Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: BNZBXb1yuRU6x78Sh7wBfO8D5kXAV5b+hLBqozL6p0A=
Subject key identifier: 19:65:81:A5:75:D4:15:2A:87:C5:50:45:FE:D8:4C:28:AD:5E:C4:8F
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 019A251C61DC7AD2F65A044FEF234416420F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0E2C
Signing time: Mon 27 Oct 2025 10:00:08 +0000
Manifest this update: Mon 27 Oct 2025 10:00:08 +0000
Manifest next update: Tue 28 Oct 2025 10:00:08 +0000
Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: +TPfpHK4nPwD/xtZfhLUmiBctueM24nnVfQMJvAWUcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:61:dc:7a:d2:f6:5a:04:4f:ef:23:44:16:42:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Oct 27 10:00:08 2025 GMT
Not After : Oct 28 10:00:08 2025 GMT
Subject: CN=196581a575d4152a87c55045fed84c28ad5ec48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:d6:8a:2e:db:70:e4:87:c9:a4:15:aa:70:
87:54:51:13:5f:55:e6:43:44:ad:93:b2:7f:c0:91:
bc:cb:37:40:7a:ff:79:94:04:9c:ba:b5:4a:a6:93:
12:22:48:ac:cb:65:47:6b:10:61:50:d6:03:fb:bb:
ca:a1:8a:2d:5e:78:e3:85:c0:c3:27:d2:c5:e9:52:
cc:d7:4a:9a:f9:3f:87:56:f3:76:f4:0c:9e:0e:ef:
84:58:e8:89:59:10:31:2c:b6:a3:3d:40:e7:0e:b0:
d9:c3:67:0b:9b:3c:17:12:78:2d:d5:10:b1:50:2c:
9e:db:b1:f3:99:9d:36:42:4f:a0:e2:22:fa:e3:bd:
aa:8c:bf:34:79:86:58:be:6e:c9:f5:31:1d:1e:d5:
dc:2b:b4:51:3f:f5:43:c0:1b:22:6f:a5:2f:7f:aa:
5c:2a:85:de:a4:b3:10:1d:7c:87:3f:a0:fb:0d:f1:
31:bb:36:6b:02:a9:7a:c8:e2:18:a5:ca:e7:0b:dc:
48:45:c0:6a:97:3f:57:6a:46:96:50:05:cc:61:2d:
32:7f:04:4b:b2:fd:67:1f:a6:91:93:11:7d:f2:36:
02:d0:df:2c:3e:15:a6:cf:58:5a:ba:a0:93:38:6e:
61:22:d4:db:6d:24:ca:6c:7f:ea:e5:29:f7:4c:7b:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:65:81:A5:75:D4:15:2A:87:C5:50:45:FE:D8:4C:28:AD:5E:C4:8F
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:17:28:90:43:97:f8:d9:c4:dc:7b:c8:68:19:b5:d8:bd:bb:
90:11:42:20:16:c4:14:30:01:d6:df:7c:8e:00:b7:bf:93:8a:
24:9b:43:21:ec:33:ef:cb:9c:39:17:cf:30:3b:78:d7:30:f5:
77:d8:48:87:34:dc:c5:30:8e:5d:df:f4:36:d6:56:ad:ee:f6:
e6:fe:c3:e3:aa:d3:ac:8c:8b:5e:63:71:df:ef:73:3e:e6:c0:
de:a6:a7:3f:47:fe:c8:ae:05:7d:be:4d:d5:01:29:d0:83:24:
71:f4:ff:89:89:0f:1b:b6:ae:7b:23:2b:fa:f1:a9:bd:bb:39:
bd:a6:19:e9:6b:59:c7:94:4c:64:22:9c:31:ea:d6:44:d9:cd:
d6:ef:df:5d:2d:d3:8a:ed:49:59:35:31:08:76:83:b1:94:34:
24:38:f7:9e:bf:0f:5c:d5:e0:de:0f:33:aa:2b:61:62:b1:4f:
f7:91:90:c2:62:29:2f:68:ef:00:6c:9f:43:35:ce:0a:96:13:
e0:eb:45:26:b7:c5:b1:bd:44:60:4c:f9:7b:cf:a3:a1:da:c3:
ae:d6:87:a8:b7:a8:91:ac:2b:08:e7:54:d6:0c:81:8b:d0:25:
ad:ea:dd:6b:62:a0:d1:b6:b5:e1:f0:81:4f:fd:6d:6e:21:21:
b0:53:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:07:18 2025 by rpki-client