Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: aDNrlyUx73hkiSn1sYw2/tkvfcaKhb6vionRWpuS/h8=
Subject key identifier: 43:31:25:DE:D3:26:6E:22:14:C0:63:F3:F4:43:15:61:E2:6B:04:56
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 0197B8211385B5B82C4B6F0304E535D0C034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 0D45
Signing time: Sat 28 Jun 2025 20:01:04 +0000
Manifest this update: Sat 28 Jun 2025 20:01:04 +0000
Manifest next update: Sun 29 Jun 2025 20:01:04 +0000
Files and hashes: 1: XsLpmpu2xvBP4JjcplMw-4A56mY.roa (hash: zDQ4NxbIV24C02r59jK+8GO4r9TIoUq4yC6lv1rRxf0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: DwlZHixGbAzLDOuQaNsPxuZZTuh9S+JvCJ4HKPWabRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:13:85:b5:b8:2c:4b:6f:03:04:e5:35:d0:c0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Jun 28 20:01:04 2025 GMT
Not After : Jun 29 20:01:04 2025 GMT
Subject: CN=433125ded3266e2214c063f3f4431561e26b0456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:31:9d:1e:a1:42:c4:6f:da:4a:d0:bc:c6:
78:d1:33:59:ed:ff:9c:c2:00:b1:55:32:6a:5c:bf:
a0:e0:89:0b:ae:e5:5b:d3:e4:18:3b:bb:98:b4:56:
ac:7e:9e:08:1e:68:45:51:7f:f3:c4:fc:3c:9b:5e:
9f:c8:52:a9:7d:69:05:46:c8:88:09:96:ac:e6:7d:
b2:cb:f6:c4:a1:25:db:d6:86:a2:f6:f4:08:f5:b9:
ba:c9:12:98:5c:2a:73:a8:24:6a:e1:1c:2c:21:97:
c8:d5:8d:fa:c7:9f:cd:97:b0:69:90:b1:90:84:58:
4c:e6:f7:46:ef:73:60:83:70:9a:13:f8:83:43:d8:
21:8b:73:7b:50:7c:da:e5:ec:20:52:a6:08:32:0e:
6d:29:fa:5a:a6:09:63:28:47:f0:2f:24:a1:0e:12:
6a:0a:5c:f3:e8:a1:79:e1:ca:e2:38:41:ce:46:f2:
8c:ff:c2:19:e2:8c:69:0e:6f:04:e4:0b:b9:17:b1:
07:43:e6:cb:2a:44:07:c4:e6:4a:66:3a:85:1a:f6:
b7:ef:e9:b0:fc:ea:e8:58:1d:0d:0b:05:73:8b:2c:
b9:bc:b4:38:d6:c5:bb:9d:87:19:fc:a6:e4:72:16:
14:37:7d:b6:e9:b2:dd:a2:55:70:fa:03:e5:6f:36:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:31:25:DE:D3:26:6E:22:14:C0:63:F3:F4:43:15:61:E2:6B:04:56
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4d:89:2c:3c:d8:29:5e:89:2a:6a:19:10:65:2d:d4:68:73:
9b:55:3e:e5:f0:a8:53:08:48:f9:4a:69:69:2e:99:0a:55:93:
65:8f:02:d9:39:2b:b5:bc:76:a5:b6:96:15:32:40:ce:c0:d8:
24:31:16:ce:c0:82:86:97:90:3a:e5:40:aa:b3:ff:6b:9e:62:
f1:56:1b:05:21:f1:9f:eb:62:5b:ed:e5:f7:3e:50:e8:5a:3a:
8b:15:bc:0e:71:39:21:9a:23:b5:cc:ed:57:da:3b:28:43:ec:
e9:40:2a:59:77:e5:0f:25:0c:f7:dd:3c:62:45:47:27:33:4e:
04:7a:b7:d4:0f:23:c7:c9:6b:bd:e3:13:e2:7b:b9:8b:aa:2e:
29:b7:95:f2:02:0b:d8:d7:22:4b:f8:f3:d9:79:31:80:34:ca:
b3:b8:38:af:8c:9f:78:cc:ba:9d:15:73:46:56:b4:46:65:d4:
46:c1:7e:5d:19:38:38:61:5c:9f:9b:23:61:65:44:85:a6:82:
54:d7:b0:78:a7:ef:5c:01:c1:fd:61:26:a8:8c:e6:a8:e2:bd:
82:70:29:9d:27:b8:ee:ca:99:b5:78:69:6f:e5:c9:a9:f8:9c:
1a:3f:15:68:3e:dc:a2:57:97:a0:06:6c:b1:03:94:01:e3:9f:
98:de:5f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:57 2025 by rpki-client