Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
File: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft (raw, json)
Hash identifier: N5NFY96pDeeFCBUQikFDGM3zwtWynU6XW9CjIDNfDLY=
Subject key identifier: 03:48:6D:A6:E1:F7:08:B5:BC:7A:4B:BC:11:69:D0:20:07:40:75:50
Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
Certificate issuer: /CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Certificate serial: 0197B5FC3B761F2DB21FECBA06DDB921E8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
Manifest number: 0CDA
Signing time: Sat 28 Jun 2025 10:01:35 +0000
Manifest this update: Sat 28 Jun 2025 10:01:35 +0000
Manifest next update: Sun 29 Jun 2025 10:01:35 +0000
Files and hashes: 1: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl (hash: +BNddrjijokMBh+k7KC3acZ4wVC6gyNbk3qBX1qhey0=)
2: cmQy3O27JTVMgc0scAWzRQz1k34.roa (hash: JrHBwEb+drqrBDZnlCxDUthDJ1gAVyMOlFCkBCL2cqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:3b:76:1f:2d:b2:1f:ec:ba:06:dd:b9:21:e8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Validity
Not Before: Jun 28 10:01:35 2025 GMT
Not After : Jun 29 10:01:35 2025 GMT
Subject: CN=03486da6e1f708b5bc7a4bbc1169d02007407550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:5e:79:b7:fd:4a:e9:45:6e:c7:b4:a3:0e:
57:5b:34:b3:d3:cc:08:6e:37:2a:f9:12:18:54:58:
52:3a:08:5d:e9:8e:6b:a9:7a:b2:46:75:12:43:52:
ac:66:17:21:4b:c4:27:4f:70:77:29:44:2b:e7:0e:
e1:a9:5c:d7:8f:b2:18:d2:4b:6a:23:f4:ae:a0:5f:
44:7c:9c:ef:59:40:e0:5c:2e:eb:08:a1:0d:59:3b:
3c:0f:cf:76:a5:35:e4:7b:e2:9a:6b:4c:85:70:ba:
34:c0:c2:a1:fd:23:5d:59:52:8e:d3:a9:30:f7:8e:
46:72:ca:29:f6:9d:e5:af:e2:13:3c:ab:9e:58:c3:
10:14:07:f8:70:5b:37:96:a0:a2:a4:f4:91:0d:28:
75:b6:cc:07:c6:23:9c:0c:36:08:92:2e:3c:12:bb:
21:f1:3f:f6:2e:1b:6f:74:a9:97:75:2f:82:80:e6:
a6:52:3b:86:74:c2:ac:95:67:fa:6e:65:e2:1c:29:
73:a7:4e:6d:36:38:ed:0f:e6:49:dd:8c:f8:4f:00:
c5:c7:bc:df:93:ba:a4:82:22:8f:36:2a:68:2c:98:
fe:d9:45:b8:5f:a2:ef:fd:32:7b:e7:fd:7e:e4:9b:
c3:19:47:f9:1b:a2:75:a3:43:04:08:16:8b:3d:33:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:48:6D:A6:E1:F7:08:B5:BC:7A:4B:BC:11:69:D0:20:07:40:75:50
X509v3 Authority Key Identifier:
keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:db:12:d5:91:4b:ae:7a:03:52:36:4e:23:b8:7e:92:c7:93:
e2:be:81:57:c4:19:d6:21:c6:c3:8d:3c:49:1c:6c:73:33:3c:
ed:1c:ec:7e:08:c1:89:04:2e:3b:58:4e:ef:ff:06:2b:e6:4a:
e2:38:2b:f9:fa:6d:6c:50:28:1e:89:e2:d8:bf:f7:88:c1:37:
71:49:76:8c:2b:40:60:75:11:c8:5b:6b:55:43:49:ea:76:8e:
85:aa:fd:c1:0c:54:f5:f0:1c:7f:d0:b8:62:9f:99:c2:bb:52:
ef:67:ec:d9:64:91:b7:fe:1a:aa:c4:45:11:9a:e2:ad:3d:77:
55:2d:95:db:f8:6c:37:14:88:77:80:04:51:a5:72:43:66:da:
b6:fd:d6:5f:b1:44:3e:72:dd:78:35:5f:e1:29:ff:7d:80:28:
ac:0a:28:e1:fc:d7:4a:76:c5:09:35:32:47:de:49:ab:e7:e5:
e8:1c:58:87:16:d0:e8:66:53:2e:20:59:03:81:bb:9e:c2:1b:
38:97:19:d6:11:89:e4:83:aa:cb:c8:51:44:a7:af:f8:cc:a6:
b6:0a:55:6a:e1:a5:16:c4:51:ca:52:6c:70:27:71:18:5b:e4:
a9:27:51:5a:e5:26:a1:dc:f7:bd:eb:87:3c:7b:f0:36:da:0b:
23:b0:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:48 2025 by rpki-client