Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier: 3TFt54B8+niZmPrzcu/wVNuoDemZ4A6fwOQbIXa9aQI=
Subject key identifier: 8C:6C:3F:3D:19:0E:8D:DA:09:3C:18:D9:7B:BB:55:F7:1B:8F:F6:78
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 0197684DF98D6346A5A4774424506FE63004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number: 0193
Signing time: Fri 13 Jun 2025 08:00:29 +0000
Manifest this update: Fri 13 Jun 2025 08:00:29 +0000
Manifest next update: Sat 14 Jun 2025 08:00:29 +0000
Files and hashes: 1: 0pHcVGxKroxOni6LgFtqt0banSw.roa (hash: Q40CZpsU0+RiU4O4YQFtbp1L/7Yepswrm+UiOB95fSM=)
2: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: kUi4lBChLMjj7siFmEB+okbKrpoMNq1pzlLR6963bHM=)
3: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (hash: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=)
4: BnL626pcSJW84hvMFQ1G4Qrz04U.roa (hash: 3us+txzDTK3Uzjb5+hEvvCFMUnMHD1ygkmUal1BKvv4=)
5: DJsHawN4UfC7y3M-cvB8yQD8M34.roa (hash: 7erERMTFq4HfOI3TzB2K6MSVRmBE9HH5uCjfWAVLlJk=)
6: IJb4z-JA4Pknm90nR4yENhD6ZEQ.roa (hash: zWwaydkED8Tk3wpqobMces/D7ioL26YcgQSduiQCT+E=)
7: XcKo7ctmpUBqVfx0JPs9RsSZGCs.roa (hash: 1T8ZHVnMW4fbGLyFMTAkhaxOama9czmojEH2rCd/x6I=)
8: g31y-rKLvjosua_ERt6smuGZVHc.roa (hash: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=)
9: pPHmbMikVBACOA-xj0C6dNDZYpM.roa (hash: Tckf3zisW/juBkSkf5E1qa9SaVTAQq8IrgBpb3JvyX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:f9:8d:63:46:a5:a4:77:44:24:50:6f:e6:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Jun 13 08:00:29 2025 GMT
Not After : Jun 14 08:00:29 2025 GMT
Subject: CN=8c6c3f3d190e8dda093c18d97bbb55f71b8ff678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:03:ec:24:5b:3f:40:77:12:94:db:13:17:
67:0f:c5:96:5c:62:20:a6:74:ec:51:56:d6:63:e7:
d0:10:fd:34:1e:a5:f0:e6:15:74:72:23:c1:55:6e:
5a:ba:b4:fb:87:84:71:39:0d:e3:1f:6d:db:b8:a6:
bd:16:82:7c:cc:19:84:97:cf:be:fc:a3:0b:5a:24:
ad:2d:b3:fe:1b:83:a9:b8:67:70:6f:5c:0c:e0:f6:
63:38:fc:b2:94:01:73:ff:5d:94:33:13:94:1b:2e:
76:3c:ba:e8:bd:4f:21:a9:bb:93:29:a5:ae:14:ca:
78:01:c8:79:ff:73:e0:cb:2e:c8:47:b7:b4:5e:b3:
f9:f3:7e:e0:0e:e7:66:73:74:84:82:53:6a:e3:46:
7c:9a:07:b0:ff:3a:cd:21:8c:bb:2e:24:eb:35:0f:
21:63:1e:c9:f1:1f:94:03:a6:53:61:dc:11:c7:5f:
74:44:b2:4f:a8:ec:c1:02:13:2e:e5:ac:19:3a:58:
a9:3c:16:92:f9:5b:d2:41:62:9e:a1:3e:11:06:39:
ba:0e:76:b9:bf:fd:55:7d:ed:04:d2:48:e9:c5:35:
27:14:78:38:b1:d1:a0:ee:57:2f:92:57:1f:e7:56:
fc:66:30:29:d8:be:c9:eb:29:ac:4c:b0:d6:c7:6d:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6C:3F:3D:19:0E:8D:DA:09:3C:18:D9:7B:BB:55:F7:1B:8F:F6:78
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1a:ce:48:29:12:25:2d:d6:c7:7b:65:94:19:fe:3c:b5:e6:
8b:ff:89:76:19:25:8d:d9:e0:65:20:71:3d:7c:95:69:da:f5:
d4:7e:88:8a:4d:6a:96:2e:8c:38:bf:bb:48:22:29:ee:5f:58:
a2:e2:de:22:7d:02:9c:35:0d:85:49:ec:e6:92:19:57:81:3c:
10:b4:2e:9e:11:25:9d:26:d7:6e:8f:ce:22:cd:db:c0:ae:95:
5d:2c:36:60:a7:1b:54:59:dd:bb:81:97:1f:13:42:6a:ed:39:
63:a2:7c:03:a0:05:d7:82:90:74:4f:2d:84:cb:1a:ef:8c:07:
99:9b:bb:16:36:e2:f9:5e:36:e4:67:41:bb:30:7f:7d:6c:bd:
ff:43:8e:1b:ff:8e:52:67:fd:fb:f2:1f:6a:a8:b5:bb:7d:2b:
ff:78:78:d1:b4:37:f8:60:6d:1a:fe:4d:a7:58:94:38:e1:ad:
fa:b5:5f:40:03:32:b6:b3:09:07:65:dd:fc:c6:15:ea:aa:cd:
b4:01:f5:a2:c9:2d:64:d4:c4:4d:bd:96:16:a6:a9:88:9c:f7:
ef:1b:45:4d:2d:29:e0:45:54:94:81:e9:99:86:9a:43:aa:0f:
8e:6a:96:01:8d:bc:1e:c6:89:8b:1a:56:54:b5:d6:9e:69:73:
a6:b4:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:29 2025 by rpki-client