Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
File: yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json)
Hash identifier: kF7LRvdzRJuxpm0tOZviPc2CX8rK0SkyX0FJChYXSj0=
Subject key identifier: 11:18:D7:20:A2:D9:51:D6:60:9E:40:1F:B2:FA:D8:87:9B:8B:D7:25
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 01976EBE205F12AE0C44D0D3258CCEFE8771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
Manifest number: 1223
Signing time: Sat 14 Jun 2025 14:00:43 +0000
Manifest this update: Sat 14 Jun 2025 14:00:43 +0000
Manifest next update: Sun 15 Jun 2025 14:00:43 +0000
Files and hashes: 1: J64w76zXIm6hBV_NCpHfs00xQ5M.roa (hash: tW24A+133JMJcQQWR3X2EMPjynjBMoPzLLODpQzP0s0=)
2: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: YV8D4PZoREaDeHidSSK0PDUseunfIEDkJvCVOQsgJpc=)
3: zs6ZXDVhulOywUO2T8QRP9BjX5c.roa (hash: mDD3P3Ub10TzUpELhZJa1aGQdkKfYd5Nh93FhhJJLs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:20:5f:12:ae:0c:44:d0:d3:25:8c:ce:fe:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Jun 14 14:00:43 2025 GMT
Not After : Jun 15 14:00:43 2025 GMT
Subject: CN=1118d720a2d951d6609e401fb2fad8879b8bd725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:d6:6f:8c:ba:20:62:d7:36:d2:fd:b1:58:
7a:2d:cd:eb:04:38:ea:ba:21:59:dd:c1:b3:ec:40:
5c:f2:52:a0:a9:53:ae:4a:ea:77:29:6f:ef:e9:05:
bd:c5:14:d2:0f:9c:96:ff:da:22:7a:be:bb:9a:e5:
cd:ac:da:66:1c:75:17:37:e8:cb:b2:56:07:d3:e7:
40:e4:01:37:b6:d1:52:34:ab:39:64:c0:73:6d:ab:
22:75:96:97:3a:2c:07:34:b2:35:a7:05:d8:9f:41:
5b:e6:d5:fe:33:cd:38:cb:5f:2e:c3:32:54:5c:df:
1a:8e:e6:a5:93:91:fb:ea:6a:24:c5:5f:b5:b3:97:
91:af:1a:92:5b:0b:7e:39:fb:d3:d9:ac:f3:b2:83:
cc:9b:08:7b:d7:dc:7c:14:3e:9f:64:4d:42:3f:a7:
9d:ce:4e:46:a4:a5:4c:91:97:02:de:12:de:73:9d:
b1:f6:5e:c8:95:d8:9d:ea:28:7a:32:9a:a9:64:ed:
63:7d:c5:8c:24:85:3d:1b:03:13:69:6c:11:f2:e1:
28:52:80:84:4e:79:39:2f:82:31:2d:b4:01:7f:5d:
c7:3f:60:0e:6d:4d:e2:f6:51:da:c5:2a:24:18:ac:
e2:84:df:05:4e:92:87:03:5c:fd:ab:07:2c:52:5b:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:18:D7:20:A2:D9:51:D6:60:9E:40:1F:B2:FA:D8:87:9B:8B:D7:25
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:83:7b:87:0f:23:27:e6:98:95:20:57:c1:99:21:8a:57:ee:
cd:de:18:41:e2:8e:86:3c:42:3f:a3:d2:a8:c5:be:3a:7d:44:
a4:af:3a:c0:91:a8:fd:f3:be:c9:59:04:1b:29:36:4f:b0:fc:
5b:0a:f2:a6:30:f2:2a:ad:c5:85:36:c5:87:b9:d4:b2:6d:f6:
f6:46:b7:77:8c:33:1c:de:c0:6c:91:e0:63:4e:a6:9a:9b:77:
62:43:2a:6d:f8:a5:80:df:a4:a6:5c:83:59:fb:17:64:d4:9b:
4c:91:ef:69:07:09:eb:b4:04:f6:df:9c:64:64:4e:c3:bf:d5:
fd:d9:d2:32:fc:b6:55:2c:81:e4:30:e4:1b:d2:a1:a9:2f:07:
0f:d9:03:9a:c4:90:03:0e:4c:94:e5:b4:df:43:92:6f:6f:90:
41:1f:18:09:17:9f:1d:5f:cc:63:07:ef:16:9b:e8:77:17:84:
c7:17:18:a6:97:7d:0e:2d:f2:da:61:af:c8:f5:9a:10:53:b2:
0c:a6:de:56:85:6f:c2:cc:30:48:15:54:c5:53:fc:54:1d:8e:
21:32:f5:7c:a8:2e:55:5a:97:9e:00:84:fc:4a:4f:45:c3:b9:
25:0f:a2:7d:80:d8:5f:19:96:db:05:9d:a9:d3:61:4d:ae:16:
79:b0:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:44:16 2025 by rpki-client