Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: vt3sraTe/f9x5VH0qw4rb23Haz9L2xetTHJ01BLtbgk=
Subject key identifier: 82:B4:D7:41:40:99:A3:98:19:89:AB:F6:32:2C:DD:30:89:3F:7C:09
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 0197B70EBDFA86F28AA2B66B3B29CB0BF0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: __KLjvjgMO1LuKrx6zZXZJBcRtk.roa (hash: kZSjdOtgx956Q9WcOxsnl5QBMbkPJAPdg2gED1ZbQy4=)
2: xmOvbRNpbfTNvGRi0NGmoChwF8k.roa (hash: 7oU4y3FJaTZ6zlZMUwxbLqzJR9lqEVzJSwfHVW5xI4s=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: 2rHgurmfrwMDTKM3mIMH0r9YGkRuKWEDFFHcdshgk3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bd:fa:86:f2:8a:a2:b6:6b:3b:29:cb:0b:f0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=82b4d7414099a3981989abf6322cdd30893f7c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:6f:c8:f0:65:59:04:4b:8c:78:c4:a4:4c:
df:2a:fb:bb:1a:db:7f:0d:ea:99:dc:ac:ac:0f:cf:
88:46:b6:7c:16:6e:9d:7c:f6:96:9e:00:47:27:a1:
5c:a3:1d:58:4b:61:3a:9a:bb:28:05:06:bd:81:7d:
cf:ac:57:a8:e5:26:9b:51:ab:01:4e:54:f5:c6:d6:
9d:e9:bb:7c:ae:8c:1e:db:e0:1d:c8:33:87:c8:70:
e8:da:59:be:e3:54:1d:95:6a:ae:f9:f1:2a:61:04:
e0:4b:c3:69:7c:87:fd:78:72:51:b9:33:48:59:22:
4b:c5:32:2d:90:6c:18:23:98:0b:8a:8a:27:cd:05:
a1:90:65:ed:95:5b:fd:5e:e4:eb:1b:d3:d4:43:be:
be:ea:5e:04:0c:4f:00:60:1f:d0:10:6b:64:81:f3:
52:cb:20:3c:77:68:4a:55:65:5a:59:f1:b1:14:3f:
1e:42:44:1d:72:6e:cc:f6:20:ed:02:13:77:c1:fb:
aa:c3:df:b1:f2:69:b3:47:8b:78:46:d8:7c:b2:ac:
31:0a:3d:47:94:b7:36:ce:2d:98:d5:68:c4:06:5c:
00:fc:bc:d4:51:d4:a6:d0:e7:b0:f1:15:92:56:db:
d9:6b:63:a4:d5:63:e0:58:17:ec:5d:2b:a8:51:ed:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:D7:41:40:99:A3:98:19:89:AB:F6:32:2C:DD:30:89:3F:7C:09
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a3:8b:e9:84:72:b9:d1:88:ce:c0:b5:c1:90:75:19:29:d5:
1f:72:8e:97:72:0e:7d:c6:4e:67:d6:ea:ed:98:4e:fc:df:78:
f3:5e:6c:60:29:f7:f2:3f:4d:b7:41:b8:ea:2c:8d:fd:31:86:
70:10:12:6e:b9:04:b0:59:87:6d:8d:ca:ff:77:3c:cb:9f:2e:
03:05:26:da:e9:c1:6c:36:1e:4a:dc:59:67:4a:03:7c:2c:9f:
38:54:3b:92:3b:23:ef:e2:5e:a2:87:b3:10:ce:c5:9c:4f:6b:
56:b7:19:22:3f:e0:27:64:5f:ae:83:f4:6c:d0:b4:92:b8:34:
d3:f7:4e:51:ce:41:5a:bc:02:05:7c:08:95:7d:f7:16:f4:91:
73:65:ad:39:f0:1c:d3:f9:00:28:c9:36:b4:54:48:d3:7f:08:
53:f2:5f:ae:aa:3d:9e:20:54:e8:0a:a8:da:aa:ed:3e:7e:66:
5e:8c:5a:f3:b5:c5:17:f0:26:38:fc:9b:f8:8c:b8:84:3c:4d:
54:56:8b:11:8d:d1:02:76:80:27:9f:88:38:26:46:5f:ec:04:
6a:0f:fd:85:9d:29:b9:96:b3:1b:7d:82:3d:02:31:4d:54:87:
22:5b:85:6d:80:7a:8c:4b:68:73:3d:9b:d0:c1:fb:e8:25:ba:
0d:7c:d2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:24 2025 by rpki-client