Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: nvPsmRFjJPEbWPkPK5czM7LcmA75pWcEQ3zW4KnpxlY=
Subject key identifier: C2:37:D7:1F:D7:62:FE:8D:12:7B:21:E8:4C:D3:C3:B3:96:0E:04:C9
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 01989781401A3D667D402A12D117EFE6A54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 14F0
Signing time: Mon 11 Aug 2025 05:01:26 +0000
Manifest this update: Mon 11 Aug 2025 05:01:26 +0000
Manifest next update: Tue 12 Aug 2025 05:01:26 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: v3qK6/gr6qq6Qkrq6T53ljtdwD4qoTTMWy37Qix2zwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:40:1a:3d:66:7d:40:2a:12:d1:17:ef:e6:a5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Aug 11 05:01:26 2025 GMT
Not After : Aug 12 05:01:26 2025 GMT
Subject: CN=c237d71fd762fe8d127b21e84cd3c3b3960e04c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:bd:ae:75:92:25:1d:e6:92:54:df:d1:4c:
e9:f4:08:05:5e:54:da:f9:76:25:08:74:3a:10:e7:
75:1d:3d:89:50:4e:51:e8:9c:f4:db:bf:79:2a:5e:
2d:7e:b8:b0:da:39:ae:1e:4f:fe:51:7a:17:77:ea:
f5:34:c9:f9:ce:57:5f:8a:d8:45:be:4e:7b:d8:96:
46:39:43:a7:82:04:fb:fd:ae:78:36:f3:76:93:10:
f6:bc:77:57:50:b7:6b:90:05:8d:01:3c:c2:0b:a0:
b7:87:ff:f3:cf:34:b1:58:80:f8:da:a6:dd:d4:58:
54:a1:e8:1c:5e:6d:fc:ab:e2:e9:d5:c2:20:70:26:
da:f2:73:cd:55:c9:22:3a:4c:7b:9a:c1:86:0d:f5:
69:9a:40:c3:47:cc:20:af:8b:71:62:91:90:f4:e6:
05:25:47:ad:55:0f:e9:2e:db:41:63:46:6e:ef:66:
f9:6e:45:72:14:fe:3c:1a:92:1b:fd:af:8b:1f:95:
9c:97:57:7d:b7:42:9d:6b:25:e6:62:14:82:52:96:
63:e2:a2:b0:c8:2d:72:f1:12:82:ad:19:e2:1c:a7:
46:88:ef:97:f8:b5:95:29:49:a8:27:38:b7:66:e0:
5d:d8:26:84:7a:91:ec:8b:cf:eb:75:ba:8e:f5:02:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:37:D7:1F:D7:62:FE:8D:12:7B:21:E8:4C:D3:C3:B3:96:0E:04:C9
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:44:d3:7f:be:f8:ed:2c:9b:f1:7d:9c:d1:0e:c1:82:40:e9:
56:38:d6:7f:2f:46:51:ba:84:61:57:5d:4c:3d:05:2b:a9:b8:
61:04:39:76:d1:79:9c:de:15:88:73:92:3e:a0:76:f3:cd:8d:
1a:b5:d9:6d:1a:0b:1f:57:02:12:9d:e8:db:9f:aa:52:b0:54:
de:91:11:98:4e:8a:e9:52:2b:e9:bd:16:12:03:8c:e5:72:f8:
69:6b:d0:e7:75:4f:89:42:f8:7a:0e:7a:c4:43:4f:d8:ab:52:
63:b4:16:d7:0e:19:7f:7a:2b:97:79:24:dc:01:e5:09:10:9d:
84:47:d8:dd:94:2f:48:2b:08:88:6c:28:fd:72:49:36:88:4e:
a1:ba:7e:4c:cc:3b:eb:9d:cb:38:e8:ba:dc:ec:bf:22:44:68:
a5:07:1c:3f:0f:0e:a3:29:4b:ed:07:89:0a:59:06:71:37:8b:
e1:ac:1e:6e:e4:0c:04:ee:7c:c7:70:94:ce:d8:7e:0e:09:8b:
93:6c:be:5d:3f:9f:73:f3:8b:28:b4:5a:0b:2a:8a:59:69:6a:
28:75:52:80:14:c5:48:d9:38:7c:83:e7:f4:42:37:03:bf:81:
9c:bc:7d:7c:c7:49:ed:d5:07:e5:7f:5a:42:91:b1:44:98:6a:
39:9c:cf:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXgUAaPWZ9QCoS0Rfv5qVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Yzg4MTI0N2NhZGJjYmY1MmFhMmFkNzYyY2M3NDU0YTdh
ODcyNmUwHhcNMjUwODExMDUwMTI2WhcNMjUwODEyMDUwMTI2WjAzMTEwLwYDVQQD
EyhjMjM3ZDcxZmQ3NjJmZThkMTI3YjIxZTg0Y2QzYzNiMzk2MGUwNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ii9rnWSJR3mklTf0Uzp9AgFXlTa
+XYlCHQ6EOd1HT2JUE5R6Jz02795Kl4tfriw2jmuHk/+UXoXd+r1NMn5zldfithF
vk572JZGOUOnggT7/a54NvN2kxD2vHdXULdrkAWNATzCC6C3h//zzzSxWID42qbd
1FhUoegcXm38q+Lp1cIgcCba8nPNVckiOkx7msGGDfVpmkDDR8wgr4txYpGQ9OYF
JUetVQ/pLttBY0Zu72b5bkVyFP48GpIb/a+LH5Wcl1d9t0KdayXmYhSCUpZj4qKw
yC1y8RKCrRniHKdGiO+X+LWVKUmoJzi3ZuBd2CaEepHsi8/rdbqO9QKwMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMI31x/XYv6NEnsh6EzTw7OWDgTJMB8GA1UdIwQY
MBaAFMnIgSR8rby/Uqoq12LMdFSnqHJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQt
N2VmZTkwNWZmMjkxLzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQtN2VmZTkwNWZmMjkx
LzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkTTf774
7Syb8X2c0Q7BgkDpVjjWfy9GUbqEYVddTD0FK6m4YQQ5dtF5nN4ViHOSPqB2882N
GrXZbRoLH1cCEp3o25+qUrBU3pERmE6K6VIr6b0WEgOM5XL4aWvQ53VPiUL4eg56
xENP2KtSY7QW1w4Zf3orl3kk3AHlCRCdhEfY3ZQvSCsIiGwo/XJJNohOobp+TMw7
653LOOi63Oy/IkRopQccPw8OoylL7QeJClkGcTeL4awebuQMBO58x3CUzth+DgmL
k2y+XT+fc/OLKLRaCyqKWWlqKHVSgBTFSNk4fIPn9EI3A7+BnLx9fMdJ7dUH5X9a
QpGxRJhqOZzP4g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:25 2025 by rpki-client