Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: tiYQLebZ6x2O+tIeyRakHh4QfXBdpiTHvg4c9M+A0gE=
Subject key identifier: AA:09:FC:67:96:6A:B2:9F:11:AC:64:7D:D3:24:34:01:9D:F5:62:9B
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 0197B8900F48D3B5404D29C53889F320359D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 04BD
Signing time: Sat 28 Jun 2025 22:02:18 +0000
Manifest this update: Sat 28 Jun 2025 22:02:18 +0000
Manifest next update: Sun 29 Jun 2025 22:02:18 +0000
Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: SCIlngRKzvmepQ3jDVa/sJ+g20rzB29et+9KmplQpuI=)
2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=)
3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:0f:48:d3:b5:40:4d:29:c5:38:89:f3:20:35:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Jun 28 22:02:18 2025 GMT
Not After : Jun 29 22:02:18 2025 GMT
Subject: CN=aa09fc67966ab29f11ac647dd32434019df5629b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9d:cc:54:21:16:82:6f:7b:23:58:41:09:41:
d0:d7:c2:c0:f0:de:77:5a:af:bc:60:ca:da:e8:ab:
e3:1f:4d:84:95:d9:94:37:0b:00:5e:1e:b6:38:29:
d8:4b:ff:16:07:c7:e2:b0:bf:bb:f2:e8:da:d3:4d:
3a:02:6f:5d:d3:c7:5d:67:ac:3d:16:f5:73:01:4a:
fe:33:10:b5:c9:15:d9:03:0d:78:83:ab:99:90:f6:
50:6c:c3:7b:d1:85:39:61:bd:fb:2c:4f:6c:b4:3d:
0a:12:c6:f4:78:50:c5:b3:9c:6c:13:53:01:45:1e:
ec:e1:0b:72:17:17:4c:70:5e:b2:13:59:13:82:b9:
23:b0:f2:27:b8:d6:87:03:4c:c5:4c:c9:76:aa:52:
82:ba:8d:3e:8f:fc:ca:19:0e:62:56:b1:55:df:ec:
89:f5:35:a6:9b:57:a2:49:29:c6:96:5e:fb:14:4e:
67:e5:8f:d2:19:2f:85:7f:db:98:a1:0c:0d:28:17:
a1:a2:cd:f2:a0:55:6d:82:b0:6b:d7:34:81:7d:ca:
b3:10:11:c5:7f:90:49:1b:d5:c7:f8:f7:e4:d0:e4:
92:5e:b5:63:b1:1b:89:d0:f8:31:4b:f5:2f:6c:b8:
80:b3:1e:e9:ea:f0:45:a1:93:36:90:0a:45:70:36:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:09:FC:67:96:6A:B2:9F:11:AC:64:7D:D3:24:34:01:9D:F5:62:9B
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d3:75:01:b0:aa:01:d5:26:3c:49:ed:e0:ac:0a:2b:99:58:
7c:74:c0:4f:00:5e:ac:26:f6:32:e5:01:75:20:78:1f:6a:86:
9c:04:9d:7b:ab:b0:15:05:8e:98:dd:c7:e0:1f:f7:3e:79:6f:
26:73:21:59:96:68:a4:67:05:c0:a1:9f:28:d3:0c:80:bc:03:
14:2b:04:5f:5b:f5:04:bc:da:d4:46:35:9a:8d:a2:31:03:e6:
73:4a:50:a9:c8:03:c2:9b:89:b9:09:42:2c:3a:d8:dd:55:2c:
17:16:88:da:fd:36:8d:97:5f:cf:fe:50:6a:e7:c1:17:fc:15:
8b:0a:2b:28:b4:d6:02:19:2f:73:93:69:cd:f5:4d:ba:96:87:
b8:33:cf:7e:a1:88:f4:7f:f2:00:c5:93:4f:c1:a0:81:25:d7:
b1:e5:88:db:a3:59:7b:e9:98:a0:6d:07:bb:71:fb:12:09:84:
77:6f:78:f3:d8:6a:ac:85:a2:e0:ad:69:4d:4c:df:29:c5:60:
64:c6:70:c1:5d:8b:7f:f0:a0:9b:42:7c:b4:bb:8f:b4:0b:d3:
83:97:91:77:e6:a6:04:18:1c:b4:96:a9:7f:5d:f5:34:0b:fb:
16:01:c5:72:c7:07:04:8e:da:ba:15:21:c3:92:5f:42:15:19:
fd:b1:1b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:25:51 2025 by rpki-client