Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: QkzKqIktetJm0pxQRBqfyTIXa3ahO28bEbzYqAu27RQ=
Subject key identifier: 16:95:CE:24:C1:27:F3:0A:32:70:1E:F7:B7:73:01:4B:98:F4:A7:D6
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 01976CCFCED95AC2CD06504F2E77FB229F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 05:00:47 +0000
Manifest this update: Sat 14 Jun 2025 05:00:47 +0000
Manifest next update: Sun 15 Jun 2025 05:00:47 +0000
Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: LPePBit8fV8gEvZge7/lEo6f5djGu3EKd/fwPP6AGuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ce:d9:5a:c2:cd:06:50:4f:2e:77:fb:22:9f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Jun 14 05:00:47 2025 GMT
Not After : Jun 15 05:00:47 2025 GMT
Subject: CN=1695ce24c127f30a32701ef7b773014b98f4a7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:c2:ab:3f:a0:6e:00:49:51:bb:d5:2a:58:
bd:38:7c:54:db:eb:3e:ac:4e:9f:48:fd:6a:95:02:
24:e4:d5:48:8d:e9:79:30:70:e4:74:28:c4:9c:6c:
73:d6:70:df:45:ed:4b:55:93:8e:f3:18:f5:d9:58:
71:0c:78:b6:d1:e1:8d:ca:a5:32:ab:9a:f7:24:6d:
ca:ab:7f:53:de:e6:23:ba:7a:d7:2a:75:df:d5:14:
83:2a:47:b0:9a:1e:14:5b:9d:c7:c5:7d:8b:dc:ab:
10:82:fe:2a:7e:fb:0a:c0:43:34:d2:8b:e0:1e:7c:
f3:4a:95:86:39:72:23:23:4f:fd:56:e1:1f:7d:1d:
d8:34:b6:27:de:8b:f5:1c:9d:55:cc:ef:bf:e4:f1:
f1:d6:1a:7f:d8:b2:50:18:8b:fd:06:59:de:d2:9b:
3e:70:ba:e8:4e:78:01:99:18:c6:22:5e:05:89:8f:
36:ae:f9:46:ae:94:a2:c9:bc:cd:cb:3d:aa:e0:ea:
f3:15:9e:dc:5d:80:69:48:ee:50:64:39:26:3a:49:
1b:f8:82:af:14:2b:b5:38:5d:10:15:09:d1:e9:76:
ec:2f:8d:a7:f7:5f:16:82:9d:c9:02:c9:1d:63:19:
3c:29:60:eb:dd:9e:f3:16:e6:f2:8c:bc:7f:70:76:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:95:CE:24:C1:27:F3:0A:32:70:1E:F7:B7:73:01:4B:98:F4:A7:D6
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:93:88:c8:5b:68:51:7e:6f:02:e2:d5:84:4d:37:3d:b0:cf:
63:65:e8:26:3a:3b:7d:df:13:29:04:3a:ea:9a:32:29:75:be:
86:d1:10:f0:cb:2c:2b:d0:df:a1:4e:0e:b1:ca:af:2f:81:6a:
6e:a1:07:ce:6d:62:36:c3:e9:e1:ea:4c:51:68:73:cc:7e:28:
43:59:9b:d7:c4:ec:17:a8:45:b8:7c:b3:00:67:49:32:e1:7d:
a2:d3:0f:cf:81:d6:f0:02:ad:47:f6:73:d2:24:2a:ab:d5:1b:
6c:f6:80:6c:ae:c2:d8:22:37:9f:26:e0:bc:6f:83:a2:42:fa:
50:d7:13:15:bf:fe:8c:a5:fc:19:17:bc:ff:12:2c:6b:9c:c8:
e5:ec:c6:a1:40:87:53:cc:55:43:b0:f4:af:1d:2a:37:de:44:
a2:b7:d4:20:54:9f:0f:6f:62:67:a7:d4:29:e2:69:02:e8:d6:
9e:e0:1a:f0:ba:6f:68:31:f1:6f:2d:8f:87:d0:d0:d3:a7:3a:
4c:76:b0:0c:9f:a5:5d:53:73:32:8b:66:cb:3e:34:b5:86:24:
3c:9a:66:1e:87:e6:42:26:b3:2f:95:22:61:11:86:eb:9a:fa:
e3:45:61:07:a5:fb:39:af:e3:fd:f7:59:f8:7d:75:64:35:7d:
b8:2d:25:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:39:04 2025 by rpki-client