Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier: e4ubBagV4anusE85SN9R6i59+U5jgxiUiEtiSxpjdoE=
Subject key identifier: 88:D9:DE:F4:67:21:2A:49:8A:C0:9D:A6:9F:BF:74:8A:11:A1:4C:4E
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 0198D5BBB18B71D7D1CF0255B6AEAAF1B8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number: 04A7
Signing time: Sat 23 Aug 2025 07:01:44 +0000
Manifest this update: Sat 23 Aug 2025 07:01:44 +0000
Manifest next update: Sun 24 Aug 2025 07:01:44 +0000
Files and hashes: 1: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (hash: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=)
2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: X1RBlJ3LvOiYd2hkBQPDRkP6OICmt050qQl0IiL7T+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b1:8b:71:d7:d1:cf:02:55:b6:ae:aa:f1:b8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: Aug 23 07:01:44 2025 GMT
Not After : Aug 24 07:01:44 2025 GMT
Subject: CN=88d9def467212a498ac09da69fbf748a11a14c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:ec:df:0e:55:46:25:cb:fc:1a:ab:de:3d:
d3:a6:a8:34:b8:ac:5b:dd:1e:de:6b:f6:77:7a:ff:
27:5e:33:d6:85:cc:1d:4e:ae:e7:0e:39:e9:70:1b:
57:3c:12:40:90:40:66:8a:02:77:46:07:d4:7f:92:
54:e6:12:cb:58:77:1a:b0:68:e3:fb:7a:07:cb:02:
a7:18:59:96:0b:fa:f8:ff:84:e9:60:fe:5b:86:27:
94:8e:dc:17:b1:f4:5f:08:e1:ae:33:02:a3:a2:6c:
93:94:43:72:5b:7b:77:11:23:91:dc:63:05:ab:3b:
97:4c:a3:f5:d2:6e:63:11:33:74:26:be:41:09:d6:
7b:b9:37:94:2a:d0:29:2c:29:43:7c:03:e7:0f:3b:
5e:84:ac:ff:63:9b:ed:71:3b:fb:cc:16:41:94:d1:
ac:0c:37:9f:59:86:91:db:33:aa:c5:b9:ff:3c:fe:
ea:99:91:b0:3c:47:63:c5:d1:1f:6e:05:c0:56:06:
8c:44:a1:21:bd:1f:72:d3:07:85:71:2f:64:a7:5e:
f9:ac:41:22:e7:63:83:3a:a7:3a:17:d0:a7:e2:fe:
ea:cc:67:aa:96:df:bc:8a:6b:6d:7e:81:14:22:d8:
94:d9:b6:23:c9:68:2c:ae:22:5a:83:ef:dd:4e:31:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:DE:F4:67:21:2A:49:8A:C0:9D:A6:9F:BF:74:8A:11:A1:4C:4E
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:61:9f:00:14:74:93:d8:6d:b7:6b:be:62:9b:eb:17:0c:8a:
c9:1f:a3:90:e9:ee:8b:db:3f:70:65:99:77:67:0f:3c:cd:04:
9c:84:4d:ce:cf:81:0f:0a:cb:52:8c:f6:6f:6d:fd:4a:97:15:
5e:f5:f3:e6:d7:0a:58:c5:9f:ee:e0:ca:54:c4:31:bc:cb:9f:
29:3a:dd:76:17:8e:97:4f:02:33:f4:74:18:ab:94:22:79:42:
e2:5b:34:b4:08:d1:b9:b7:68:13:03:fb:4a:46:8a:fe:fa:69:
19:a0:d3:5a:8e:7d:a7:8d:1f:9d:4c:94:ae:a6:4e:74:30:12:
25:83:34:a0:14:35:84:d0:42:f9:55:2d:33:a4:d7:90:62:4d:
00:c9:f1:96:5b:5b:97:e3:ec:70:4e:ef:33:bf:64:6b:6e:07:
c2:cb:9c:bf:d3:07:02:d0:9c:01:c1:1e:a6:17:57:7d:c2:7f:
b1:dc:93:95:a6:50:f3:6f:7d:ad:50:98:73:c0:56:3c:98:34:
46:32:3d:7f:71:29:f6:79:c5:9a:7b:e2:f6:76:6f:55:1d:49:
07:20:03:82:9c:5b:f4:28:44:c9:ea:f0:5d:2a:b8:b9:bb:03:
29:54:f3:f0:cf:28:ac:a6:7a:7a:45:4d:e9:bd:bc:76:e0:3e:
19:b8:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:38 2025 by rpki-client