Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: UlfMe3pXYjQHtPSbCm2A9LqYRg0c5ITg9MzgPlrr0I0=
Subject key identifier: 5B:27:0D:65:F5:02:6E:91:B6:4B:8B:51:2E:00:CA:C7:0B:B4:41:56
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 0197B6A06DB9497B88AEDA5E0A2B71F68B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: QyQS+W3lwiH2uGrjFcRm6hKQcPzubwrcTfbJpeHRw+s=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6d:b9:49:7b:88:ae:da:5e:0a:2b:71:f6:8b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=5b270d65f5026e91b64b8b512e00cac70bb44156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:ef:39:98:f1:5a:60:61:8f:03:e8:94:40:
cb:ce:10:7a:28:02:07:37:74:e9:24:a2:60:81:d2:
50:1d:6d:7f:2b:61:7b:be:da:95:db:67:03:66:f5:
3b:c8:87:ca:a5:95:6e:2e:6b:0f:ae:16:f2:c2:70:
4a:b6:ea:25:5e:65:ca:ba:1f:9b:3f:bf:37:ad:87:
0e:22:bf:eb:c1:3d:08:80:37:77:ee:11:ce:19:86:
0c:bc:bf:48:ac:3f:5f:a7:15:59:ea:97:af:4d:bb:
7e:d2:b4:9b:2c:66:cd:c0:44:45:af:99:d7:48:a0:
69:08:a0:3f:02:1b:b6:d7:48:a4:b6:6b:98:49:d6:
91:d6:7f:46:fa:29:34:bd:7f:d9:30:8b:62:a6:22:
d4:21:7f:5b:43:b1:c3:35:05:8a:cc:50:e5:0f:cb:
0d:4c:94:9d:4b:4d:ee:25:12:b9:cc:07:f5:ce:d7:
c0:ed:14:fd:f5:0a:cb:f7:d5:8f:1f:56:36:10:64:
61:ce:0a:d3:ed:5a:bf:61:fe:93:3f:65:89:28:0d:
a3:aa:38:fc:9c:95:72:73:2c:7b:cf:d9:f2:12:9d:
f2:96:60:82:9d:e5:58:e1:c5:b7:09:ba:4d:7e:48:
2b:40:0b:88:4c:ea:99:c6:de:eb:5f:f2:0e:42:a3:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:0D:65:F5:02:6E:91:B6:4B:8B:51:2E:00:CA:C7:0B:B4:41:56
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3b:ef:07:96:f4:59:6d:a1:ed:30:20:36:a7:ec:71:c9:33:
a1:3e:d8:f3:49:81:75:39:3c:20:1a:45:a7:29:c4:3c:3c:c2:
58:f4:72:10:3a:c4:0a:69:4f:69:d3:d7:aa:8e:f0:71:61:94:
27:ac:24:5c:fd:fa:bd:46:38:6b:16:1b:bd:cd:6e:04:06:28:
91:ff:88:d6:14:cc:c9:93:d4:6c:e0:0a:0c:2b:c3:a8:26:19:
cd:1d:28:e2:3d:13:3c:1d:a4:10:01:18:db:d1:d8:39:c7:99:
7e:0c:f2:38:03:be:af:af:19:42:15:a7:aa:07:00:06:1c:fe:
ea:0d:be:e4:69:fe:bd:da:28:78:63:f5:2e:cf:5c:0d:27:05:
63:b7:2e:c3:8f:a8:dc:dc:4f:ff:0d:5f:12:51:68:d1:b2:f8:
b8:5f:3e:e6:3e:70:9f:d2:f5:2b:18:3b:db:bc:11:14:51:0c:
af:d2:da:8b:7d:17:c4:d7:b4:50:50:3d:13:5e:87:18:47:5e:
b4:3f:ae:53:e4:c7:9e:8c:d8:ab:d4:7c:54:68:92:6b:34:ca:
21:83:5a:3b:55:e7:11:60:dc:ad:50:62:fb:d7:ce:85:9d:63:
7e:7b:d8:e6:12:91:2a:19:25:4d:fc:17:7b:ef:c3:bd:42:25:
12:65:88:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:09 2025 by rpki-client