Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: bVwwPL/zD/WMDzg10lMl06jAOxMsPP++B67lT60/58w=
Subject key identifier: 61:BB:51:6A:17:65:B2:53:43:E9:E5:D6:2F:43:3A:EB:25:8B:14:D0
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 0197B88FA4C72D962E65A18A51DB6A44CBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 118D
Signing time: Sat 28 Jun 2025 22:01:50 +0000
Manifest this update: Sat 28 Jun 2025 22:01:50 +0000
Manifest next update: Sun 29 Jun 2025 22:01:50 +0000
Files and hashes: 1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=)
2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: zsKM/V79OdJaYPtXKcH5wQmNywmqxTE/GRsz5O5VOmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:a4:c7:2d:96:2e:65:a1:8a:51:db:6a:44:cb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Jun 28 22:01:50 2025 GMT
Not After : Jun 29 22:01:50 2025 GMT
Subject: CN=61bb516a1765b25343e9e5d62f433aeb258b14d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:80:67:30:d1:c2:0e:c6:45:73:8a:b4:5e:
1b:6a:29:d7:08:ed:62:95:32:5f:92:90:71:d1:95:
b0:96:ef:d9:ca:69:d5:51:b0:7d:9a:1b:b1:3a:d3:
d5:2c:96:74:12:bd:de:16:e6:8a:26:6b:b9:66:82:
73:ff:bd:27:77:89:70:a1:f4:51:e9:f6:96:80:0a:
7c:68:b4:09:77:94:f8:9e:d7:08:02:c4:07:7c:f3:
4a:d3:d2:91:e9:82:3c:fe:63:9a:b9:9e:ef:69:d3:
53:57:e1:6e:39:c2:e8:69:af:05:22:01:6a:3a:5f:
03:3a:23:74:52:a2:af:98:86:b3:94:db:db:d1:8f:
d7:eb:da:28:68:95:27:1c:35:ff:c5:d6:90:70:a5:
e3:16:bc:10:d1:ad:ca:15:66:e7:84:ef:fa:51:c4:
a7:cb:b0:b7:a8:a6:65:6d:ba:27:51:dd:76:05:21:
a2:56:af:f6:0e:16:01:fc:b6:ba:cc:63:ca:93:cb:
dc:37:10:60:93:56:b8:55:55:79:a8:3a:62:d6:52:
c1:c2:46:8b:16:15:e4:a5:19:75:8c:d1:97:0c:d6:
48:c4:26:78:12:b7:42:09:bd:09:d1:21:83:bf:85:
06:5c:5c:bc:7c:06:99:00:0e:26:b5:34:80:5c:c8:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:51:6A:17:65:B2:53:43:E9:E5:D6:2F:43:3A:EB:25:8B:14:D0
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:40:97:b7:2e:ad:3b:fe:a9:23:93:54:f4:43:fa:cf:4d:fc:
b5:e4:35:86:5a:18:17:5d:7f:a0:76:7c:7b:24:d8:66:60:a2:
c7:f3:74:62:f6:c0:5e:77:e6:a0:1d:75:2c:ac:1f:7a:24:58:
02:23:65:7f:e9:fb:93:d8:8e:e8:57:97:11:1e:b2:6c:ad:d8:
11:63:93:6c:0a:9f:ec:02:9a:45:73:83:89:15:87:09:3c:03:
00:6a:a4:2f:d6:57:40:aa:df:24:c7:dc:42:f7:ee:ce:a1:92:
60:26:e4:5c:2c:81:ad:cb:12:a4:46:ac:bf:df:93:4c:61:7c:
ad:c2:b5:81:7c:98:9f:00:39:e3:18:d1:9a:58:20:3d:79:ed:
69:a9:87:14:06:b4:fb:04:cb:2b:c8:b8:07:be:5a:26:ca:6e:
f3:37:cc:a3:07:d3:93:02:e6:05:48:57:62:16:70:18:aa:c9:
79:df:c1:fd:27:0a:32:68:c8:43:fd:da:fa:cf:e3:f7:63:8c:
5f:d9:c0:2b:e0:34:b7:e7:e4:98:e8:6a:25:26:b1:e7:50:f8:
ea:cc:18:10:75:9e:51:88:38:c8:39:56:40:90:9a:25:4c:af:
60:f6:7d:dd:bf:f0:cc:96:ee:0b:22:15:45:a1:a3:79:5f:8f:
8d:6e:bc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:19:09 2025 by rpki-client