Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: lZFJCyq6uDcPxdjU2ji7wBhem52TEqVq0KzAEtePxC8=
Subject key identifier: 63:DA:E9:D3:B3:34:41:8B:75:69:76:2A:0B:41:BE:9F:9F:34:8C:04
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 0197B6329668A489B2311087CD60AD5B4EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 0500
Signing time: Sat 28 Jun 2025 11:00:57 +0000
Manifest this update: Sat 28 Jun 2025 11:00:57 +0000
Manifest next update: Sun 29 Jun 2025 11:00:57 +0000
Files and hashes: 1: CZfj574ArDtJlgW2YQicypkXsXg.roa (hash: N05YSWHFpJvI1wd5d/zN3+j2iXKRF4AnTjnzlab5tTQ=)
2: S0bRpdJWK72QH0WUGiObKU-szZo.roa (hash: nahgUHhIrdKyE1HO3U29HHKRqVvxXNA6pcRe9FHTMjw=)
3: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: 1sq42jMmGm33Cr4nW96122Vxr7pAVnsF9jV/Ltx2zH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:96:68:a4:89:b2:31:10:87:cd:60:ad:5b:4e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Jun 28 11:00:57 2025 GMT
Not After : Jun 29 11:00:57 2025 GMT
Subject: CN=63dae9d3b334418b7569762a0b41be9f9f348c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8b:87:3b:d5:7b:a5:0e:24:c2:01:ae:33:ae:
85:89:c5:8b:7a:bd:b6:7c:45:29:ea:16:69:bd:cb:
64:f5:86:a5:fd:c2:74:25:f5:18:1e:49:c6:3b:d8:
0a:81:6e:45:46:dc:27:5b:40:0c:09:01:31:03:9e:
4a:b5:1e:3b:48:5f:00:c9:50:77:5f:62:c7:d1:5a:
de:00:48:9c:23:60:69:86:80:5f:e2:c6:32:24:c7:
f5:24:58:9f:cd:54:fe:e7:4e:c3:61:41:41:b3:3a:
c1:33:a4:fa:02:06:2a:a9:eb:b2:cd:3d:bd:bc:5b:
b0:2a:fc:38:60:ef:4c:d9:e2:15:13:32:c2:5c:97:
92:d3:cb:85:09:a6:28:45:13:09:aa:98:d6:c6:c6:
57:af:f2:ff:cd:ec:76:01:a3:dd:5e:da:ae:c6:cb:
7c:33:8a:53:56:50:07:75:15:ac:2c:64:e4:f7:8d:
47:26:bc:27:4c:9e:1c:ca:cb:39:dc:12:a4:08:ef:
4e:53:5a:28:3d:b4:31:4d:61:50:53:7d:2c:5a:53:
a6:9e:7a:4d:43:cc:70:8c:b6:18:0b:4d:70:56:85:
5e:68:af:0b:16:88:48:bc:69:61:37:47:47:99:26:
11:09:14:2b:64:be:5e:2f:b0:dc:eb:ce:52:33:bb:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DA:E9:D3:B3:34:41:8B:75:69:76:2A:0B:41:BE:9F:9F:34:8C:04
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:06:1d:6d:f4:87:ed:5d:70:8a:84:5c:e5:76:62:1b:9c:
24:fb:96:86:83:c3:5a:88:11:d3:a9:77:bd:82:ab:b4:09:6b:
30:2e:d7:1a:c6:77:7f:1e:a5:52:ec:e7:7c:2e:1e:8d:4c:79:
6a:4d:d7:80:c1:4a:de:04:7e:b1:fd:da:c5:5a:46:cf:e1:d7:
ab:76:02:7f:85:56:79:fa:1b:45:c0:14:9c:59:34:19:4a:b9:
4a:b5:a3:52:04:f9:6f:74:7d:22:a0:0a:0d:e6:da:88:69:e5:
ef:ff:f1:70:ca:9d:ef:fa:ff:eb:e5:75:51:d1:da:b7:3f:2c:
4f:66:62:fb:5f:7b:ac:41:ff:d6:24:99:cc:9b:0d:2c:16:34:
36:a6:67:8d:bb:c9:1a:8d:16:72:23:86:26:08:38:17:3a:9b:
8b:96:62:6d:ad:f1:35:a3:24:90:6d:4a:6a:e3:7c:af:8b:5d:
4c:d7:34:3e:8a:df:85:ab:95:28:bd:1a:14:b6:f4:de:00:03:
b2:98:97:b1:3f:b7:a4:b2:4b:b9:60:8d:58:03:90:21:b6:17:
97:32:1f:01:7c:9e:c2:08:e7:af:3e:3a:c2:54:4f:ec:1f:87:
cf:74:b4:df:d0:a0:5b:68:d0:a4:3b:64:61:8a:05:c8:2d:a9:
b3:5a:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:33 2025 by rpki-client