
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: pL0h/bmDzo7KPvsfhoiqr9D2zACfD/CgP0KHgu/KLHI=
Subject key identifier: C3:42:AC:19:03:9A:A9:C8:FC:D4:F0:84:5D:A0:CE:84:B6:F5:75:71
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 01987E9CBD059BA12A58E98BAD120613C906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 06DE
Signing time: Wed 06 Aug 2025 09:00:57 +0000
Manifest this update: Wed 06 Aug 2025 09:00:57 +0000
Manifest next update: Thu 07 Aug 2025 09:00:57 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: JyryjFifNEMVP3cJ2rBqt4NxZzf7ezN8bQWtXZZF6KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:bd:05:9b:a1:2a:58:e9:8b:ad:12:06:13:c9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Aug 6 09:00:57 2025 GMT
Not After : Aug 7 09:00:57 2025 GMT
Subject: CN=c342ac19039aa9c8fcd4f0845da0ce84b6f57571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:48:08:a4:df:55:75:f3:10:aa:f9:48:3c:
42:0c:3a:f3:b8:58:4a:e4:f0:5d:e0:c5:23:95:1d:
06:5c:52:f2:cb:62:26:00:4d:18:51:fd:26:57:91:
40:9e:45:8c:24:13:3f:9c:64:f2:7b:cd:90:7b:1e:
56:2a:22:57:50:4d:e5:b8:2b:46:99:c1:83:a6:6b:
7e:bf:9c:cf:7a:43:17:e1:c5:cb:ab:25:d7:ae:d1:
45:95:09:a8:36:8a:db:a7:37:6a:36:db:d6:cf:a6:
39:c7:d2:c8:76:a3:a6:06:2a:57:8e:f5:68:6d:9a:
eb:13:d3:e9:5f:08:91:e7:f8:6d:3f:9c:11:ce:f6:
bd:de:30:37:0f:44:1f:8c:8f:b0:20:ff:79:09:73:
2d:28:cb:bb:7b:a9:1a:59:56:21:4c:8e:a4:a5:2e:
0c:f6:87:8c:26:f3:b4:7d:0a:e1:b2:46:f6:6f:bc:
21:95:80:0f:60:e8:1e:d0:ed:2a:f7:29:ca:0b:47:
40:47:dc:b1:55:33:31:c4:20:63:d9:07:9b:04:01:
e9:1c:ef:10:c1:32:11:79:10:40:7a:05:2f:9f:bb:
2d:bb:9a:3f:b6:0e:05:29:b2:47:74:1e:42:5a:39:
0e:f6:14:db:6c:a3:46:05:fb:47:f6:a5:9d:5f:6f:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:42:AC:19:03:9A:A9:C8:FC:D4:F0:84:5D:A0:CE:84:B6:F5:75:71
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b3:7a:e4:ce:52:66:d8:b9:bc:22:40:5a:c6:cd:38:e3:2b:
6e:08:f5:19:77:bf:77:8d:f9:e5:98:be:6f:71:3d:12:a0:3f:
29:22:bd:7e:82:59:2b:47:e4:bf:dd:db:39:6b:ef:f0:04:7d:
49:70:69:da:95:e6:3d:9e:68:4a:de:a3:c9:6c:82:fe:b8:4a:
c4:92:96:6f:c5:4b:7c:f3:69:18:b0:f1:ca:f6:43:89:51:1a:
b1:7b:01:52:50:28:b1:2a:c4:89:f0:4e:9f:1b:d9:fc:ae:a9:
c1:a7:1a:e2:f8:2c:c5:00:63:98:68:df:1a:ef:fb:4a:cc:55:
69:3e:44:78:0e:55:02:15:ce:dc:fd:0d:f1:b5:14:9c:0f:a2:
e2:f9:c8:4e:f1:99:a0:b3:a9:9d:66:cf:7b:bd:3f:5a:7a:52:
b9:69:9f:fe:a4:80:a2:37:91:c3:12:ed:ae:fc:2f:56:1f:20:
6d:65:95:ce:9e:66:f5:22:7d:9c:8b:af:eb:94:89:da:c8:c8:
88:9c:3f:51:3f:5c:6c:41:cd:16:42:a7:d9:cd:f2:00:95:77:
6f:b2:dc:b8:3a:3e:85:f8:8e:51:1f:11:29:da:c2:be:40:26:
e0:c3:28:50:b8:e3:35:03:27:59:51:61:78:74:c5:cb:2b:3b:
82:07:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:36 2025 by rpki-client