Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier: 9qMqF6uvWZ78iQKstQkVT8KAX+mrV2wzJtXumjYUmRc=
Subject key identifier: D4:F0:30:0D:63:BA:7C:E5:8B:73:B8:46:0E:25:61:FB:26:4A:AF:90
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial: 0197B6A05A3F30D0DF8BD9027E029BBBAC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number: 06BD
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: Kukv8lguLlqo8syva8to6ZRKCQQ.roa (hash: 6TsYNWvLqQDFoSOz1kHCV3IHIsfRZkDxe8fDivBN+2k=)
2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: BZLipdvJ0JeFBG88twpNXxbxH2Jb0Gk86I0tqd9TEKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5a:3f:30:d0:df:8b:d9:02:7e:02:9b:bb:ac:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=d4f0300d63ba7ce58b73b8460e2561fb264aaf90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:a0:6c:29:e4:de:8f:e0:fb:35:ef:c0:35:
09:3d:4c:0d:25:66:8a:eb:e8:5f:3f:b1:9f:c2:2d:
20:d1:e3:91:78:49:41:25:f1:9e:db:68:f8:a8:40:
e7:23:f2:ac:00:e1:09:22:88:c0:c1:07:71:bf:f4:
73:29:e4:ef:63:eb:39:9b:da:86:1e:aa:f9:a1:47:
2a:7a:b7:6e:34:53:e7:9f:dc:14:d1:2c:e5:bf:5b:
82:b4:07:0a:d3:a6:0d:7b:69:b4:67:b8:fe:2d:6f:
c9:03:f7:b4:7f:43:1c:7c:f1:b6:a9:ae:c2:19:ca:
06:48:51:bc:93:ac:92:4d:cc:c0:5c:3f:7d:4f:b3:
68:6d:5c:72:b9:79:81:28:35:fb:8e:d7:37:85:0e:
17:44:5e:08:55:7f:99:e6:b0:ee:94:76:d1:41:cc:
eb:e6:33:a1:16:42:94:0c:38:82:66:79:7b:61:98:
99:a1:94:9d:ce:9c:30:be:80:9f:69:d8:ec:1f:68:
7d:94:fe:3a:0a:cf:00:b1:8e:6c:74:dc:f8:f8:f5:
86:e4:a2:1d:19:11:3c:f5:d7:ef:3b:53:65:e2:a0:
89:9a:94:8b:a3:f1:87:fe:f8:4a:e8:4a:16:21:1e:
1c:d9:8d:f6:7c:3c:73:b6:60:63:b3:2e:9c:dc:b1:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F0:30:0D:63:BA:7C:E5:8B:73:B8:46:0E:25:61:FB:26:4A:AF:90
X509v3 Authority Key Identifier:
keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:94:1d:d7:52:8c:51:71:56:92:58:5f:27:6a:93:de:4a:
21:2e:e3:8f:6f:b6:e8:0a:46:ee:9b:ac:b5:fd:52:af:56:f9:
5e:26:63:2a:da:70:c9:33:85:3d:96:b6:2c:c9:1e:37:39:2b:
3b:eb:00:4d:24:6d:36:35:ef:a7:b2:b5:cf:99:cc:fb:ae:82:
5a:3d:10:af:7d:dd:de:b0:94:32:eb:49:88:04:60:4c:25:85:
66:58:b8:97:db:55:e8:a3:c7:d7:29:71:33:75:40:f1:0e:5a:
19:b4:2d:08:9d:f1:80:53:83:11:b0:d9:71:bd:28:08:d4:6d:
22:77:c3:72:5a:fb:72:16:c3:e9:ed:cd:87:6d:9d:33:46:f9:
ac:94:9c:8b:52:1a:6b:e6:e4:c0:03:59:e3:0e:51:9e:da:2c:
a5:c9:d3:28:42:c3:da:eb:19:c5:26:9f:6c:1d:3c:15:a4:84:
b3:f6:14:86:44:09:06:f2:f1:8f:59:88:0c:42:f8:84:81:29:
be:25:43:ea:5e:69:52:14:b7:9c:83:b4:74:8d:74:43:9d:4e:
e2:5a:89:20:f2:a6:53:e4:40:10:d2:b1:ea:6b:54:bf:58:31:
4a:30:a0:0c:c9:9c:d4:49:f0:54:e8:ed:56:62:1c:4a:72:44:
e4:1a:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:41 2025 by rpki-client