Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: VgI78xGzgKiOmqnarsqTKS97E2Uq76XF9rjyhn9wiro=
Subject key identifier: 4F:E3:4A:E4:B4:BC:90:2B:5F:AC:D5:7D:41:E1:9A:90:E8:C4:7F:66
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 0198518CC84DE0FF505B589EA7078C28CF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 15:00:37 +0000
Manifest this update: Mon 28 Jul 2025 15:00:37 +0000
Manifest next update: Tue 29 Jul 2025 15:00:37 +0000
Files and hashes: 1: X75BC-oQSIZ_Eow4PmOQdnEFFSA.roa (hash: 9fCRye0I7SNN/gpC5nOojc7Nk1BoVgXxf8JAD5uwXBE=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: UpuRLkG66JC5pcKiUkwz3H8m4f12LPYUpB6+Vjmb8yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:c8:4d:e0:ff:50:5b:58:9e:a7:07:8c:28:cf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Jul 28 15:00:37 2025 GMT
Not After : Jul 29 15:00:37 2025 GMT
Subject: CN=4fe34ae4b4bc902b5facd57d41e19a90e8c47f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:a6:7c:47:79:38:4f:40:02:b8:c4:ec:40:
1c:cd:78:99:49:23:db:89:d7:48:b2:4d:ab:0c:d6:
49:04:d0:ca:b0:ab:9f:fd:ee:68:45:79:40:dd:86:
05:23:e8:22:b5:cf:c4:ee:a7:8d:69:83:45:f2:e9:
a5:55:c8:a9:fe:f7:58:98:e5:80:d8:41:86:ca:df:
15:e4:a5:1d:ce:4d:29:8b:77:40:ac:a9:27:10:e4:
ea:cc:91:43:9d:c9:68:34:27:53:96:9f:a0:3c:2c:
5c:3a:a7:40:8b:b1:ad:0d:08:29:74:b2:d4:8a:1d:
f8:c5:a2:cd:85:02:f4:95:e9:8f:db:49:89:bc:96:
a0:05:07:ac:fb:81:78:38:c8:6e:04:63:4b:cd:c5:
11:b2:64:33:03:de:1f:98:45:1a:fe:cd:78:ce:e5:
8f:c2:40:02:72:90:b7:94:f5:9e:72:1e:cb:c3:42:
5e:34:cd:55:13:e5:2e:14:54:ce:6c:03:45:e0:2a:
0b:9e:58:0e:24:69:a2:cc:ae:aa:c1:32:a3:2c:d7:
29:1a:02:d0:f8:3c:05:aa:f7:48:25:a4:aa:a8:1d:
d8:cd:65:8a:30:4b:02:b0:0d:1d:60:43:e9:1a:27:
db:c6:00:dc:6d:98:d5:51:16:55:7f:57:a2:32:c7:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E3:4A:E4:B4:BC:90:2B:5F:AC:D5:7D:41:E1:9A:90:E8:C4:7F:66
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e9:9c:b6:3b:42:cd:cd:60:31:dc:64:bd:f2:fe:11:f6:50:
00:93:99:03:dc:56:4b:f5:09:44:f1:e2:73:34:cd:44:b6:13:
4f:65:4c:4b:6a:4a:34:bf:83:d0:d9:71:5b:82:1c:6e:c7:d9:
62:aa:da:97:7e:6e:92:d9:ae:12:83:3b:58:07:06:7c:23:e9:
60:e4:fc:8a:fa:b5:f3:9a:57:99:6b:cd:4f:56:d8:ed:94:14:
ab:86:4b:d1:61:8a:c2:1e:b9:c7:de:5b:d6:6c:7f:20:1c:39:
13:1d:71:ed:3a:87:da:3f:2a:b3:ea:f6:e9:93:bc:4a:0e:dc:
24:b0:54:18:2b:a1:0f:1c:82:23:4f:97:c5:98:76:31:d2:19:
af:19:e6:aa:e4:15:3b:9b:88:0a:0d:09:4c:6d:90:43:5c:ab:
ca:05:7f:01:49:94:5c:74:55:48:80:8c:96:2e:87:c5:76:e9:
1d:66:d9:d4:51:08:b3:70:3a:c5:ad:1b:36:21:77:a0:b9:5f:
05:cc:7c:21:bb:99:b7:11:02:a7:32:08:a1:1a:68:ec:89:68:
7e:d8:e8:1f:53:5f:0c:dd:b0:1d:59:12:06:af:2e:c4:e1:2e:
c1:8d:4e:25:8d:72:b6:91:04:65:2d:9b:b0:e8:ca:49:9d:40:
80:c2:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:30:52 2025 by rpki-client