Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json)
Hash identifier: s42P/aWF6l2mW88IA/rA3T0dt/NK5rroA5DH1W13VUA=
Subject key identifier: 68:8F:3B:86:C4:DC:EE:22:1D:82:A1:50:20:AC:3F:B4:DB:3A:7F:42
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 019773E49ED9BCD7259621A873861D38B8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
Manifest number: 1596
Signing time: Sun 15 Jun 2025 14:00:52 +0000
Manifest this update: Sun 15 Jun 2025 14:00:52 +0000
Manifest next update: Mon 16 Jun 2025 14:00:52 +0000
Files and hashes: 1: b88Rl7W3m-ZgN433QwmekbZFP6o.roa (hash: NoA21W8ly2WxwAuP2zZWwmclSVAV10KXOOvNxpP+/rg=)
2: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: 18xZz86OcIp0pbZRd6F2GB36jv3M0qJl6+xSGO2tghg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:9e:d9:bc:d7:25:96:21:a8:73:86:1d:38:b8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Jun 15 14:00:52 2025 GMT
Not After : Jun 16 14:00:52 2025 GMT
Subject: CN=688f3b86c4dcee221d82a15020ac3fb4db3a7f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:b5:eb:f2:ab:98:bc:74:2d:29:5b:04:b3:
73:e2:b4:b5:d0:e9:4c:47:cc:21:cc:4c:fa:7c:14:
f0:20:c7:20:cb:63:a0:09:df:a1:8e:d5:1b:dd:61:
69:39:b2:49:aa:c6:40:6a:ed:60:a6:68:58:ff:4a:
bd:a3:2a:ea:98:bc:6c:92:5c:1a:dc:be:cf:6d:f5:
23:ca:76:0e:5b:d2:69:42:5f:87:dd:62:0e:f8:ba:
cf:d1:9a:35:05:34:aa:74:5c:8d:f4:2e:e1:35:dd:
2e:73:60:66:1a:d2:6a:d7:eb:6a:7c:8f:3f:e9:cd:
e2:74:48:54:65:9f:95:98:b1:eb:bf:fc:a3:1d:73:
d4:64:7c:e5:02:30:2a:f0:92:8c:b4:a8:9c:8f:92:
e1:80:88:16:3a:97:38:f0:a5:a0:cd:c2:94:af:31:
0c:f6:29:dd:06:ce:9b:6f:72:32:e3:f2:d0:a7:ec:
33:46:e7:88:e4:dc:04:70:a5:1a:34:78:6c:dc:89:
0f:87:7e:6c:20:5f:f9:f4:97:30:cb:3a:31:77:58:
9b:64:49:37:94:6d:e8:15:f4:da:b7:59:69:f4:c3:
97:28:68:d2:21:d0:ae:65:30:80:7e:53:fa:cc:c0:
ac:97:62:85:78:f5:a8:ea:3f:9b:8a:12:23:36:ba:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:3B:86:C4:DC:EE:22:1D:82:A1:50:20:AC:3F:B4:DB:3A:7F:42
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:13:39:63:ff:7c:a1:35:a6:59:6c:ca:78:de:ca:ba:c3:75:
4f:ca:20:09:72:f4:d6:1a:e1:0e:52:cd:3b:98:e6:71:77:46:
32:fe:59:15:cb:2d:06:72:e3:2b:61:97:db:5c:25:d9:d0:54:
c2:dd:27:9a:67:7f:16:bc:04:1b:95:53:46:c1:e1:9a:40:88:
33:9c:98:33:3d:42:4f:ad:8b:e7:07:b9:21:b8:f3:04:15:8b:
89:06:49:d7:52:cf:3a:64:38:8f:41:50:62:07:3a:aa:61:3b:
4f:9d:a5:08:74:3e:23:44:ac:af:82:53:90:77:fa:f7:64:56:
20:98:04:c3:c6:21:22:51:9f:74:99:62:f2:73:d8:1d:9e:62:
cb:50:cf:c2:f8:37:ea:13:2d:63:42:1a:48:97:4f:4d:1d:65:
09:fb:3e:74:f3:57:5a:15:02:bf:e0:4a:9b:1a:b8:65:b3:0a:
be:91:da:2d:42:2e:eb:eb:61:6a:1d:bd:39:b2:64:87:40:9c:
e6:58:8e:c5:82:be:20:bd:8e:a0:9f:91:96:b9:0c:8c:82:9c:
89:c4:69:6e:c6:9a:2e:01:d8:76:32:ba:6d:bf:66:c0:d9:e0:
d8:3c:b7:0f:78:b6:c4:c7:da:e7:62:5e:bc:53:bb:b8:bc:a2:
5b:19:88:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdz5J7ZvNclliGoc4YdOLj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxODZlNjRiNTgyM2M0YzYxMjg3ODU4ZDk3NzBjNzBkZjcw
NmIwY2MwHhcNMjUwNjE1MTQwMDUyWhcNMjUwNjE2MTQwMDUyWjAzMTEwLwYDVQQD
Eyg2ODhmM2I4NmM0ZGNlZTIyMWQ4MmExNTAyMGFjM2ZiNGRiM2E3ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOK16/KrmLx0LSlbBLNz4rS10OlM
R8whzEz6fBTwIMcgy2OgCd+hjtUb3WFpObJJqsZAau1gpmhY/0q9oyrqmLxsklwa
3L7PbfUjynYOW9JpQl+H3WIO+LrP0Zo1BTSqdFyN9C7hNd0uc2BmGtJq1+tqfI8/
6c3idEhUZZ+VmLHrv/yjHXPUZHzlAjAq8JKMtKicj5LhgIgWOpc48KWgzcKUrzEM
9indBs6bb3Iy4/LQp+wzRueI5NwEcKUaNHhs3IkPh35sIF/59Jcwyzoxd1ibZEk3
lG3oFfTat1lp9MOXKGjSIdCuZTCAflP6zMCsl2KFePWo6j+bihIjNroGkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiPO4bE3O4iHYKhUCCsP7TbOn9CMB8GA1UdIwQY
MBaAFHGG5ktYI8TGEoeFjZdwxw33BrDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMjA5NjMtZmFkNy00ZTM0LWJmMWUt
NjU4YjgwMGE1ZDYxLzEvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hMjA5NjMtZmFkNy00ZTM0LWJmMWUtNjU4YjgwMGE1ZDYx
LzEvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARM5Y/98
oTWmWWzKeN7KusN1T8ogCXL01hrhDlLNO5jmcXdGMv5ZFcstBnLjK2GX21wl2dBU
wt0nmmd/FrwEG5VTRsHhmkCIM5yYMz1CT62L5we5IbjzBBWLiQZJ11LPOmQ4j0FQ
Ygc6qmE7T52lCHQ+I0Ssr4JTkHf692RWIJgEw8YhIlGfdJli8nPYHZ5iy1DPwvg3
6hMtY0IaSJdPTR1lCfs+dPNXWhUCv+BKmxq4ZbMKvpHaLUIu6+thah29ObJkh0Cc
5liOxYK+IL2OoJ+RlrkMjIKcicRpbsaaLgHYdjK6bb9mwNng2Dy3D3i2xMfa52Je
vFO7uLyiWxmIlQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:05:12 2025 by rpki-client