Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: DnOvmsTYI50vAmkqrgUZ+lZmIrPFbytWOT1XUmtgMw0=
Subject key identifier: A9:55:0E:5F:70:6D:AF:B9:E1:5D:7A:F2:DA:AC:35:9C:6A:FF:93:A5
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019771F5FEF899BF6CD1459FC9462BD2D5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 1458
Signing time: Sun 15 Jun 2025 05:00:36 +0000
Manifest this update: Sun 15 Jun 2025 05:00:36 +0000
Manifest next update: Mon 16 Jun 2025 05:00:36 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: WW0b/7yBGkFBOQ79WAO14twzeMV6a0w5fp3566Zlkr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:fe:f8:99:bf:6c:d1:45:9f:c9:46:2b:d2:d5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Jun 15 05:00:36 2025 GMT
Not After : Jun 16 05:00:36 2025 GMT
Subject: CN=a9550e5f706dafb9e15d7af2daac359c6aff93a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:03:42:cd:b3:30:89:08:cb:e9:01:ff:63:
e1:0e:ca:97:b5:ab:cb:b4:5d:55:74:20:23:d1:b4:
ed:84:4e:d9:b0:7d:31:00:8e:ab:53:fd:1f:35:e7:
be:93:4b:bb:02:0e:45:52:1b:c8:8c:c0:85:3e:b3:
60:53:a5:28:b5:e0:64:8a:c2:b2:44:c9:b0:c0:80:
96:b0:3a:66:b8:f2:e7:67:37:23:84:f5:15:81:28:
03:a5:30:b8:d3:4c:53:27:c1:46:fa:85:7a:99:d7:
73:c6:14:dc:e4:1e:e2:c5:2d:97:85:5a:43:bd:b0:
a8:64:03:6f:0a:75:4d:ff:4c:da:0b:8c:1f:3d:18:
50:6b:c2:4b:3d:ee:99:43:06:71:ec:14:96:f4:4f:
fc:b8:29:5d:67:53:3f:3e:20:d5:f6:c3:ba:8d:b5:
5e:06:83:72:2c:55:b7:0c:62:cc:89:4f:ef:0a:21:
1f:b0:42:39:7a:fa:10:02:10:c2:40:60:2b:c1:29:
87:df:ce:1c:10:a6:a3:9d:4a:9b:88:60:36:f9:20:
58:8e:12:a0:a0:79:53:03:82:1a:3f:60:f4:59:42:
8c:dd:29:72:d3:b0:96:a5:e6:06:38:39:26:bc:47:
9d:f3:43:b5:06:42:92:b6:96:c2:1f:46:e2:d0:e6:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:55:0E:5F:70:6D:AF:B9:E1:5D:7A:F2:DA:AC:35:9C:6A:FF:93:A5
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ad:45:bc:c7:41:a1:af:4c:e3:04:13:43:c7:d0:ac:e0:79:
1e:a3:64:f9:3e:ae:af:ee:91:6f:a4:66:f8:56:94:c9:81:3a:
6d:32:08:f7:44:83:d8:39:a3:f4:99:22:53:ec:bb:3d:e6:ac:
c9:17:80:2c:4b:4a:26:74:d0:c9:ef:ca:33:65:40:ca:b9:e0:
31:33:00:55:af:00:2f:d8:20:87:d6:b9:45:94:41:3d:79:7f:
88:99:ce:4d:cb:2b:b0:fa:72:aa:ac:7f:34:c4:0f:a9:b9:f0:
6b:1b:38:bf:0c:1a:fd:46:bc:0b:b6:36:5f:91:dd:25:46:ae:
52:8f:39:43:f1:6c:c3:d1:56:65:e3:70:55:fa:c7:d3:5f:ef:
4b:8f:68:57:83:10:15:86:64:8d:dd:3e:80:7d:c5:78:d6:42:
5f:a3:01:25:75:6c:bc:60:81:ab:6b:42:d9:2a:4f:72:65:cc:
a4:5d:ee:9c:79:f6:71:ba:b7:c6:e4:8d:91:e2:a5:2d:5f:86:
23:68:e1:05:46:20:12:51:97:a7:f7:61:6c:bb:1f:10:de:48:
9e:f0:0d:b4:d4:02:67:53:8c:c4:11:25:7b:a5:7d:a3:89:a9:
18:be:2e:08:8c:23:62:80:9a:97:13:27:61:f7:cf:98:59:10:
93:6e:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:04:04 2025 by rpki-client