Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: TmDpEA69g+Tjfbv/4T+GiAqzbbvl9Fbsrp3UI/HNDrA=
Subject key identifier: 84:6F:68:A1:34:85:F4:88:27:8F:B7:F8:C1:05:26:86:42:CD:1C:27
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 01987450A2CF6CDA18A40ADC19D76D57BCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:01:38 +0000
Manifest this update: Mon 04 Aug 2025 09:01:38 +0000
Manifest next update: Tue 05 Aug 2025 09:01:38 +0000
Files and hashes: 1: X75BC-oQSIZ_Eow4PmOQdnEFFSA.roa (hash: 9fCRye0I7SNN/gpC5nOojc7Nk1BoVgXxf8JAD5uwXBE=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: Bq9jZ06JM5JUnXkxNF1jiHLBT00zp8FCvhNlqj0Ck/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a2:cf:6c:da:18:a4:0a:dc:19:d7:6d:57:bc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Aug 4 09:01:38 2025 GMT
Not After : Aug 5 09:01:38 2025 GMT
Subject: CN=846f68a13485f488278fb7f8c105268642cd1c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:61:40:ce:8e:23:9c:00:cf:e8:6f:ec:6a:6e:
61:6f:51:14:d3:ab:35:87:a6:1a:f5:32:a4:f1:d5:
ff:ce:6b:96:2d:50:33:e7:65:46:19:d3:36:1f:8b:
93:88:06:35:f0:82:be:ac:a6:6c:cb:5c:a6:46:ad:
52:49:19:49:33:d8:fb:7c:4a:8e:73:89:aa:0b:a6:
8a:37:18:e1:75:ee:13:a2:44:c6:c4:22:da:18:fd:
82:37:c8:a3:fa:38:f0:96:a5:7b:68:01:f2:4d:df:
fe:20:0a:86:56:a4:31:78:bc:4d:69:5b:49:c6:a5:
e7:3a:5f:ec:d4:9e:ed:f1:a5:e1:30:04:0f:7e:20:
c6:4c:d0:47:7b:3b:75:a8:70:a3:23:f3:ea:e8:28:
39:fe:e9:e2:f3:25:60:92:45:77:0f:56:1f:4a:73:
0f:33:2d:fa:ca:95:9f:03:f6:c1:05:ca:b2:25:33:
75:42:de:db:ca:17:25:6d:a0:82:ba:6f:94:10:dd:
94:cc:bc:9a:d9:50:41:ad:08:d3:73:6a:ff:e9:e3:
f2:29:31:25:20:68:53:e2:a2:29:1a:66:11:80:04:
2c:fc:6b:35:42:73:27:6f:aa:ad:44:9a:49:12:4e:
42:d7:b6:76:de:3c:58:39:48:d6:b9:3c:bd:e5:50:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6F:68:A1:34:85:F4:88:27:8F:B7:F8:C1:05:26:86:42:CD:1C:27
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3c:bf:65:98:01:f0:b2:67:55:f4:80:96:3f:8f:ed:c8:6d:
05:cb:f9:1d:e9:de:ea:9a:f4:20:02:34:08:42:97:4c:9e:22:
92:ea:3a:ed:10:df:b8:3b:0e:db:23:13:f7:d0:5e:80:78:39:
c3:55:ad:94:31:c8:90:d0:ed:5d:57:b5:bd:99:04:97:7e:dd:
64:fd:42:30:0b:e7:a5:ec:32:fd:44:df:20:19:ea:5d:60:48:
26:34:de:76:88:e2:6d:d0:e4:a3:a4:d9:57:e3:88:24:71:31:
6e:5d:f7:68:ff:4b:7a:c9:9c:f5:c8:63:d0:a1:48:80:f1:37:
f5:38:13:6a:de:d0:41:35:8b:21:60:dc:2d:81:ff:3e:16:c3:
fb:97:b2:38:39:e6:f4:02:87:33:59:f2:f6:6e:0e:3f:1a:f1:
e0:c8:38:03:52:3b:93:d8:d8:f0:5b:21:60:7d:bf:23:2c:c0:
c0:e6:b8:51:16:11:ed:d4:43:f4:b6:7c:0a:ad:3a:bb:df:51:
0c:12:93:ed:36:5c:58:a7:aa:f1:b2:c3:c2:be:ec:4c:d1:53:
08:54:88:75:a3:0d:23:09:b3:38:2b:c7:50:25:4a:ca:80:cb:
ea:74:ec:17:46:cd:71:f7:67:29:ee:75:05:80:58:34:62:fa:
e8:af:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:48 2025 by rpki-client