:61:4c:61:c8:b5:eb:b4:ba:59:32:59:3f:17:d7:da:01:67:
77:f5:db:ce:18:b2:19:84:8e:77:83:39:02:b6:4c:bd:d1:35:
1e:85:78:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:20 2025 by rpki-client