Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: eweHCvRO6s7kI/1H8VB3jp5Dn8OdSD2wg1z2gw+7cOQ=
Subject key identifier: 38:AF:1C:6D:DC:C5:28:F8:3A:FD:3A:E2:F1:B2:6C:98:8C:4D:2B:AF
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 01974FD8254905D037D892D63BD0B7D59F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 14:00:54 +0000
Manifest this update: Sun 08 Jun 2025 14:00:54 +0000
Manifest next update: Mon 09 Jun 2025 14:00:54 +0000
Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: ChYEwVNLFEdLWk9rxUv/txVUDnZWTDrSKcipFfX0SMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:25:49:05:d0:37:d8:92:d6:3b:d0:b7:d5:9f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Jun 8 14:00:54 2025 GMT
Not After : Jun 9 14:00:54 2025 GMT
Subject: CN=38af1c6ddcc528f83afd3ae2f1b26c988c4d2baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e2:91:85:d2:2e:6a:64:a7:a9:ed:ba:b3:3b:
dd:58:e9:b3:51:4d:c8:6f:bf:69:5e:94:41:9c:e4:
74:c9:1e:18:67:dc:e1:da:02:8a:36:80:48:1e:d1:
b5:7f:f5:62:bd:48:7f:ed:57:bf:80:6c:1e:59:98:
4a:8c:8d:9c:52:98:cb:84:71:c5:25:0d:46:c5:9f:
e2:8b:3f:de:7b:48:a3:19:82:77:0c:d3:30:5c:d9:
8e:99:dc:e3:d1:04:26:f8:d1:08:63:bc:e9:5a:5c:
69:4d:1a:69:01:82:04:27:10:d1:1f:1f:95:f1:05:
0f:0e:2b:13:7e:ce:38:fa:09:e1:1e:dd:b8:39:6c:
72:d2:5e:74:ba:2c:8c:19:62:fa:f6:dc:31:e0:5a:
bc:81:ea:9a:34:a1:0f:f1:0d:fd:df:0e:cc:12:59:
70:01:e7:31:81:35:db:d9:b2:bf:1d:2e:14:01:56:
10:1e:97:c9:61:d7:00:15:af:bb:04:55:e0:c3:ed:
df:08:71:6a:9a:d2:2e:77:d5:50:78:ef:47:a6:bd:
c1:77:fc:36:14:b3:ac:6e:54:79:3c:7e:d0:18:5d:
bd:67:af:d0:60:02:46:92:15:f4:79:be:b7:be:78:
e6:31:3f:88:4e:9a:6e:7f:13:71:ff:bb:e0:8a:07:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AF:1C:6D:DC:C5:28:F8:3A:FD:3A:E2:F1:B2:6C:98:8C:4D:2B:AF
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:64:09:3b:85:ab:cb:d1:95:e9:c8:eb:df:41:87:41:26:79:
94:eb:c1:ca:93:a6:07:f3:df:df:6e:77:43:00:7a:ac:43:1e:
e5:a2:75:04:fb:3e:1e:05:33:23:21:c6:79:24:86:66:ee:ad:
d6:28:14:45:d6:f5:39:ed:85:23:72:91:3a:54:a1:15:79:52:
65:42:4a:73:24:9d:ef:56:73:f3:fd:f8:4f:7e:8d:ef:c2:17:
6c:47:89:45:74:ae:5f:39:b0:37:38:cc:3f:a2:8f:c3:a7:b8:
71:dd:10:dd:35:94:08:15:92:d3:40:f1:1a:42:8f:fc:bf:88:
74:26:47:0c:04:42:43:c6:30:a5:cb:a5:3c:78:62:9f:44:39:
3d:78:35:3e:84:7a:5d:15:ce:d0:b0:f0:5a:f0:01:d5:ca:e7:
98:12:fe:30:a6:76:c1:fe:bf:7b:47:a2:53:20:98:17:ab:32:
8f:f6:24:b7:81:04:71:71:68:ce:4e:c8:67:c4:20:ca:8f:51:
21:e1:fd:15:95:3a:4c:82:0c:72:c2:b2:25:e1:6f:8f:82:f9:
cc:61:a7:31:85:3e:9f:c1:5b:19:8a:49:3d:7f:ce:86:08:9a:
70:68:f1:ca:d3:5d:a3:c9:b4:7d:86:73:b4:ae:d7:77:27:34:
85:0a:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:03:11 2025 by rpki-client