Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: 0h371HmbXv5bbjJXIwFMtY6lJqNYTHYVkBv29y2HVZA=
Subject key identifier: 49:EF:91:EF:54:0E:ED:63:8E:63:A7:1D:46:FC:9D:A6:BE:2C:E7:C9
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019A5075041589EED610AB8304C39F8A7889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:37 +0000
Manifest this update: Tue 04 Nov 2025 20:00:37 +0000
Manifest next update: Wed 05 Nov 2025 20:00:37 +0000
Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: bQ5SXLbFYOqtMjd5cIc7wYi615+nJeGbiau4v+BHTUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:04:15:89:ee:d6:10:ab:83:04:c3:9f:8a:78:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Nov 4 20:00:37 2025 GMT
Not After : Nov 5 20:00:37 2025 GMT
Subject: CN=49ef91ef540eed638e63a71d46fc9da6be2ce7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:a0:33:c2:7a:a1:cd:4a:41:bf:b7:c8:b0:
d6:34:bd:9d:d7:ca:34:01:e9:89:23:2d:d1:61:71:
67:9f:06:1e:e7:47:6c:41:70:f9:22:53:3f:9f:8e:
f6:fe:41:db:45:27:22:c5:b4:e6:ef:a5:c8:3e:8f:
30:b8:b9:08:ea:15:80:1b:e1:47:56:f2:0f:ac:1c:
2d:83:ca:69:d3:89:93:c3:b0:42:90:53:65:27:18:
92:2f:03:6a:9b:8d:83:48:64:7c:bf:72:eb:1d:11:
4a:7d:6a:fa:a4:24:cf:cb:10:12:b0:bc:f7:22:42:
de:6c:2c:df:0f:d2:a4:d5:f0:f2:29:29:2e:c0:ad:
ea:9b:c0:8f:f6:01:b5:50:ac:43:fe:45:e8:cb:4c:
d3:bf:8d:f5:14:04:88:7b:02:ac:cd:9a:af:cd:dd:
b3:a7:89:8d:78:a6:52:4c:dd:d4:7f:dc:12:22:9a:
ec:50:51:82:44:82:59:8a:5e:9f:aa:94:29:4e:21:
27:59:c8:17:56:19:24:c0:e3:42:15:6a:9c:21:28:
fb:81:e6:47:93:c4:22:7b:9a:b0:f2:a6:69:ac:b2:
71:12:d2:6a:e1:88:c7:b7:0a:15:78:f8:cc:63:8b:
09:b1:18:fb:9d:4e:2f:f7:90:4e:28:68:1e:ab:ab:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:91:EF:54:0E:ED:63:8E:63:A7:1D:46:FC:9D:A6:BE:2C:E7:C9
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:05:6a:1c:64:8d:91:b1:c7:75:07:74:78:7f:a0:34:11:a4:
48:a9:d4:4b:6c:c1:51:21:44:9c:eb:f0:e1:33:e7:81:38:a0:
2c:91:86:39:17:93:3c:36:30:ce:8f:a4:33:d5:0e:55:33:fc:
90:1e:61:34:2e:ee:a0:a4:16:6e:72:ee:79:c6:a9:65:8b:56:
00:12:60:d0:4b:22:70:4b:e0:de:50:05:b0:07:c8:32:43:86:
ce:ac:b0:47:8b:c1:80:b2:6b:5c:34:9d:e2:8d:e5:0a:2f:1f:
78:8e:47:76:5c:03:db:71:ba:2b:f8:d2:1a:8f:bc:db:9a:f6:
00:92:31:b2:92:35:0b:2c:84:b2:4d:bf:34:45:2c:db:98:53:
11:75:d2:ec:1b:33:f3:29:5e:f6:9c:f5:b4:40:35:0a:61:40:
95:87:48:a2:15:4a:bd:db:1b:86:5b:b4:d1:e4:70:6b:a8:e3:
da:92:37:8a:68:72:56:59:c1:7d:52:17:09:31:24:43:2b:fd:
13:f7:32:63:45:95:bd:ff:57:12:9c:c0:f4:ce:e1:73:18:74:
16:5c:df:ec:65:3d:ea:c9:4f:9c:5d:20:a4:cd:43:92:2f:fc:
dd:58:47:3c:81:41:7c:b3:66:3e:0a:c2:3b:1e:94:a0:41:d4:
8e:dc:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:59 2025 by rpki-client