Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: DRnkO5xSZ8qsp7yKSJZ5m5njhSJgK7BKVSsykkqbMP4=
Subject key identifier: 55:3B:15:2A:6A:6A:44:19:F8:A6:3D:8F:52:D7:9B:12:6B:1C:CB:BF
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 0197B6D77D11B1C4DF79906393AEA3FDEF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 1236
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: r7jRerujHkD+0Utgl950nb/Fixky2SNJh/jc1uF5n2s=)
2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7d:11:b1:c4:df:79:90:63:93:ae:a3:fd:ef:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=553b152a6a6a4419f8a63d8f52d79b126b1ccbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:11:cd:f1:c7:fd:89:81:42:6f:e3:e1:f9:35:
f5:81:29:3b:77:c1:86:3a:e4:37:e5:87:1b:e4:61:
36:f4:2c:26:3b:2a:d0:5d:6e:a4:d5:9f:41:95:24:
18:57:8a:4e:22:6f:a9:95:80:c0:e4:72:6c:6c:86:
e1:ad:b9:31:21:0c:88:9b:6d:af:92:14:dd:bf:6f:
51:19:e3:17:7e:bc:f7:40:44:ec:74:0d:b8:c0:cb:
2d:76:33:18:4c:6b:ea:31:73:f0:a0:c9:d9:d0:ca:
f1:10:a3:f6:d8:f4:e7:c1:ed:59:9e:0f:79:4d:9b:
c9:09:87:38:f5:c7:db:57:87:f6:9c:10:5c:36:aa:
94:e1:39:93:c8:91:3c:65:fe:6f:98:64:f3:ed:0a:
53:8f:61:20:54:4e:c5:44:5a:bb:d1:f0:c2:fd:00:
94:87:a8:67:17:73:e0:cb:e4:4e:bf:7d:55:70:f9:
71:41:1f:b2:ff:66:c4:1e:a2:40:f1:c6:53:67:b9:
d5:a6:bc:ee:11:0a:fd:0d:96:45:9a:2f:75:1b:c7:
c8:b0:f5:3b:6c:8f:97:60:93:d0:ca:00:d3:71:3d:
2f:cb:57:2d:69:b6:d3:48:f3:5c:8e:32:d6:3c:df:
f8:0e:2d:35:66:f5:f2:ea:fd:50:e9:c7:8d:44:c5:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3B:15:2A:6A:6A:44:19:F8:A6:3D:8F:52:D7:9B:12:6B:1C:CB:BF
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fd:9d:1d:f6:a1:e0:c9:10:9e:84:39:6a:c7:ab:aa:0b:03:
0b:c5:0b:70:75:94:2d:91:ec:4e:9b:47:52:97:cc:b0:69:fb:
23:fd:4b:32:3a:42:65:e6:fd:ba:b9:61:c3:41:46:38:6a:69:
2d:2b:d8:b6:db:fe:cb:73:09:b7:77:31:19:7d:29:54:cf:93:
09:a9:73:bc:ba:c8:89:b7:e4:18:b3:a6:ef:c4:e1:ea:a3:63:
10:1a:7c:05:47:db:18:51:e2:b0:c2:6f:bd:d8:ed:ba:96:cd:
f1:0d:93:fd:d2:0c:09:be:40:16:d8:18:95:96:d9:04:f9:95:
a2:de:9e:93:cf:c4:07:35:de:b6:e6:c3:2c:06:66:58:9c:e1:
68:08:b5:23:ff:97:bf:23:b3:95:d0:9b:d6:c6:95:4a:dd:78:
be:bb:f2:2f:7b:f7:3f:fb:eb:b5:0b:2c:47:dc:e3:5e:cd:87:
cc:94:cf:79:9a:81:02:37:b6:cc:0b:2e:57:a7:28:b6:ca:af:
de:4a:19:c1:0b:b6:ba:ef:d1:fc:90:e9:83:98:ac:e1:a6:71:
12:2e:e4:77:c6:37:df:f8:2c:fb:fe:b0:10:8c:66:69:04:96:
97:b8:58:b3:9a:d1:cb:0b:f9:87:e1:e9:c9:df:63:8f:76:9d:
b4:e6:a8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:31 2025 by rpki-client