Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: v77ro5dyFIaWwHcbciONqccheKdRBlshcHrnd6ur+m8=
Subject key identifier: D6:90:62:D8:93:82:EE:5D:3F:D4:94:8E:3B:53:6F:58:04:BF:BF:7C
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 0197B6A0A723EEAB7B2F5FB39BAB1858D044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 04C6
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=)
2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: X6RhuBcs2kaJva0FGOGpV3YfFD7CH6hfTT/8ORU48+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a7:23:ee:ab:7b:2f:5f:b3:9b:ab:18:58:d0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=d69062d89382ee5d3fd4948e3b536f5804bfbf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:e5:d0:cd:4f:0c:3f:8c:da:60:0c:7d:1a:
9d:16:f8:5b:36:f4:6a:92:70:36:11:55:49:b7:b9:
7a:90:49:37:4c:b2:75:be:5f:cd:80:84:98:65:d4:
46:89:ee:7f:d1:c3:77:42:69:5f:af:a3:2e:b9:21:
9c:0d:44:57:41:4f:7b:4e:2e:62:cc:44:8e:63:0d:
ab:3d:ed:16:e7:77:3a:00:0e:4a:d0:1b:95:80:18:
22:d0:9c:37:55:c5:e7:48:93:be:1c:51:19:26:5e:
57:77:44:62:42:29:7a:1f:d1:e5:dc:8f:06:25:8e:
40:df:3a:29:60:1a:08:7f:69:81:9f:fa:71:dd:c7:
3a:a2:ea:84:b4:a9:20:ab:75:8c:08:2e:9f:ec:96:
e4:b0:77:d4:db:b4:0f:40:fd:6a:d4:1d:ff:46:2e:
93:62:96:55:02:40:ec:92:91:3b:68:91:82:c6:15:
1f:39:ed:60:9c:4d:af:bf:b0:d6:a2:ca:eb:1c:3b:
52:b2:af:d3:33:3d:aa:6a:8b:4e:7e:b8:2d:cb:85:
b1:dc:09:a2:bc:70:fc:ed:d2:1a:3c:3a:2a:76:c3:
58:de:98:37:80:a0:72:54:13:35:06:99:8d:72:12:
5f:3b:75:8a:6c:95:40:e1:72:6b:8b:20:97:af:b8:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:62:D8:93:82:EE:5D:3F:D4:94:8E:3B:53:6F:58:04:BF:BF:7C
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7c:bc:9e:22:e7:21:d9:c8:a6:42:3e:53:e0:08:58:5d:49:
f2:85:1a:20:5d:9e:5c:6f:d7:b2:8f:df:58:97:61:13:7b:c8:
e1:6f:6e:85:e9:4e:49:9b:56:6f:d8:dd:b9:7c:07:d6:46:a3:
67:68:59:c8:1a:0c:35:f8:fe:50:56:a8:27:fa:07:15:39:83:
33:2f:51:22:96:9f:61:61:29:55:8c:e8:71:9d:81:85:37:a4:
ed:fc:3e:da:34:a9:f4:17:fd:45:53:db:aa:aa:80:42:cd:aa:
93:6a:a0:60:4f:83:7f:2a:b2:9b:af:e0:96:a2:a6:a0:33:df:
e7:4b:44:7d:f3:35:a6:55:b9:db:ed:1f:90:80:70:d1:ad:bd:
13:be:d1:3b:2f:ef:9e:3d:52:bd:28:bf:f4:9c:4f:c1:88:12:
10:ff:39:e3:b6:3e:9d:8a:af:77:3c:bd:30:e5:33:ff:2d:ee:
0b:28:c5:ac:7b:f5:3d:15:21:fc:77:58:ed:35:28:a2:01:a2:
a8:c2:63:ac:49:21:6f:7e:05:cb:c9:cd:77:51:14:2b:2f:87:
86:41:51:01:fe:9a:7c:23:38:b9:af:7c:e0:29:74:5d:88:40:
15:2a:c3:31:2c:65:83:31:2e:1d:c8:b5:08:aa:8b:f3:53:bc:
0a:eb:af:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:41 2025 by rpki-client