Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier: IRC+JuZwSsipyPhJDQ21U767hxrm1o4WO7DJceXNE4Y=
Subject key identifier: 83:C2:31:F3:61:CD:E9:07:C5:11:A7:F6:90:5B:B2:14:FD:B1:0D:D1
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 0197B77CCC7F88D7352F37FFBDF0F5300416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number: 01BC
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: 0pHcVGxKroxOni6LgFtqt0banSw.roa (hash: Q40CZpsU0+RiU4O4YQFtbp1L/7Yepswrm+UiOB95fSM=)
2: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: jZ1fvxx2kMPhUOrbTluLa+AEX+q6rCGeMeMzcJHZzP4=)
3: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (hash: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=)
4: BnL626pcSJW84hvMFQ1G4Qrz04U.roa (hash: 3us+txzDTK3Uzjb5+hEvvCFMUnMHD1ygkmUal1BKvv4=)
5: DJsHawN4UfC7y3M-cvB8yQD8M34.roa (hash: 7erERMTFq4HfOI3TzB2K6MSVRmBE9HH5uCjfWAVLlJk=)
6: IJb4z-JA4Pknm90nR4yENhD6ZEQ.roa (hash: zWwaydkED8Tk3wpqobMces/D7ioL26YcgQSduiQCT+E=)
7: XcKo7ctmpUBqVfx0JPs9RsSZGCs.roa (hash: 1T8ZHVnMW4fbGLyFMTAkhaxOama9czmojEH2rCd/x6I=)
8: g31y-rKLvjosua_ERt6smuGZVHc.roa (hash: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=)
9: pPHmbMikVBACOA-xj0C6dNDZYpM.roa (hash: Tckf3zisW/juBkSkf5E1qa9SaVTAQq8IrgBpb3JvyX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:cc:7f:88:d7:35:2f:37:ff:bd:f0:f5:30:04:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=83c231f361cde907c511a7f6905bb214fdb10dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:ea:4b:a5:35:78:33:20:fe:c0:61:cb:da:
a4:f8:e2:9f:2f:37:47:a8:6d:dc:87:f1:82:eb:0b:
0d:c1:6c:ce:79:96:8a:fc:30:2e:9f:70:09:c7:21:
0f:c3:08:04:57:8d:26:36:42:fc:4d:46:0d:b4:29:
7a:b1:9d:9b:b2:e8:f9:73:e0:dc:3b:88:0d:a8:80:
fa:32:5d:35:c8:b7:ea:73:5a:b9:73:89:03:6f:f7:
7e:ab:73:b2:bf:53:ce:07:d2:52:14:00:2a:3d:dd:
97:bb:7b:ac:89:5b:fb:41:bf:d1:3b:7b:9d:13:5f:
25:c4:2b:00:bc:c7:47:a0:da:3a:7b:23:f0:6d:3b:
87:5f:bb:6f:0e:cf:0e:4b:f6:c7:8b:66:66:d3:ff:
0c:37:dd:ad:04:ac:43:6b:21:1e:64:b6:5e:82:47:
aa:b4:43:b0:8c:36:ec:b7:93:67:a2:90:51:2f:09:
47:69:9b:02:37:88:68:09:fd:13:3e:bb:75:86:f2:
a8:33:2f:b2:c3:0f:15:e9:df:7a:de:40:b2:66:1b:
d4:ce:f4:a0:62:9c:1d:75:32:f7:95:7a:3d:b7:d5:
c1:a7:63:76:e9:5b:0f:32:7d:b0:ee:f1:e7:71:4b:
a9:30:ae:88:f3:8c:db:13:85:89:a9:89:82:dd:95:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C2:31:F3:61:CD:E9:07:C5:11:A7:F6:90:5B:B2:14:FD:B1:0D:D1
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:58:14:34:c8:87:c8:43:d7:b4:54:e6:39:b9:7d:e8:0c:fa:
d2:0d:dd:b9:9c:f3:5a:46:c0:5a:f3:b1:ca:3d:d1:0a:24:f3:
5a:9f:18:b4:bf:20:e3:74:43:6a:78:0f:3f:63:f3:75:79:51:
21:61:85:3e:0d:8f:0b:28:96:b4:19:bf:25:ec:15:a1:5e:39:
a7:e7:55:0f:a0:94:1d:91:13:34:c4:31:e5:de:0f:7b:e5:53:
67:50:5c:f1:56:4a:7b:1d:2a:15:f3:7a:93:3f:f3:ef:d7:82:
0f:87:9d:03:1f:3f:dd:72:54:0b:77:49:ea:04:11:cd:3a:ed:
bf:7c:1d:3e:2a:a1:be:fe:8b:aa:13:c8:ef:f9:96:16:79:43:
3d:68:94:79:d2:e5:0c:b9:be:08:da:33:9e:66:93:0f:80:9d:
de:7b:c1:61:12:ec:b5:53:d8:bb:4f:95:54:0e:32:4f:48:dc:
2a:b2:f4:1d:7a:55:b7:e7:c7:b9:ab:b5:65:8d:cf:d7:11:4c:
bc:06:a2:d5:a2:3d:78:99:7d:7c:90:71:6c:1c:86:62:0c:c9:
d3:ca:44:ba:8d:78:a0:d9:dd:5c:55:2a:41:80:b3:c8:ca:9a:
07:a6:18:1f:6a:b1:7b:85:95:6e:b7:ea:2f:57:0c:37:47:9a:
28:0f:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:51 2025 by rpki-client