Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier: 2tP7RMGjU+GFurfvVxUhhY/Ior1ICIpSU/nE4j20pBE=
Subject key identifier: 6B:12:C8:EA:B8:34:03:5F:E1:7E:01:4F:B3:B0:69:E9:B1:88:56:D4
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 01987D52B63F55503CAEC8C9C4A389F43D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number: 0224
Signing time: Wed 06 Aug 2025 03:00:29 +0000
Manifest this update: Wed 06 Aug 2025 03:00:29 +0000
Manifest next update: Thu 07 Aug 2025 03:00:29 +0000
Files and hashes: 1: 0pHcVGxKroxOni6LgFtqt0banSw.roa (hash: Q40CZpsU0+RiU4O4YQFtbp1L/7Yepswrm+UiOB95fSM=)
2: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: A4v2o0Y/Gtq6dcFQlarOkp1Cj6EYJsZNWfMotAQYmt0=)
3: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (hash: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=)
4: 5O6iyLYqjxgK3EFjvB7TPec4vNc.roa (hash: +zN5xcfrGyrSvPX2aPdQntXT/Zvfyz7ULplVdMhrq7w=)
5: BnL626pcSJW84hvMFQ1G4Qrz04U.roa (hash: 3us+txzDTK3Uzjb5+hEvvCFMUnMHD1ygkmUal1BKvv4=)
6: DJsHawN4UfC7y3M-cvB8yQD8M34.roa (hash: 7erERMTFq4HfOI3TzB2K6MSVRmBE9HH5uCjfWAVLlJk=)
7: P-HpN0rbo8pq_5q4cRvMaanzgYc.roa (hash: ch7XxV7IWXl61FLlC5og0slGPaHjQJP/awyOAriaSIM=)
8: XcKo7ctmpUBqVfx0JPs9RsSZGCs.roa (hash: 1T8ZHVnMW4fbGLyFMTAkhaxOama9czmojEH2rCd/x6I=)
9: g31y-rKLvjosua_ERt6smuGZVHc.roa (hash: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:52:b6:3f:55:50:3c:ae:c8:c9:c4:a3:89:f4:3d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Aug 6 03:00:29 2025 GMT
Not After : Aug 7 03:00:29 2025 GMT
Subject: CN=6b12c8eab834035fe17e014fb3b069e9b18856d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:f5:65:5c:b8:9c:91:3f:18:d6:59:7a:11:
f4:6e:dd:11:d3:91:8f:6f:77:93:57:0b:2a:a1:c0:
b9:dc:8c:7c:a5:c8:8c:fd:6a:e9:52:be:fb:b3:a5:
9a:0b:65:99:03:15:19:12:0e:2f:13:b6:fd:5d:2f:
4e:44:b2:d8:11:b2:2e:85:51:2f:4d:02:df:57:76:
30:6a:ed:ca:57:94:2b:49:0c:b8:cd:a7:54:ac:8c:
57:e8:de:57:3d:38:cb:fa:90:99:88:17:e4:14:3f:
8a:b1:95:e4:72:90:3b:eb:7b:4b:8d:ef:d9:66:80:
cf:3d:d5:a7:a5:e4:ad:33:26:4c:e2:6f:78:17:c3:
88:a3:fa:88:ca:44:9f:a7:32:df:58:d5:56:33:61:
30:2c:09:91:fd:3c:a3:fd:9a:08:7d:29:7b:f2:88:
ef:f8:ed:77:fc:b5:a0:d4:32:7b:6a:31:fc:6e:c8:
07:26:8b:f0:14:53:0c:07:1d:1c:81:e5:8f:e3:7a:
77:d1:1d:ca:57:a5:02:65:4b:0d:5d:90:d8:c8:7b:
c5:29:15:d4:ca:27:f6:c3:5e:15:b7:d1:af:c7:dd:
aa:c3:4a:ab:f5:b4:15:6e:15:81:a4:9c:d6:3c:ca:
6c:9e:99:b0:be:80:cb:0d:91:2f:cb:bb:81:70:05:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:C8:EA:B8:34:03:5F:E1:7E:01:4F:B3:B0:69:E9:B1:88:56:D4
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:76:de:14:ba:44:e3:1a:99:1e:0e:f3:a7:3c:c5:c9:b6:ab:
94:6e:0a:01:7e:07:6b:a1:9b:d3:a1:45:a1:b3:32:a1:d2:99:
2f:67:31:46:59:bf:85:62:bc:af:26:ee:0c:b5:55:07:20:42:
b4:28:c8:13:32:bf:00:e1:bf:5b:06:a8:3a:f5:0f:b9:e3:03:
b4:a9:34:da:9b:8f:66:9d:95:95:70:65:c0:5b:81:08:d7:f8:
bf:bf:dd:dd:b6:8c:94:f5:7a:b0:e7:49:85:5e:09:28:99:f5:
bf:b6:93:30:ed:d6:ba:20:3b:5f:a1:8c:d3:fe:ab:81:db:86:
81:ad:0a:d4:3f:50:bb:9f:48:fb:e0:ab:97:6f:6b:8c:ab:59:
24:9d:6a:2d:31:0b:16:f0:27:a5:3e:54:c8:16:56:d9:96:2c:
38:aa:35:5a:32:73:d5:7c:65:34:a9:1a:2c:21:c9:6f:9d:02:
fd:bc:bb:d0:3c:2c:82:53:67:64:c1:1c:c9:ca:51:b1:74:43:
55:d0:27:8c:bb:36:bf:fe:ad:69:71:d8:9b:eb:d3:b0:57:67:
bb:52:78:63:5a:ac:4a:e6:6e:f5:99:13:f2:5e:8d:70:87:3c:
29:59:37:10:20:3a:d9:c0:c8:93:3a:69:fb:7d:72:e4:e9:1b:
f3:3a:a3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:40:11 2025 by rpki-client