Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
File: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft (raw, json)
Hash identifier: YYes4CB3vGFSDo6IYMWN/Su45OoNDh2kjDuabmnWWiQ=
Subject key identifier: C1:55:83:21:9D:F4:6B:84:3A:62:32:AC:7E:09:08:B1:C9:3F:DB:D7
Authority key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Certificate issuer: /CN=63e30980305345fd5365b3515e3568f9cee58541
Certificate serial: 0197B6A03A8A6FBF4179D692B672936208D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: Hs2TvjBAbChswFTm05pNrXJsCJA.roa (hash: xtJBUOZoNvBaKTOo18EAAqIaZQ4IjdLX9G/viT94FJA=)
2: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl (hash: MrGGkb+ZAuHN1KIBgAYVRIe7DH/WYsg75HsdxFl+kXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3a:8a:6f:bf:41:79:d6:92:b6:72:93:62:08:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e30980305345fd5365b3515e3568f9cee58541
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=c15583219df46b843a6232ac7e0908b1c93fdbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:40:22:6c:f9:9c:7d:f0:21:eb:f1:20:ac:
d3:23:0d:78:92:8f:00:21:4b:bb:b5:26:0c:c6:ed:
24:9f:93:4a:e2:81:72:c1:f0:a8:97:ad:40:0b:17:
79:18:68:8b:f2:75:58:50:00:38:0d:84:f1:95:be:
cd:54:e1:27:9f:09:cb:08:23:0e:d6:ca:22:45:84:
ec:7b:1c:44:0f:ed:99:bd:86:00:27:05:e2:54:3b:
ef:e1:9f:16:b2:47:4e:d3:83:85:0a:ed:13:f8:cc:
03:95:10:cb:76:68:6f:b6:78:32:57:f6:06:06:85:
f1:d7:0d:44:16:38:92:3c:5b:0b:eb:2f:b5:39:2b:
b8:df:bb:45:39:08:72:40:1c:fa:6e:42:50:0f:b4:
da:2c:ba:33:3f:23:df:7e:ac:60:07:a1:91:a6:db:
21:c5:b3:6a:3f:a2:26:fc:c3:ca:3c:b9:17:62:33:
eb:a6:07:58:33:80:fd:9c:3d:43:0a:60:fb:02:ec:
6c:67:b1:45:4d:6f:59:ae:e7:10:ee:ad:71:f5:f2:
c7:8f:b7:40:c5:32:e6:5e:c6:c5:6c:8d:46:fb:0e:
1e:b5:b0:47:db:8f:73:0a:1e:fe:0a:c4:4d:97:33:
01:ba:7b:80:2d:5b:73:8d:51:e9:ab:64:55:bf:64:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:55:83:21:9D:F4:6B:84:3A:62:32:AC:7E:09:08:B1:C9:3F:DB:D7
X509v3 Authority Key Identifier:
keyid:63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a0:2d:6e:28:b5:c2:31:86:41:c2:f9:80:3b:24:fd:fc:18:
d5:90:35:8e:c5:f4:63:b7:a6:fc:8b:fc:a3:6e:58:a9:88:f3:
19:cb:5d:11:e8:c2:36:31:5e:cf:bd:f2:89:f5:cd:98:92:dd:
7f:84:23:fa:4d:f8:43:f1:b0:91:84:6c:73:79:6f:a3:9b:f6:
ef:1e:df:af:ef:20:11:9a:c3:de:f8:c6:96:cf:70:c8:c5:35:
60:35:6d:5d:8e:ae:c0:5c:19:e0:3e:31:32:d5:a8:c2:c6:b0:
ed:d6:84:ba:fa:9a:e0:33:7b:9c:95:ee:0b:7c:fd:31:ab:c9:
2b:39:5f:32:49:0a:5b:84:cf:6d:0b:16:cf:6e:75:61:b5:8d:
54:43:8c:04:0e:31:61:bd:25:c3:2d:b8:16:d1:bc:6b:dd:f6:
d8:c7:cb:ba:e3:f4:09:32:57:9f:f9:b1:4e:ea:04:b8:af:56:
30:c7:fa:50:d3:16:c4:ec:c4:ba:c2:f2:d7:be:d1:c3:87:72:
85:63:24:22:d8:8f:f7:be:25:c2:b2:e7:3d:c1:43:a5:4b:f6:
bc:81:a9:8a:21:ca:f4:5a:23:2f:ad:47:d8:42:c4:23:d2:2c:
b7:8f:d9:b1:b1:99:db:3c:8f:3f:a7:a8:a2:04:0d:37:87:8d:
2f:a1:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:06 2025 by rpki-client