Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: BYHsqQRLoGaKr5TvOWS7v1MnxkUxDy5ivatMA+CqLmU=
Subject key identifier: C3:43:96:D3:BB:66:40:F2:2C:AA:A3:B7:F8:A2:92:CF:01:B5:0E:B5
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 01974AE87A29C4432E45FD84EDE488E4926C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:39 +0000
Manifest this update: Sat 07 Jun 2025 15:00:39 +0000
Manifest next update: Sun 08 Jun 2025 15:00:39 +0000
Files and hashes: 1: X75BC-oQSIZ_Eow4PmOQdnEFFSA.roa (hash: 9fCRye0I7SNN/gpC5nOojc7Nk1BoVgXxf8JAD5uwXBE=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: zJo/QMEDVr7YFSRoTlMJMrvKqW2HhI9Y19SbJIwSRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:7a:29:c4:43:2e:45:fd:84:ed:e4:88:e4:92:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Jun 7 15:00:39 2025 GMT
Not After : Jun 8 15:00:39 2025 GMT
Subject: CN=c34396d3bb6640f22caaa3b7f8a292cf01b50eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:14:69:89:a4:9c:d5:18:0b:21:a9:80:6f:
07:4f:54:ab:1a:6c:b4:00:a3:f9:83:68:66:10:8c:
dd:6d:b2:fc:75:49:88:81:98:ef:10:61:60:cc:f2:
2c:39:1a:97:43:39:65:90:b0:31:dc:6b:79:0b:d1:
25:32:e8:83:1e:71:e7:ba:3d:79:fe:b6:d0:6d:e9:
91:29:02:34:b5:97:7c:ae:ed:d2:22:79:4b:5f:cf:
bf:93:19:c0:13:2e:14:e5:7b:0c:e0:28:a2:10:eb:
dd:bc:4e:5d:0b:2c:76:5e:92:c5:79:67:fe:ac:c3:
a4:5b:99:fe:3c:36:49:df:2d:79:5c:34:25:02:33:
b3:dc:25:9d:1d:0c:38:44:b9:2c:5e:95:59:ce:1c:
34:78:8b:2a:77:eb:c3:47:75:f7:fb:2f:f6:dd:53:
94:61:ec:59:80:23:05:f0:30:00:a4:5f:a3:d0:9a:
4a:a4:4e:8f:f9:8f:1a:e2:45:3b:0e:b1:cd:af:f3:
43:06:6a:00:29:29:57:8e:be:fe:87:51:02:a9:44:
87:82:39:e0:62:7f:4c:cc:36:a2:d4:b6:df:3d:57:
24:b9:d2:90:63:ae:c3:86:ed:14:e3:0b:af:91:65:
df:18:e0:9b:98:c3:84:0a:87:74:e8:7a:b3:80:62:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:43:96:D3:BB:66:40:F2:2C:AA:A3:B7:F8:A2:92:CF:01:B5:0E:B5
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:92:5b:74:c7:83:e5:62:84:9c:bf:32:11:9c:f2:bb:54:55:
d8:ed:4a:c3:e8:ea:60:3c:95:e6:5a:bc:50:0a:17:db:46:c7:
8a:44:76:b3:17:a3:b7:8b:70:02:4b:75:9e:98:91:49:0d:0f:
a1:f8:a6:36:de:f3:ea:1c:11:3a:46:fb:6f:4a:a9:82:3b:33:
b2:a4:c8:29:6f:e1:f5:ff:e6:67:90:74:48:6d:dc:f4:d6:d5:
78:ca:e2:f4:68:e0:bf:61:2e:e3:54:ab:47:2e:36:c7:ca:f2:
9b:21:68:34:82:66:79:39:fe:9c:2c:b6:1d:89:19:bc:d7:01:
87:55:7d:d8:47:c0:f9:a4:0d:77:88:1f:8f:12:46:94:14:2d:
42:0d:f9:ed:ba:89:2c:89:b9:43:1b:de:62:a5:e9:25:08:90:
f1:5a:5f:a8:90:f7:c9:57:36:f0:d6:e8:31:33:32:ab:2b:fc:
e2:c9:3f:13:7b:db:5d:1a:4e:f6:2a:f8:fa:27:95:ca:25:c2:
8a:48:d1:ee:05:2f:06:d6:f7:7e:fe:f4:db:7d:e2:74:f7:5c:
fa:52:14:1f:06:47:c5:d3:56:6d:ce:95:b4:3c:e7:8e:ab:d9:
a9:60:2f:aa:96:c1:d4:68:ca:75:e0:db:01:d9:6b:76:43:c4:
f9:d3:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:43:08 2025 by rpki-client