Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: t+yxKW+aPSRTYtb7qV7oBavuqyo9UofhzpYZ/z+Wt6s=
Subject key identifier: 93:E1:B0:DD:F6:CE:E3:69:3C:F1:6B:ED:3B:2A:2E:EF:7E:E0:A5:91
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019A240A25ADD415F6BD97D9FEFB6EBF630E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 05:00:35 +0000
Manifest this update: Mon 27 Oct 2025 05:00:35 +0000
Manifest next update: Tue 28 Oct 2025 05:00:35 +0000
Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: UMFYPXUhXyIjQorTfpL9FIkVIWujLrh6yd7ljVZNlR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:25:ad:d4:15:f6:bd:97:d9:fe:fb:6e:bf:63:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Oct 27 05:00:35 2025 GMT
Not After : Oct 28 05:00:35 2025 GMT
Subject: CN=93e1b0ddf6cee3693cf16bed3b2a2eef7ee0a591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:d7:3a:f4:88:a2:4a:e6:12:18:93:32:78:
bb:e9:94:2c:4d:cd:75:71:07:c8:28:3a:e8:16:b5:
e5:c2:0b:67:90:fc:1b:c7:49:8b:0c:3c:d5:6e:aa:
b0:e1:fa:52:e2:9c:3b:58:e3:3e:dc:5c:c0:88:42:
83:e3:47:87:9e:f2:a4:a1:6d:6a:f3:c8:53:fa:53:
43:72:46:ca:b9:ae:54:7f:8e:a7:a3:a2:67:f3:97:
fd:a8:1b:9c:f3:b9:5a:2c:53:fc:29:15:f9:4b:3c:
38:b3:55:a5:d7:b5:ba:65:53:f9:fa:1d:48:a3:44:
8b:6b:44:6d:71:27:c0:7e:8f:5b:b3:c4:43:e9:2b:
6c:a0:ff:b5:43:d5:4e:57:14:47:49:ab:35:e5:a4:
88:e3:eb:3e:ce:b7:ad:3d:53:39:41:0d:fd:8a:d9:
33:8e:64:65:34:01:db:a0:72:02:23:51:45:b6:b8:
80:d3:e7:fa:81:99:d6:81:14:e3:bf:83:d9:5d:eb:
54:be:33:f7:65:a6:b5:bf:c3:e9:12:4f:bb:18:0c:
e8:41:d9:19:f5:64:86:10:63:7b:a7:27:4c:02:92:
44:21:55:5b:1c:ad:7a:99:94:34:70:48:67:f3:4d:
8d:d6:95:6a:b9:47:ad:60:85:74:d7:92:34:c4:c0:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E1:B0:DD:F6:CE:E3:69:3C:F1:6B:ED:3B:2A:2E:EF:7E:E0:A5:91
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1f:32:3f:47:92:b1:d6:82:e0:4e:b4:78:bf:d7:81:02:37:
66:22:0f:09:d7:67:81:20:ec:fd:6c:81:f3:60:32:6c:c4:78:
50:46:1f:8b:d6:ae:8d:f8:b3:a1:a4:5c:d5:c4:17:4c:5e:6f:
53:d5:b2:bb:f8:d7:2b:ea:53:c3:93:16:01:26:80:28:10:92:
2a:78:ac:62:6a:77:7b:d8:9b:10:14:23:62:1d:00:6a:4a:55:
f1:8d:09:6e:1f:2f:f9:46:59:aa:e7:0a:2a:c9:8e:22:28:05:
b1:3c:95:ec:92:01:61:c7:c5:43:d0:90:e7:40:69:eb:d8:fd:
d7:72:11:23:fd:9f:8e:69:b0:36:8e:42:aa:cc:8f:f0:29:d1:
65:9a:dd:c2:ef:e6:64:1d:fc:f6:01:45:39:ee:6d:ef:a8:42:
90:20:0c:fa:67:3e:00:17:03:b1:4e:ee:da:ce:6e:32:ae:b8:
0e:28:f3:f7:dc:e9:63:6e:c7:18:95:8f:cd:90:51:f2:3c:a8:
5b:97:0d:19:0d:9e:d9:91:02:fd:53:59:be:a1:0f:2c:81:63:
17:39:31:3c:c2:b4:ee:46:9a:0b:e6:4b:82:09:29:5c:ac:e6:
b9:e8:0d:0d:de:a7:a8:4a:b4:43:2f:63:ba:ec:f7:ca:41:d6:
22:c8:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:23:37 2025 by rpki-client