Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
File: yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json)
Hash identifier: pBik5lyibfqWjvth6IpDF3UXvB3UgO7Rr1k/ADdAGig=
Subject key identifier: 7B:EE:12:1B:35:EF:08:1B:19:33:8E:6E:E3:FE:FC:6E:77:F8:DF:1E
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 0197B820BFC9B91014D5AB5347C6D198697D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
Manifest number: 1249
Signing time: Sat 28 Jun 2025 20:00:43 +0000
Manifest this update: Sat 28 Jun 2025 20:00:43 +0000
Manifest next update: Sun 29 Jun 2025 20:00:43 +0000
Files and hashes: 1: J64w76zXIm6hBV_NCpHfs00xQ5M.roa (hash: tW24A+133JMJcQQWR3X2EMPjynjBMoPzLLODpQzP0s0=)
2: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: HyeH7p27RVKaQTJeyyKcQQmrgwvdXSU8T5fegUadsGo=)
3: zs6ZXDVhulOywUO2T8QRP9BjX5c.roa (hash: mDD3P3Ub10TzUpELhZJa1aGQdkKfYd5Nh93FhhJJLs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:bf:c9:b9:10:14:d5:ab:53:47:c6:d1:98:69:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Jun 28 20:00:43 2025 GMT
Not After : Jun 29 20:00:43 2025 GMT
Subject: CN=7bee121b35ef081b19338e6ee3fefc6e77f8df1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:79:9f:b4:73:3b:85:6e:29:fb:4c:c7:52:
16:68:a7:02:42:ee:3b:c3:cd:aa:5f:5f:fe:18:ca:
a2:50:f7:cb:6e:8d:47:9d:4e:9d:89:bb:72:79:8e:
be:e4:71:a0:20:0d:b0:5b:38:b4:9a:9e:43:22:ff:
f7:0d:f7:c9:5e:63:e0:2a:9c:db:63:fe:96:e8:ff:
f6:5c:a0:e5:95:91:ef:b6:ef:1a:13:de:cf:7c:af:
47:20:9e:85:0c:79:aa:9c:17:12:b2:1d:a0:33:68:
15:b2:08:6a:1c:af:ed:b8:c3:6d:8a:97:f4:c1:97:
cc:4d:1a:34:18:24:3c:07:ac:7b:53:fc:4f:47:14:
01:d1:ee:dc:ab:34:e1:97:d3:2f:3d:e0:a7:6a:3f:
70:5b:d9:65:45:8e:df:1e:17:40:66:bf:dd:ef:91:
34:35:e9:5d:42:e9:fb:76:ad:5b:e1:41:c9:27:8a:
17:e9:10:04:e7:21:ab:b5:dc:c9:3c:c6:b0:15:2d:
31:8e:4d:fb:d8:b9:97:50:8b:cf:21:3e:26:d1:6e:
6b:b7:4c:37:c6:08:68:91:a7:93:f2:3f:83:07:f8:
b0:91:f1:2e:23:6c:0b:2e:76:e2:57:7b:a1:b6:77:
85:4b:73:eb:c9:ea:fa:10:5c:0f:be:6d:a4:56:8c:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EE:12:1B:35:EF:08:1B:19:33:8E:6E:E3:FE:FC:6E:77:F8:DF:1E
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:86:d3:96:a8:3e:48:b4:91:89:8f:cb:0f:6c:e2:93:9d:
5b:ce:ed:e2:ce:66:88:d9:a8:4b:81:07:e1:f1:24:5c:dd:55:
96:82:2c:46:86:3c:21:1e:da:58:4f:b3:91:71:63:4a:ea:8f:
cd:d8:33:3b:18:a2:ea:1d:4c:6e:52:26:a6:83:7d:93:1b:37:
02:69:41:ca:ff:49:de:eb:e7:2e:73:21:68:15:e8:00:89:22:
ce:70:d8:3d:87:c3:e4:04:c9:4b:ee:59:7f:1e:76:fb:5e:e9:
62:35:7b:eb:96:8f:e5:78:18:02:80:f9:c2:04:45:92:2e:2a:
6b:2e:5c:5d:63:8a:fd:34:ca:a1:81:ac:cd:76:12:1c:0b:30:
cf:c0:55:04:8d:6e:e6:89:32:c9:31:74:bc:48:e7:39:0e:d1:
0c:2a:e9:ff:0c:60:53:f2:11:c5:ce:bf:a9:e3:cc:b7:7c:16:
9d:3c:63:18:b8:21:c8:90:be:ee:c0:31:c7:95:d0:2f:01:15:
66:b1:0c:8a:09:3f:56:18:ce:e4:79:d6:c1:f4:ef:fe:5f:70:
27:80:55:77:9c:35:0f:18:38:f2:57:b3:48:aa:f8:0a:20:6b:
54:25:62:3e:c0:2b:24:bd:1a:97:a8:4a:0f:60:8f:af:0d:b2:
de:a1:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:17 2025 by rpki-client