Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: Sh48Job+tvjAlA65uvZQIRzOlf9woi/W0UTk/FGRCTg=
Subject key identifier: B7:77:1B:33:D0:B3:62:E5:97:87:80:56:D6:3A:D7:29:13:05:CB:44
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 0198529F0CE7AD2FF17E5C3C3DC69C1D31C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 20:00:11 +0000
Manifest this update: Mon 28 Jul 2025 20:00:11 +0000
Manifest next update: Tue 29 Jul 2025 20:00:11 +0000
Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: 8lKfSNYloG8wHqP+KSY4c20k/4EMssNIj8ZjY4qD7SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:0c:e7:ad:2f:f1:7e:5c:3c:3d:c6:9c:1d:31:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Jul 28 20:00:11 2025 GMT
Not After : Jul 29 20:00:11 2025 GMT
Subject: CN=b7771b33d0b362e597878056d63ad7291305cb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:0d:4a:ee:c0:8b:3b:4e:fa:71:c3:86:1f:
0e:34:06:17:76:2c:b3:83:28:a0:e9:b7:3e:c8:70:
a0:3d:df:98:4e:2d:9a:1b:59:6f:2c:f8:ba:4d:7a:
67:f5:57:ae:76:4f:eb:7f:5f:a3:b4:e7:ea:9b:4c:
1c:cf:c5:81:81:60:e8:c5:e0:f9:ff:5e:27:1d:d3:
a6:38:51:0e:4e:4d:23:aa:82:b0:d1:3e:00:86:ad:
71:f0:39:e2:20:0f:dd:90:ba:a5:e8:03:8c:60:66:
ce:04:7a:f0:65:b9:20:5a:8d:fc:0a:96:8c:a2:9a:
da:bc:b8:6c:b3:e3:7c:80:60:60:26:f1:88:73:27:
15:51:6a:22:d9:34:b5:8e:b1:1b:82:7f:05:d4:4d:
92:e6:f0:b9:07:81:fe:83:ec:10:a5:5f:94:a2:1c:
3d:b9:f8:a3:68:9c:ad:e9:96:63:ba:4d:1f:f4:b5:
de:15:c9:4e:51:12:f3:f2:9f:70:64:d4:f7:f3:22:
cc:20:0c:0d:b6:8d:ba:72:7d:99:dc:b9:37:9c:99:
19:a7:5e:be:cc:f8:bc:aa:ef:2e:f2:c3:41:71:77:
5b:10:02:da:04:57:5b:0c:8c:0f:4e:81:24:71:04:
ef:5f:bf:c0:b5:7e:b2:96:85:73:6c:fa:4f:e5:25:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:1B:33:D0:B3:62:E5:97:87:80:56:D6:3A:D7:29:13:05:CB:44
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a8:3a:80:ff:fa:60:af:8d:47:4e:c9:9e:4d:89:37:09:19:
21:a0:57:88:5f:f2:e1:ec:18:6f:90:31:e1:c3:6c:c6:5d:12:
65:05:d9:82:db:3c:0f:a8:d5:7b:b0:9f:4b:57:78:f3:35:07:
91:33:91:c4:ce:a9:d8:e3:e6:fd:f2:e1:ef:50:ea:5d:70:10:
28:6a:05:ae:a0:00:49:ac:df:91:96:01:4f:cd:85:62:63:79:
af:89:4d:11:00:28:e3:54:81:29:55:bb:40:5e:4d:e6:9f:43:
fd:75:ce:20:28:10:48:c3:7f:91:4e:12:eb:ab:9c:d6:f7:cb:
1d:8d:51:4a:ad:ec:3a:37:df:45:19:6b:16:02:34:03:56:32:
88:fe:d1:33:cc:a1:09:31:f8:54:01:f4:c3:f0:43:07:fa:0b:
80:06:e0:ef:c5:e3:06:56:c8:3b:84:2a:e3:8a:a8:93:15:f3:
6c:3a:95:74:6a:d6:ec:35:b7:9f:1c:bd:80:71:8d:b5:d7:34:
b5:3c:ca:e9:48:2a:d6:1f:3a:51:b9:03:14:0f:5f:2a:3b:bc:
44:da:4d:14:c5:9d:20:88:8b:66:74:87:9f:2d:4d:5f:0f:b1:
a3:1e:85:1c:e8:41:1d:44:36:a9:9e:3e:c3:ef:6a:6f:78:cd:
51:c9:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:10:03 2025 by rpki-client