Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: JFJAectL4zTQcFOggG/zKZBxKI85aAh6QK1MDUxnPFQ=
Subject key identifier: 83:09:6A:00:0E:87:94:E8:97:11:DC:CB:0B:B2:C3:F7:76:20:F0:97
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 0197827CBA784B37AAD802B9DD21F25AA390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 159C
Signing time: Wed 18 Jun 2025 10:01:41 +0000
Manifest this update: Wed 18 Jun 2025 10:01:41 +0000
Manifest next update: Thu 19 Jun 2025 10:01:41 +0000
Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: dkf4wQpGMc/E52szwY3qhKc9Dp4JPM4S8fnOgiq/uds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7c:ba:78:4b:37:aa:d8:02:b9:dd:21:f2:5a:a3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Jun 18 10:01:41 2025 GMT
Not After : Jun 19 10:01:41 2025 GMT
Subject: CN=83096a000e8794e89711dccb0bb2c3f77620f097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:8f:7e:0e:1c:a5:44:fa:82:d5:f9:6a:d2:
64:de:75:bf:87:a8:57:4e:92:9c:99:e4:de:54:06:
4d:49:74:ad:52:13:33:41:19:8a:56:57:85:e6:c3:
b7:c5:23:eb:43:68:53:cc:f2:0e:f8:a4:8f:67:15:
f0:51:1c:aa:f5:b6:34:c8:66:e7:62:8f:97:60:7c:
3f:a2:a2:30:c4:9b:77:ab:5f:d8:62:21:89:df:83:
a2:7d:02:9b:01:88:8f:fd:6a:c6:17:e4:87:57:4f:
e4:14:5b:b6:8b:78:63:05:ae:34:b6:a7:82:bd:38:
d2:59:ff:96:2e:59:6f:3a:ff:6d:c9:de:f2:57:a1:
7e:fe:84:81:f6:d8:fd:24:b6:0b:31:69:56:05:73:
2b:0c:f5:c8:aa:34:60:fb:07:2b:94:33:73:78:d6:
ca:15:aa:77:2f:89:e5:fc:82:33:ca:08:93:4a:ef:
d8:2b:f8:3c:fe:64:65:05:f0:54:7e:b3:3e:91:47:
a1:c4:c8:08:55:f3:cc:31:a9:6d:25:6a:8e:f1:94:
7a:aa:b9:78:14:17:de:e7:5a:12:73:ef:31:c7:68:
57:a4:bf:29:74:fc:59:6a:1c:ef:a8:bf:f7:23:d2:
eb:27:b7:ba:b5:06:0e:30:42:57:70:26:3b:1a:f8:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:6A:00:0E:87:94:E8:97:11:DC:CB:0B:B2:C3:F7:76:20:F0:97
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1b:ae:9c:06:16:95:3a:a2:d9:9c:60:87:38:3b:89:12:d2:
59:ec:cc:34:ee:0f:7c:2a:51:1f:86:83:d0:f3:6a:81:0a:1a:
bf:a9:2f:e6:4f:0b:67:a2:06:9d:8e:02:eb:a8:24:2c:8b:c3:
2e:0d:4a:8b:8a:3f:02:a4:de:e3:72:18:ff:9e:c2:69:64:63:
82:10:c6:c4:ca:e1:2d:8a:d6:24:62:c8:a0:b7:a6:d0:64:b7:
99:9e:2b:ed:56:5e:e2:c4:0b:7c:04:36:f4:c3:ed:5c:40:66:
aa:aa:cd:4b:bf:29:08:97:a6:28:2a:5a:0f:e0:c1:f5:c9:2b:
49:4e:c7:0e:57:76:2b:17:25:af:1a:1e:c7:60:63:14:b0:ec:
1b:d4:71:4e:32:f9:15:93:0d:ba:15:87:9f:90:e9:26:a4:52:
e9:81:a7:aa:e8:0f:f7:3a:ce:58:61:5d:9f:10:85:55:20:eb:
47:ea:f6:f9:e3:a4:9f:71:04:84:d5:16:d8:98:1c:71:58:7d:
87:3a:00:99:11:46:a4:63:9c:9d:49:eb:62:d7:1d:dc:00:18:
72:0b:6c:d9:98:60:1f:8f:83:48:1a:71:52:8f:d3:9e:bf:4e:
d6:4b:ee:27:ea:b8:0d:de:73:86:4a:06:33:09:80:20:0a:47:
82:9a:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:54:11 2025 by rpki-client