Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: 2dSWQpMFiVoiChY0cBEiMH8cAnCGIMYejtmKARq8NoM=
Subject key identifier: 04:BF:06:3A:AC:5C:67:83:9D:8A:C3:1E:21:5E:BA:BD:CE:76:C8:67
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 0197CCBA71F415FFC3FF106ADE0A44608689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 1487
Signing time: Wed 02 Jul 2025 20:01:00 +0000
Manifest this update: Wed 02 Jul 2025 20:01:00 +0000
Manifest next update: Thu 03 Jul 2025 20:01:00 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: Kg5ZKNvmS8WE9U9/b34Rw6TppWB+/OFxokU0GNDu+b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:71:f4:15:ff:c3:ff:10:6a:de:0a:44:60:86:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Jul 2 20:01:00 2025 GMT
Not After : Jul 3 20:01:00 2025 GMT
Subject: CN=04bf063aac5c67839d8ac31e215ebabdce76c867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:2b:0c:1a:41:cc:4b:89:6e:6f:ac:54:02:
95:d5:f8:59:a2:23:d3:96:2e:03:ed:5c:c0:3f:aa:
16:34:57:da:04:8b:d1:c3:a0:20:49:3a:74:90:ba:
53:61:68:35:f9:49:75:a4:78:22:34:4d:fe:3d:be:
8b:96:b3:ff:43:8e:2f:df:9d:cc:ba:1f:4c:2f:d8:
b1:f6:e0:65:8e:29:09:64:71:99:cb:23:56:3a:a2:
5c:e4:f7:9a:fb:86:86:c5:d2:c6:db:af:3b:20:ef:
e9:8a:fc:3b:e1:4f:43:b8:db:1b:38:99:6f:29:26:
27:96:05:5f:d5:df:93:9d:ca:dc:35:34:38:1f:a4:
46:70:f1:0a:22:37:39:8f:89:e3:f4:91:fd:25:ee:
39:5b:fe:8e:2d:95:19:91:af:b3:46:0a:38:c9:d5:
66:71:37:97:de:15:10:b9:51:0e:55:9d:b6:7e:38:
cb:f1:f1:f4:82:2d:78:05:c4:8b:16:7a:fd:05:a5:
cb:24:7c:11:33:ea:7e:68:90:d4:12:39:34:36:6b:
38:b2:4b:e5:22:85:6d:01:46:40:41:3b:ad:85:8d:
0a:03:47:3e:9b:f3:74:da:35:db:c2:4d:16:df:3c:
56:4c:33:89:0b:31:be:02:fa:49:42:b0:6e:e4:68:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BF:06:3A:AC:5C:67:83:9D:8A:C3:1E:21:5E:BA:BD:CE:76:C8:67
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:aa:a4:f0:65:8f:2c:00:dd:d6:7d:19:12:3b:cc:f7:b5:a1:
b7:d9:76:b7:d8:4e:1a:85:fe:fe:37:98:23:a9:58:d6:7c:b9:
a6:51:68:02:0a:0e:40:84:8b:ca:76:58:a7:bf:7e:f8:f8:1d:
70:43:2e:ae:cb:f0:f5:c4:6f:6b:4b:87:84:09:b7:2f:7d:89:
9e:dc:fc:ee:4d:10:cf:47:1b:a6:a0:f3:cd:c1:28:ef:e7:87:
f0:fc:c3:3c:8c:95:88:07:9d:6a:95:b2:9e:7f:e9:7b:5c:f4:
a6:ac:e2:3c:df:3e:ea:4f:68:4d:d1:bd:24:99:33:06:c3:80:
58:97:ed:b9:2d:43:2b:37:2b:fe:9f:11:42:c7:b6:4f:61:2d:
f2:4d:2a:92:16:7f:3a:75:90:77:3a:49:a5:25:fc:34:be:65:
b3:64:27:a2:64:69:ca:cb:cb:fd:7d:cd:6f:40:57:67:fb:12:
0b:95:b1:80:fe:a8:4b:86:29:81:61:7e:5d:85:10:af:f3:aa:
59:f1:07:1c:3c:7a:71:b5:eb:5f:25:61:8a:de:0e:0e:c2:cc:
3f:45:3b:f6:b9:11:59:4f:f5:39:c7:05:2b:18:81:1a:c2:f3:
e1:59:e0:02:a0:53:8b:7a:34:8a:5c:56:97:44:88:40:2a:16:
d2:d2:f2:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMunH0Ff/D/xBq3gpEYIaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Yzg4MTI0N2NhZGJjYmY1MmFhMmFkNzYyY2M3NDU0YTdh
ODcyNmUwHhcNMjUwNzAyMjAwMTAwWhcNMjUwNzAzMjAwMTAwWjAzMTEwLwYDVQQD
EygwNGJmMDYzYWFjNWM2NzgzOWQ4YWMzMWUyMTVlYmFiZGNlNzZjODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwScrDBpBzEuJbm+sVAKV1fhZoiPT
li4D7VzAP6oWNFfaBIvRw6AgSTp0kLpTYWg1+Ul1pHgiNE3+Pb6LlrP/Q44v353M
uh9ML9ix9uBljikJZHGZyyNWOqJc5Pea+4aGxdLG2687IO/pivw74U9DuNsbOJlv
KSYnlgVf1d+TncrcNTQ4H6RGcPEKIjc5j4nj9JH9Je45W/6OLZUZka+zRgo4ydVm
cTeX3hUQuVEOVZ22fjjL8fH0gi14BcSLFnr9BaXLJHwRM+p+aJDUEjk0Nms4skvl
IoVtAUZAQTuthY0KA0c+m/N02jXbwk0W3zxWTDOJCzG+AvpJQrBu5Ghp2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAS/BjqsXGeDnYrDHiFeur3OdshnMB8GA1UdIwQY
MBaAFMnIgSR8rby/Uqoq12LMdFSnqHJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQt
N2VmZTkwNWZmMjkxLzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQtN2VmZTkwNWZmMjkx
LzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqqk8GWP
LADd1n0ZEjvM97Wht9l2t9hOGoX+/jeYI6lY1ny5plFoAgoOQISLynZYp79++Pgd
cEMursvw9cRva0uHhAm3L32Jntz87k0Qz0cbpqDzzcEo7+eH8PzDPIyViAedapWy
nn/pe1z0pqziPN8+6k9oTdG9JJkzBsOAWJftuS1DKzcr/p8RQse2T2Et8k0qkhZ/
OnWQdzpJpSX8NL5ls2QnomRpysvL/X3Nb0BXZ/sSC5WxgP6oS4YpgWF+XYUQr/Oq
WfEHHDx6cbXrXyVhit4ODsLMP0U79rkRWU/1OccFKxiBGsLz4VngAqBTi3o0ilxW
l0SIQCoW0tLyMQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:34:29 2025 by rpki-client