Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier: klxK2zwFyc94rRiPK4j3XLo/M587+LQryPFLubA9v6U=
Subject key identifier: 0F:A4:BE:0E:DF:A6:21:F9:C0:0F:54:26:D7:24:48:1A:BB:CC:A5:2B
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 019747E76F67ADAA7F1EBCDC48233FC2EE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number: 0182
Signing time: Sat 07 Jun 2025 01:00:39 +0000
Manifest this update: Sat 07 Jun 2025 01:00:39 +0000
Manifest next update: Sun 08 Jun 2025 01:00:39 +0000
Files and hashes: 1: 0pHcVGxKroxOni6LgFtqt0banSw.roa (hash: Q40CZpsU0+RiU4O4YQFtbp1L/7Yepswrm+UiOB95fSM=)
2: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: +4miPDe81rUiHaU0RCcMmPaUfL+Oy8+KF+OWRkihebk=)
3: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (hash: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=)
4: BnL626pcSJW84hvMFQ1G4Qrz04U.roa (hash: 3us+txzDTK3Uzjb5+hEvvCFMUnMHD1ygkmUal1BKvv4=)
5: DJsHawN4UfC7y3M-cvB8yQD8M34.roa (hash: 7erERMTFq4HfOI3TzB2K6MSVRmBE9HH5uCjfWAVLlJk=)
6: XcKo7ctmpUBqVfx0JPs9RsSZGCs.roa (hash: 1T8ZHVnMW4fbGLyFMTAkhaxOama9czmojEH2rCd/x6I=)
7: _MuhnJ6s9fgxrMWOdWSQ3a9Mo5A.roa (hash: /NURNjdL1rUwg9BnJscsIm9Ms2LcxVnZNiDclEiZFfs=)
8: g31y-rKLvjosua_ERt6smuGZVHc.roa (hash: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=)
9: pPHmbMikVBACOA-xj0C6dNDZYpM.roa (hash: Tckf3zisW/juBkSkf5E1qa9SaVTAQq8IrgBpb3JvyX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:6f:67:ad:aa:7f:1e:bc:dc:48:23:3f:c2:ee:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Jun 7 01:00:39 2025 GMT
Not After : Jun 8 01:00:39 2025 GMT
Subject: CN=0fa4be0edfa621f9c00f5426d724481abbcca52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d2:1f:3a:d3:e2:6d:63:fa:f6:9d:19:24:1a:
cc:54:6e:a9:64:6a:fd:6e:e5:36:2c:e6:f1:92:a6:
dd:6b:ed:0c:31:b5:27:db:19:54:c3:e1:3b:89:19:
0f:08:93:e2:e2:73:11:19:13:78:e0:2f:53:c7:c4:
d0:08:bb:34:77:ba:77:53:2b:1c:4c:c2:5e:cf:d9:
ba:e6:46:bb:7c:8d:5a:2b:61:6c:cb:91:b1:83:fd:
06:d9:12:a6:e1:18:cc:9a:60:88:62:c8:4d:09:20:
13:ce:f1:03:84:e7:71:76:f4:da:38:12:84:d1:97:
8b:d8:58:3b:2e:de:f6:99:ea:f8:6e:13:e6:79:92:
8a:09:58:32:6b:32:1f:47:a8:8f:fe:87:b1:26:a0:
94:aa:16:da:50:b9:cf:a2:09:11:ea:07:09:d6:cd:
f0:eb:fc:75:ad:7d:c8:d8:d8:1b:aa:25:30:b5:6b:
5c:ec:96:f8:ce:e3:da:31:e1:c3:22:48:4c:98:46:
ff:f2:8b:bc:e5:10:9f:f3:8c:73:a3:4d:20:b0:88:
8b:da:0a:1f:9e:b9:a8:bc:0e:eb:4f:ad:46:ba:0c:
0a:13:48:6e:c3:38:07:67:b1:c3:14:12:c7:8b:f3:
cb:eb:b1:25:de:5c:6f:60:c5:5e:84:5b:c3:b4:4d:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A4:BE:0E:DF:A6:21:F9:C0:0F:54:26:D7:24:48:1A:BB:CC:A5:2B
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4f:e7:0a:b4:e3:e3:b1:51:6d:b1:43:7c:cf:54:10:0b:c9:
73:3f:db:33:82:02:4a:a1:2d:b4:c6:53:ac:e2:67:e3:6c:fb:
e7:1d:53:2c:87:01:47:8a:75:53:88:12:4c:82:49:aa:08:cc:
27:b8:e4:ee:47:5d:6f:8f:28:bb:cc:f7:1c:9f:9b:3b:19:ce:
aa:88:4f:6a:47:c0:9d:e8:af:8b:7b:05:71:ba:e5:e8:b5:43:
33:0e:1a:6f:b9:f4:38:07:e5:54:14:9d:2f:33:2a:47:f3:24:
04:e5:4b:d6:6f:f1:46:a7:95:4c:32:66:fc:05:a8:94:14:ee:
2e:25:6f:0f:7c:d5:07:d8:b1:af:87:2c:1c:e9:7d:e4:c8:59:
f5:b0:30:91:c6:98:fd:8e:1e:0b:9e:4c:c3:a8:11:e5:ee:a4:
ab:78:e8:17:44:62:b8:de:ea:14:5a:96:56:5d:e8:d1:63:64:
e8:43:c6:75:51:7e:2d:bd:90:22:e7:51:72:1c:b4:90:59:5f:
2b:33:98:41:3a:ae:44:b5:8e:16:ca:63:10:10:20:6f:15:b2:
28:28:61:7c:c4:03:66:53:b8:7c:ab:cc:4b:64:85:87:e9:bc:
12:fe:df:00:d0:b5:c7:77:ab:ad:d7:3a:0e:10:3c:87:a9:89:
7d:67:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:12:20 2025 by rpki-client