Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: qib/YZF/VkMWVeFO1TGVS8vgJZ47maP+WoHxnLVYpvY=
Subject key identifier: C0:88:BD:8F:79:D5:E5:61:1B:68:94:C1:C5:54:51:21:1E:6E:42:FC
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 0197B7B30A61AF353B9697FBA5F8C817222C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 0677
Signing time: Sat 28 Jun 2025 18:00:53 +0000
Manifest this update: Sat 28 Jun 2025 18:00:53 +0000
Manifest next update: Sun 29 Jun 2025 18:00:53 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: FnQc8FSZUIxUAZRiNTnvcAtcBnIHsUU4bzBTWBlvgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0a:61:af:35:3b:96:97:fb:a5:f8:c8:17:22:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Jun 28 18:00:53 2025 GMT
Not After : Jun 29 18:00:53 2025 GMT
Subject: CN=c088bd8f79d5e5611b6894c1c55451211e6e42fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:6d:ad:78:65:2c:d3:29:85:2f:c1:c3:e0:
f2:8c:dc:1b:ee:29:8b:d4:3b:00:de:24:82:29:39:
db:a0:ca:9a:50:4d:f2:2d:32:27:7d:6a:b2:b2:2a:
64:54:1d:30:89:47:7e:42:65:31:d0:b1:62:96:ee:
14:22:d8:1b:05:7d:5c:6a:6d:bb:a7:f7:44:62:89:
c6:f5:4f:04:7e:f5:49:2c:e8:1c:97:0d:64:e6:f2:
64:39:41:80:26:99:89:c5:dd:03:87:1b:6f:ea:62:
aa:da:05:0a:76:09:bf:02:94:b1:28:1e:47:4c:d1:
3f:90:ec:a1:30:fa:44:d6:d2:1b:c2:65:a3:54:f8:
99:cc:7d:da:37:f1:47:b3:ab:f3:69:19:b5:df:52:
c7:66:74:65:80:05:59:fd:e2:b7:c5:dd:f0:d8:63:
42:e8:7c:1c:a0:ed:33:8f:bf:b0:b5:f5:b4:15:f7:
8e:cb:e3:19:2b:99:82:4e:e6:56:7a:d5:fb:4a:a5:
83:8a:29:60:34:26:b4:cd:4c:35:4b:e8:0a:63:f8:
da:11:95:ee:09:f2:e8:a7:75:5e:71:b6:83:b2:fe:
79:4f:08:a0:7a:cb:40:63:7a:18:39:04:d9:75:22:
cb:0e:91:c5:a3:90:7b:3e:60:25:e3:5a:f1:0e:e9:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:88:BD:8F:79:D5:E5:61:1B:68:94:C1:C5:54:51:21:1E:6E:42:FC
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:26:82:b4:f1:c9:09:4e:6e:bc:94:c5:b2:fc:5a:b1:38:28:
da:a7:41:52:ca:d1:e2:60:e7:1f:27:09:6f:29:33:94:7e:68:
24:e1:ae:b1:c8:82:1b:bd:fd:d9:0e:ae:22:8f:fc:29:78:81:
31:c6:4b:65:53:51:f7:cb:be:0b:33:1b:75:98:e5:84:3d:43:
58:53:71:a3:56:0f:33:8b:3a:c0:5d:3b:d0:53:ad:42:fb:f1:
36:64:0c:94:ed:dc:e2:8e:9d:10:7e:7f:60:2e:4b:f9:5c:e5:
ad:68:b1:a6:70:08:85:cd:ae:18:be:cc:1a:c9:25:87:87:24:
77:50:f5:0f:37:aa:56:ec:9e:ea:f7:6c:f5:9f:3c:cf:b8:37:
a7:4c:b6:d2:5a:4c:0a:47:ef:20:24:ca:eb:b7:5d:1a:72:3d:
40:c6:e2:f4:1f:07:ab:10:05:8c:9d:a2:70:57:45:55:f6:44:
5f:3c:d0:60:0a:28:37:20:77:ed:51:ed:5c:21:2a:54:cf:9a:
60:c4:0c:8a:f9:22:cc:d8:02:56:0c:22:74:63:20:d8:98:4c:
31:77:b9:7e:c7:90:23:33:87:da:20:80:55:7d:8c:e4:18:dd:
bb:95:ed:84:5d:b6:8e:5c:2e:32:87:ff:ee:2b:86:e8:40:6b:
e0:b8:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:46 2025 by rpki-client