Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier: dM4o8EbqduazJjOg4UyWQdAYmP+8HBawh82ly3dFVr4=
Subject key identifier: F2:66:1F:E9:4C:59:C0:C0:B4:62:51:0C:BB:40:03:51:0B:9D:02:E3
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 0197B77C9E5A904D1B388DA6F414630AE571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:26 +0000
Manifest this update: Sat 28 Jun 2025 17:01:26 +0000
Manifest next update: Sun 29 Jun 2025 17:01:26 +0000
Files and hashes: 1: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: MAPS6ogUgVXwLU9w2ZzrKTtL7LCO9FPYN79Voo48Oxw=)
2: apB7016k1B8Xf8viYBYRSP8KhJw.roa (hash: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9e:5a:90:4d:1b:38:8d:a6:f4:14:63:0a:e5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: Jun 28 17:01:26 2025 GMT
Not After : Jun 29 17:01:26 2025 GMT
Subject: CN=f2661fe94c59c0c0b462510cbb4003510b9d02e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:6e:de:6f:62:98:cf:83:97:a7:6c:8d:f5:
b1:fd:f2:87:ec:ff:29:0c:da:b4:ea:12:6a:0d:75:
ec:47:ea:43:4b:97:5b:0d:79:5d:1e:ed:bc:e6:71:
0e:36:a1:46:ed:19:63:e5:2f:eb:f0:08:f4:69:6e:
9c:ef:7f:38:30:8d:66:31:93:cd:bb:16:37:e1:e8:
9d:bb:81:dd:fd:ed:93:8b:f9:7e:fd:c2:2d:fc:a9:
d5:9a:0d:d0:be:6f:1c:71:e2:86:17:df:5c:67:a3:
ed:ba:94:61:1b:71:09:ea:d4:63:bf:bd:e1:60:fd:
4f:d0:15:91:da:7a:89:42:a2:8a:db:ae:77:75:d4:
63:35:1e:ae:8f:41:9a:48:a2:f1:8f:18:fa:6a:95:
1e:ca:2a:87:8a:d4:a1:59:b3:63:a5:a7:7a:98:0b:
1d:25:57:8a:33:5a:d3:9d:f9:63:f0:4b:b3:9d:0c:
ac:6d:f5:c2:45:02:87:28:5f:82:1c:d4:a7:b9:ac:
58:fe:ac:67:93:89:f8:b9:1e:0a:f3:11:bd:33:9a:
a4:9b:09:87:d5:18:d6:7b:f1:65:46:98:05:bc:41:
2f:24:56:b7:c3:f0:72:ea:5e:12:75:a7:7f:41:4b:
25:08:f9:bb:57:34:25:27:b8:ac:05:1c:93:26:4a:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:1F:E9:4C:59:C0:C0:B4:62:51:0C:BB:40:03:51:0B:9D:02:E3
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fd:d2:4a:fe:c2:0c:65:42:05:17:29:fe:b1:17:0d:73:c6:
4b:f4:56:1f:73:32:a2:fb:21:d5:5a:35:59:4d:36:71:64:ef:
f4:61:f8:26:9f:28:ea:52:20:d5:8d:4b:74:09:e7:a1:0b:60:
1b:77:d2:08:b7:da:75:d1:25:30:cf:19:84:9d:f8:cd:eb:65:
0f:c7:1a:9b:78:e7:c9:fb:6b:4a:38:38:4e:cc:a5:38:a5:4d:
12:8c:f4:5d:06:a2:2d:5f:1d:dd:6a:60:05:47:be:85:93:3c:
53:38:da:43:d9:16:76:22:9c:18:35:87:41:b8:f8:c3:ee:13:
da:7e:81:31:39:00:bb:b3:6f:a6:d4:33:bb:02:6b:80:fb:f4:
f8:3b:4d:c7:12:39:19:2c:e4:00:d2:21:ba:48:d3:51:04:1b:
00:30:67:50:4a:be:dd:9a:b5:ef:ff:c1:15:57:e4:23:ca:dc:
90:6f:c8:56:64:10:ca:df:c9:de:d5:07:fb:6c:f2:7d:82:72:
1e:7d:bc:7d:8b:50:f2:80:c1:d5:86:c0:42:1c:0f:c7:ae:c7:
8d:ba:06:06:d9:99:c5:92:23:23:5d:fc:61:fd:54:ac:c3:8d:
b8:6f:d9:1f:f8:56:3d:fb:ad:dd:b4:e2:b2:67:ac:b4:09:ec:
bf:8f:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:31 2025 by rpki-client