Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: AGM/5G06SI2VlsB8ucI/89u2XKG6zVUMwZWzQPApzQw=
Subject key identifier: FF:AA:50:60:57:84:A6:DE:1F:45:38:B3:2C:1A:D4:13:62:B0:8C:B0
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 019887D7261985F30654C0E3BAB9DE0C0026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0D56
Signing time: Fri 08 Aug 2025 04:01:20 +0000
Manifest this update: Fri 08 Aug 2025 04:01:20 +0000
Manifest next update: Sat 09 Aug 2025 04:01:20 +0000
Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: ekdMVzn60Cb2Pc314S/qus4tTIXLtlpVUk1Aa3I4YLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d7:26:19:85:f3:06:54:c0:e3:ba:b9:de:0c:00:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Aug 8 04:01:20 2025 GMT
Not After : Aug 9 04:01:20 2025 GMT
Subject: CN=ffaa50605784a6de1f4538b32c1ad41362b08cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:c7:bf:31:cd:af:e8:95:af:84:28:d9:e2:
48:bc:5e:af:37:dd:42:0e:ba:b1:70:90:19:2f:1a:
f8:03:87:39:80:1e:ff:55:d3:ed:fb:b5:64:cf:1d:
e7:a6:40:f6:98:cc:39:13:02:7d:17:aa:d2:aa:7f:
16:ae:03:53:36:ef:df:a6:bf:d5:95:09:c0:62:c5:
74:fe:45:1d:fb:3d:e2:fa:1d:95:e2:83:a4:a5:e7:
13:d5:4f:65:c0:bc:81:31:c2:32:7f:a2:df:b1:0f:
68:95:e8:a8:fd:e3:b6:74:75:bc:ed:9a:b0:3e:2a:
3b:ee:7f:6f:82:00:af:63:98:3a:1f:a6:59:8e:cd:
10:63:eb:09:43:68:07:0d:18:83:0d:ce:6c:5c:9c:
c2:f0:95:2d:0d:20:57:2d:53:62:96:95:4a:31:0f:
f7:1b:46:83:c2:16:f5:3f:7c:c1:83:91:f5:69:ce:
da:ba:db:45:6c:c9:2a:b2:23:e8:ae:5f:73:ff:d7:
d9:98:ea:48:0e:9d:25:e6:3b:c8:ec:86:b9:34:07:
3e:b9:b9:ea:f7:10:34:64:e6:ba:83:f2:6c:bb:e0:
80:6a:ac:a4:73:f3:a6:bc:47:9b:3d:07:43:f3:b6:
ef:31:06:9a:a3:a0:67:60:b6:4a:ea:b9:bd:24:5f:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:50:60:57:84:A6:DE:1F:45:38:B3:2C:1A:D4:13:62:B0:8C:B0
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b7:be:dd:58:9c:36:09:b3:86:cb:b1:7f:63:26:ca:13:9a:
b1:1a:b4:9f:9f:50:b5:74:88:d7:7e:cc:89:31:2e:fd:d3:f5:
9f:35:72:19:0c:17:af:a4:49:f6:eb:43:7d:b3:60:1a:5f:9a:
bc:e4:2b:b6:93:06:b5:93:36:fd:57:14:ae:da:e7:91:7a:35:
85:31:14:5c:71:1b:93:4d:00:cd:62:34:bb:58:12:49:7c:78:
08:1d:82:be:5d:2a:39:3e:51:43:f3:77:bc:ef:3f:39:ba:0b:
72:17:61:9b:ad:08:bd:1e:6c:9e:54:c1:02:79:4b:40:2f:2f:
f2:51:2c:d3:3f:02:6f:2c:a4:d6:ec:a0:48:7f:c3:b8:1f:2c:
21:6f:ba:24:0e:92:3c:9d:60:18:64:dc:19:c1:00:88:f3:02:
aa:13:99:33:90:cc:73:be:af:0c:25:c2:47:71:fe:0b:0a:17:
69:5c:7c:66:7a:19:ea:83:53:08:12:50:3f:08:ed:04:62:ba:
c4:07:46:de:94:c1:fe:e4:a6:ac:60:66:b1:39:e1:aa:0c:1c:
a6:8f:bc:92:b9:fe:de:2b:56:10:7b:a8:81:68:41:4c:f2:c1:
f0:a1:2d:19:0e:e1:7a:b3:de:74:62:ef:de:46:ab:44:e1:36:
40:85:ef:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiH1yYZhfMGVMDjurneDAAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWQ3ZWZkNmJhY2Y0MmYxNDVkZjRkNTI4YjBhODMyMGZm
YzM3YjkwHhcNMjUwODA4MDQwMTIwWhcNMjUwODA5MDQwMTIwWjAzMTEwLwYDVQQD
EyhmZmFhNTA2MDU3ODRhNmRlMWY0NTM4YjMyYzFhZDQxMzYyYjA4Y2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nnHvzHNr+iVr4Qo2eJIvF6vN91C
DrqxcJAZLxr4A4c5gB7/VdPt+7Vkzx3npkD2mMw5EwJ9F6rSqn8WrgNTNu/fpr/V
lQnAYsV0/kUd+z3i+h2V4oOkpecT1U9lwLyBMcIyf6LfsQ9oleio/eO2dHW87Zqw
Pio77n9vggCvY5g6H6ZZjs0QY+sJQ2gHDRiDDc5sXJzC8JUtDSBXLVNilpVKMQ/3
G0aDwhb1P3zBg5H1ac7auttFbMkqsiPorl9z/9fZmOpIDp0l5jvI7Ia5NAc+ubnq
9xA0ZOa6g/Jsu+CAaqykc/OmvEebPQdD87bvMQaao6BnYLZK6rm9JF91cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+qUGBXhKbeH0U4sywa1BNisIywMB8GA1UdIwQY
MBaAFMsdfv1rrPQvFF301SiwqDIP/De5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODct
OTlmNjgzMjA2Mzg4LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODctOTlmNjgzMjA2Mzg4
LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbe+3Vic
Ngmzhsuxf2MmyhOasRq0n59QtXSI137MiTEu/dP1nzVyGQwXr6RJ9utDfbNgGl+a
vOQrtpMGtZM2/VcUrtrnkXo1hTEUXHEbk00AzWI0u1gSSXx4CB2Cvl0qOT5RQ/N3
vO8/OboLchdhm60IvR5snlTBAnlLQC8v8lEs0z8Cbyyk1uygSH/DuB8sIW+6JA6S
PJ1gGGTcGcEAiPMCqhOZM5DMc76vDCXCR3H+CwoXaVx8ZnoZ6oNTCBJQPwjtBGK6
xAdG3pTB/uSmrGBmsTnhqgwcpo+8krn+3itWEHuogWhBTPLB8KEtGQ7herPedGLv
3karROE2QIXvPQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:15:19 2025 by rpki-client