Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: yUYx7OTRkIrSGZj8nSEG2OBUXVOox3sC7KhNIA92nsw=
Subject key identifier: 38:1E:80:E4:E2:00:75:F3:62:66:19:CE:44:F9:46:21:56:EB:58:29
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019754FE6E144FF9D2D34576A9A3D905AF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 1449
Signing time: Mon 09 Jun 2025 14:00:49 +0000
Manifest this update: Mon 09 Jun 2025 14:00:49 +0000
Manifest next update: Tue 10 Jun 2025 14:00:49 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: oV807PowRE7DEFTpG7Nryeip8sQTZ3jm4cOkHMzQuXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:6e:14:4f:f9:d2:d3:45:76:a9:a3:d9:05:af:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Jun 9 14:00:49 2025 GMT
Not After : Jun 10 14:00:49 2025 GMT
Subject: CN=381e80e4e20075f3626619ce44f9462156eb5829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:eb:44:e3:a5:9f:6f:d7:67:1b:82:90:a9:
5c:6b:2b:95:2f:06:1d:b9:03:8a:dd:a0:b9:4d:28:
95:7a:2b:e7:a5:66:66:fd:d7:1f:ce:fc:93:c5:19:
62:0a:77:cb:62:ac:56:95:ab:2a:30:0f:5d:46:86:
f1:ba:31:6b:5b:82:6d:3e:db:19:17:fe:ea:8b:ce:
b7:5c:57:2c:e9:a1:df:de:a5:36:a5:4f:7d:b2:19:
b9:93:f8:65:a9:c4:d2:f5:8e:5d:2e:77:d4:c8:2c:
f0:a7:37:9a:7b:e3:89:a3:88:dd:37:dd:a3:9b:87:
5b:16:ae:84:c2:08:ed:e4:16:c9:eb:49:0c:25:34:
c3:b0:f0:d8:a0:a3:81:0c:67:da:11:59:30:b1:fe:
bb:28:3c:85:02:4d:f0:33:8c:56:5c:7f:c8:d2:84:
e2:5b:78:d1:e0:40:48:80:83:83:c9:1d:85:d2:8f:
51:4d:86:4f:31:00:7a:57:f6:81:53:7e:c3:81:37:
25:e5:7a:06:3b:a4:1e:fc:7a:32:1e:b6:e0:2c:30:
ae:08:f7:58:3a:46:dd:cd:b8:6e:7a:42:9e:fc:a2:
16:59:3e:6b:61:bb:c6:14:cd:5e:09:9c:b6:bc:b0:
ef:ef:ec:ff:f2:ba:40:a7:ae:e9:0c:3b:67:ae:13:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1E:80:E4:E2:00:75:F3:62:66:19:CE:44:F9:46:21:56:EB:58:29
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3c:26:6a:fd:68:c4:08:f2:72:27:d9:03:28:49:f6:9d:eb:
bf:99:ff:d0:6b:77:6d:d0:bc:30:d2:73:6e:97:15:f8:c2:a5:
ce:32:1e:a7:fc:f5:67:4b:ea:8a:20:10:6f:86:77:21:7a:ba:
f5:b3:74:d7:f7:b3:00:2b:b0:fc:0e:41:73:62:f6:c0:5e:8a:
65:89:65:53:58:a0:71:0a:a9:4f:66:2a:73:38:a2:a0:34:71:
9a:10:6e:93:b8:fc:a1:cc:c5:74:ee:1e:ba:6c:d0:4e:ff:61:
35:60:fa:f6:6d:91:37:15:f8:c3:58:76:36:26:40:6e:04:c3:
03:1b:91:1d:3e:04:1c:3d:93:a3:be:2e:1f:66:f4:fb:40:97:
41:15:83:e5:e3:7d:fe:e4:e5:fd:f2:d0:91:74:66:a6:4c:0e:
f5:53:26:aa:e1:cb:43:e6:30:39:98:a1:84:71:0f:eb:d2:43:
d7:11:5b:c6:92:f0:16:b8:00:fc:df:b8:21:a7:3e:86:76:d2:
b6:ad:bd:80:a5:89:f3:c0:a8:7b:a2:5b:1f:ad:2b:8e:4f:17:
02:87:6d:3a:6b:8b:68:bc:f9:43:27:42:be:8d:c3:63:32:e6:
95:94:01:43:2d:8d:09:b1:3e:41:33:a8:fb:ce:10:74:3c:29:
30:b9:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:28:11 2025 by rpki-client