Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: xBr49kgl8WPx8mo47p9Lp5pVNSIytw6k3IM/ylCM9wA=
Subject key identifier: 71:A9:A3:F9:CA:79:96:25:2B:E7:1F:47:EB:F2:FB:BF:C0:C3:07:50
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 0198469B59B390F3CCC3119A3FF3E716B734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 06C1
Signing time: Sat 26 Jul 2025 12:00:42 +0000
Manifest this update: Sat 26 Jul 2025 12:00:42 +0000
Manifest next update: Sun 27 Jul 2025 12:00:42 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: sDCroJiYtuiNkIeIR0u0mzPzTQOdko9hS4LtBtnxi3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:59:b3:90:f3:cc:c3:11:9a:3f:f3:e7:16:b7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Jul 26 12:00:42 2025 GMT
Not After : Jul 27 12:00:42 2025 GMT
Subject: CN=71a9a3f9ca7996252be71f47ebf2fbbfc0c30750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:68:d5:8d:de:52:af:a0:a2:7a:bf:97:93:
3e:c9:9f:a3:e5:3d:87:a2:f5:a3:8e:1d:cc:4b:fe:
88:b7:9e:89:83:b7:b1:85:a3:b3:e2:8c:a5:50:f2:
71:fb:24:cc:67:98:4f:18:ad:2c:12:9d:62:1d:40:
69:76:6c:9a:fb:9d:56:87:b0:4a:f1:37:0a:68:cc:
5f:bf:fe:7a:02:26:7b:af:78:50:e6:9c:b8:41:d7:
09:04:87:db:f1:3c:d7:a0:8a:8e:2d:8f:07:88:49:
34:94:78:64:36:12:c9:8c:f0:f5:80:f4:13:8c:05:
ba:66:e4:d3:cf:73:0f:c6:d4:a7:3f:5b:38:90:36:
29:93:12:4e:bf:fc:95:17:bf:3c:78:60:49:37:b0:
50:e2:86:e4:92:be:a6:af:52:56:6c:0c:fa:96:e9:
58:61:2e:a5:23:05:e4:c3:c5:35:2c:ba:01:75:98:
c9:40:6c:05:fb:14:ec:76:b8:37:97:36:d2:ca:a8:
4b:39:c7:d2:e6:43:b4:9f:7c:d4:ce:f4:06:5e:da:
ec:01:2f:2d:c9:d0:c9:73:b7:ed:40:bf:a0:b2:09:
c8:13:c8:ae:5e:ab:67:f0:82:e9:d3:77:f9:58:7b:
27:4a:ad:61:55:99:aa:5c:29:d4:be:f0:56:0e:fa:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A9:A3:F9:CA:79:96:25:2B:E7:1F:47:EB:F2:FB:BF:C0:C3:07:50
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:53:0f:66:9f:13:3f:4f:cd:90:e2:41:a7:1f:6c:e2:2b:a8:
0d:db:d5:7e:85:ab:e7:b0:a2:e5:40:d7:ee:88:c7:d4:bc:f4:
98:b6:60:61:ad:56:f7:41:62:e3:ef:95:f2:16:27:05:eb:74:
a0:00:5c:57:0a:25:c7:b9:0e:6b:7c:56:e9:22:4d:70:48:55:
8c:3b:62:da:45:7c:d7:b9:d6:d0:22:f0:14:94:56:17:37:2c:
cb:c5:93:d9:ba:89:b7:d8:7f:7f:4f:46:93:e0:a1:70:cf:03:
be:95:3d:4e:41:21:76:a7:e1:c1:31:1e:b0:0a:08:01:cb:15:
49:ee:63:e5:94:ea:f9:a8:db:3b:2e:74:a3:55:86:c7:43:87:
be:ba:6f:95:fe:5a:be:bb:f0:43:9a:56:1a:b6:54:93:c9:73:
47:e2:30:54:c9:8b:bf:ca:8f:49:68:7f:c7:4f:11:ac:ca:fe:
45:33:c8:16:aa:21:33:86:4a:a3:11:27:e8:24:90:be:8c:3b:
f3:d9:1e:fc:b9:45:b3:05:f3:1d:48:4e:27:5a:f6:0a:cf:db:
e9:ce:70:78:b1:ed:d3:72:bb:e5:96:64:0c:ee:9b:2a:b5:a4:
31:13:92:37:11:ba:e8:8c:79:13:16:93:fe:a9:ea:2c:bc:13:
ad:24:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:47:43 2025 by rpki-client