Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: T/y36r/vszsNlZJ2GPMBCvhdcyqBtbRtUCi1Fkzzrcc=
Subject key identifier: DB:49:34:4F:CC:A7:93:A3:8A:AC:B0:AA:27:1C:47:4A:ED:C3:CC:88
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 0197B6329A1DE197B2F79033F2C6744A5115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 1276
Signing time: Sat 28 Jun 2025 11:00:58 +0000
Manifest this update: Sat 28 Jun 2025 11:00:58 +0000
Manifest next update: Sun 29 Jun 2025 11:00:58 +0000
Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: EshGXMDmYEAdl/qXYTcSGEreShOaDsV8NC56tretb8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:9a:1d:e1:97:b2:f7:90:33:f2:c6:74:4a:51:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Jun 28 11:00:58 2025 GMT
Not After : Jun 29 11:00:58 2025 GMT
Subject: CN=db49344fcca793a38aacb0aa271c474aedc3cc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:3c:c8:33:55:0f:68:73:ee:f4:44:88:6c:
11:2f:d0:72:1a:d3:6a:67:e4:eb:dd:d8:39:39:66:
28:d9:cb:e2:b1:6a:fb:3a:91:fa:34:b8:35:0b:f3:
f8:80:50:4d:73:4e:b7:96:96:25:44:60:23:30:d5:
3c:8d:00:ef:87:58:76:17:6c:ae:f4:aa:57:7a:a8:
0c:1e:67:e5:53:94:69:67:25:29:12:45:4e:6a:84:
99:2c:d4:3f:3c:be:4c:81:a0:8c:b3:f5:7a:8b:f7:
ee:84:53:a0:d1:81:4b:e8:a2:9b:02:72:d9:b8:b4:
9f:6f:a9:24:3e:9e:d3:5e:49:44:3d:4a:74:2a:97:
87:72:09:80:bf:75:40:a1:22:dd:78:4e:da:c7:d4:
c5:dc:c1:a8:f5:90:76:ab:2b:66:5a:5f:8e:52:b5:
3d:49:05:f7:ef:ca:16:37:91:9b:57:65:5c:8e:df:
e3:18:ed:5f:c5:08:c4:9c:99:88:d3:27:2e:6a:83:
49:d1:42:2f:c4:21:a4:66:c7:42:71:39:2a:6a:bf:
6f:99:43:56:71:e9:7f:95:ac:a2:2a:2b:21:35:77:
f4:5d:46:71:f0:a1:8f:5b:30:27:f5:34:f5:af:6f:
74:74:be:f5:02:a8:c2:5e:51:d3:4b:a9:35:5e:85:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:49:34:4F:CC:A7:93:A3:8A:AC:B0:AA:27:1C:47:4A:ED:C3:CC:88
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:92:13:a2:02:50:5d:5d:a3:da:0b:d5:cf:68:9d:a4:c1:63:
f7:c6:dc:b0:8c:51:46:95:31:88:f0:70:93:51:87:5b:29:e4:
43:b2:b6:81:3b:a5:73:d5:9a:05:16:8c:75:85:43:f4:bf:94:
90:e9:27:18:8e:b2:f0:e4:f7:3d:14:5b:8c:88:60:72:14:2a:
ed:4a:83:9f:ed:9e:23:07:ed:c2:c0:73:d3:e9:20:4f:8b:02:
af:c1:c2:f7:6f:f8:54:1f:40:93:4f:92:9e:50:e4:d2:1b:53:
2e:7e:55:77:c0:a0:0a:c0:62:55:a8:62:86:d8:9c:5d:85:cf:
1f:dc:c5:b8:60:65:aa:d0:fc:48:f1:58:e2:30:e5:bd:ca:0e:
fa:c8:e3:a4:75:82:92:0a:46:33:1c:86:27:82:15:3e:06:41:
46:0e:60:d1:5c:9e:af:63:63:62:81:70:52:ea:55:d7:2e:5c:
3a:43:22:8e:f8:98:57:47:1e:1d:6b:24:65:10:ff:41:73:15:
f4:99:54:94:58:19:81:41:9c:81:4e:5e:a8:35:d8:3e:e1:54:
d2:87:b6:68:87:70:38:85:cd:bf:df:62:2f:f9:80:ff:b0:44:
68:a5:21:9a:17:45:71:43:a7:02:8b:4f:36:f7:25:2e:c6:eb:
3e:c8:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:33 2025 by rpki-client