Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: oJgQnsULIAhqZE0Bib3Yo6/i9+ez0te+YBIpZqP4Lvk=
Subject key identifier: 63:0C:5F:56:DA:AC:4E:0B:B3:DE:37:C9:88:98:D0:A4:69:8C:72:89
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 0197B632ABA35DE738DD63CF60938B498C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0712
Signing time: Sat 28 Jun 2025 11:01:03 +0000
Manifest this update: Sat 28 Jun 2025 11:01:03 +0000
Manifest next update: Sun 29 Jun 2025 11:01:03 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: iiCzs/7We72i5PpvP2hkXmCEvFDEO5QY4IuZVQpfXUo=)
3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ab:a3:5d:e7:38:dd:63:cf:60:93:8b:49:8c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Jun 28 11:01:03 2025 GMT
Not After : Jun 29 11:01:03 2025 GMT
Subject: CN=630c5f56daac4e0bb3de37c98898d0a4698c7289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:98:5b:73:59:ad:60:af:1e:4c:c3:55:f7:
f5:f2:1a:37:2e:eb:79:56:12:57:63:5b:2d:3b:b5:
f7:4b:41:16:e6:6a:2b:b5:af:2e:d4:72:69:d7:a0:
cd:a8:36:24:3f:07:79:a1:5c:dd:be:c8:56:1a:7d:
4f:4c:ce:9f:65:ce:07:3d:95:3d:1a:28:99:d6:52:
a4:6c:8d:c0:f4:da:99:a2:a6:ca:40:6a:f6:1e:43:
13:0d:43:03:0a:3f:b5:04:e5:16:2d:31:6c:13:c7:
d3:fe:3c:51:dd:90:b0:64:66:ab:ea:d4:c5:a3:63:
a6:dc:a8:06:73:ec:36:b0:0e:70:1f:51:e8:f3:fc:
94:b3:0d:53:8d:7f:86:fc:db:96:e0:b2:ce:7d:a8:
60:8a:a4:61:0e:8f:e5:47:95:e9:c1:58:16:39:85:
ee:d8:bb:64:e0:94:71:94:8e:4c:06:13:e6:92:b6:
6c:b0:b6:69:79:82:cc:90:28:7c:9b:a9:0f:87:d5:
ed:07:b8:28:82:d8:63:c7:7d:39:32:3b:a3:7d:34:
55:f0:32:17:df:f5:3a:64:1e:27:eb:3d:ad:bb:a6:
74:25:95:d1:a2:f5:e6:f4:6e:79:fa:15:06:e3:28:
9f:7a:eb:b2:b8:f4:4d:d6:2a:09:b1:6a:ea:25:b0:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0C:5F:56:DA:AC:4E:0B:B3:DE:37:C9:88:98:D0:A4:69:8C:72:89
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:40:d5:0c:26:41:ca:3d:de:e5:0e:39:d6:f8:e4:e1:8c:a6:
ef:33:fc:96:cd:ae:da:d9:6c:e6:f5:34:77:87:bf:91:d7:21:
ab:fd:ee:3e:69:3a:be:ff:c3:c0:b0:0a:70:eb:8d:ce:a9:7b:
07:1a:7b:25:72:b1:3d:2c:3b:02:ed:2f:51:41:7f:94:d0:af:
38:7b:ca:57:cc:27:24:0f:a6:8e:b6:74:4a:2a:cd:26:6c:32:
5f:28:9a:27:35:5f:94:0c:bd:ed:36:e4:9f:30:19:8d:95:84:
d7:58:ad:0f:e1:e7:50:a4:de:c2:5e:ad:68:2d:8f:36:c5:72:
17:21:81:0c:a3:22:e9:4e:d5:d9:7b:04:ab:c5:d5:2e:05:9c:
6e:3f:96:36:85:5d:00:1e:2c:26:f5:d6:b2:70:d6:12:3f:a1:
06:8c:24:d7:4e:9e:cc:5e:bd:5e:6d:8f:c0:c1:08:d1:c3:cb:
8d:f9:c6:6d:ec:85:70:aa:bf:c6:84:79:1d:0b:10:cf:a4:36:
08:b3:b4:9a:c3:3c:5d:b4:27:cf:f1:65:cb:4f:fd:55:32:5d:
77:05:f7:d4:0e:5a:9c:40:a0:c0:7b:e3:1f:1a:bd:b5:8a:b5:
4c:98:0d:95:19:2d:04:22:3e:3b:d9:de:10:d4:31:40:71:b3:
11:84:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:12 2025 by rpki-client