Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: x2d1PYwusgBmFlmd5WdzVeTFq2/CnkUjfkegZ/edYEs=
Subject key identifier: 67:22:39:8C:C2:06:F9:2D:F5:F8:F6:2D:BC:CE:C1:47:80:47:81:C3
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 01987450C078F402A5F13B5F89C92E4CBBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:45 +0000
Manifest this update: Mon 04 Aug 2025 09:01:45 +0000
Manifest next update: Tue 05 Aug 2025 09:01:45 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: Ryf44wv9XIX9blmeNGaZfgySemda5qRtpFTMpFLgAKw=)
2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:c0:78:f4:02:a5:f1:3b:5f:89:c9:2e:4c:bb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Aug 4 09:01:45 2025 GMT
Not After : Aug 5 09:01:45 2025 GMT
Subject: CN=6722398cc206f92df5f8f62dbccec147804781c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:c2:9b:ac:80:59:b1:1e:56:cb:88:33:b2:
fc:7c:51:1e:29:0b:fe:21:51:67:6f:51:73:a6:62:
cc:49:e7:8e:84:70:ba:74:f9:2e:67:34:b7:39:65:
3a:2e:39:29:7c:9d:2e:0e:89:cf:12:92:9c:e1:49:
ac:13:a8:a5:62:d6:8a:cf:89:aa:ea:90:da:b9:e7:
9e:26:f6:5a:b1:33:b5:28:a3:e3:0a:ee:58:c9:39:
54:57:35:8a:cc:a0:24:ee:2c:63:fe:05:2a:42:2b:
de:62:b3:c1:14:0e:48:b4:77:69:bf:8c:67:68:6c:
09:5a:d1:d8:ae:19:3e:9c:f3:58:28:7e:5d:ad:6b:
35:f9:57:04:b0:5f:c4:84:18:7d:7c:4d:1d:49:52:
76:8b:d2:40:40:a2:5f:12:95:6e:9d:66:a0:f7:64:
67:77:be:b3:12:4b:e9:88:a3:14:a3:62:55:cf:3d:
c6:5b:7a:03:46:c2:a1:48:37:cf:24:0c:35:fb:da:
3f:b2:a8:76:09:0e:cc:f5:28:ce:5e:6d:63:35:57:
d2:c0:2e:53:2d:1a:7b:b4:fb:01:10:a3:f6:b7:36:
e7:54:74:c1:54:cc:8d:50:10:44:79:35:2e:73:8d:
5e:58:fd:2d:98:45:ba:43:ba:05:19:2f:8a:63:54:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:22:39:8C:C2:06:F9:2D:F5:F8:F6:2D:BC:CE:C1:47:80:47:81:C3
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:96:02:77:af:04:4e:eb:3e:2f:b2:19:4e:44:a9:7f:aa:60:
b0:b5:72:c1:cf:89:63:da:c4:f1:4a:45:19:9b:41:31:33:9d:
27:d6:2a:04:26:92:3d:6d:41:78:59:cf:78:c1:9b:e4:bc:fe:
55:d9:ef:5b:8a:95:20:e6:ad:a6:eb:f4:56:7f:a3:2a:81:36:
a2:b6:4d:99:bd:6a:7a:02:6e:66:89:97:16:f2:26:65:d5:c2:
d2:b5:be:eb:2f:c9:8b:bb:e5:7d:84:be:29:65:1f:50:06:7d:
78:77:0f:a6:b0:e5:25:a1:5e:8d:69:58:b9:63:48:4c:06:2e:
cf:ff:6c:af:67:f2:da:c2:9f:d1:de:9e:ab:51:45:39:23:21:
5c:eb:0b:09:b7:e5:a7:3e:6d:e9:0b:6a:3d:4d:30:6d:e9:bc:
37:ec:24:88:69:9b:58:7a:ae:88:3e:b3:94:e9:27:e7:fc:8a:
46:a9:6d:14:e3:8b:1e:dc:5e:4d:6c:df:55:57:49:21:37:5c:
31:6a:1e:d6:50:9f:9c:4a:86:28:a3:f3:af:dc:d2:75:5d:70:
f3:8c:ac:52:23:f9:9b:3c:17:99:75:3a:72:63:01:76:96:c1:
f9:9c:8e:e8:17:a1:85:6a:17:b3:67:07:38:fd:f1:e8:c4:24:
da:37:00:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:17 2025 by rpki-client