Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: qO6TGp6pU0xi3aW5ZxhLppX2G19byJSEKodzKusLjQU=
Subject key identifier: 6B:0E:C5:D2:ED:32:22:B6:EC:63:EC:05:7A:00:08:73:EE:C0:85:01
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 0197B82150BC75B4C258FC31FA65F490DD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:20 +0000
Manifest this update: Sat 28 Jun 2025 20:01:20 +0000
Manifest next update: Sun 29 Jun 2025 20:01:20 +0000
Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: RVcIdrDmE+EQ/YVb4wV+wlUsn7oUL/GSqhz9RRBDgx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:50:bc:75:b4:c2:58:fc:31:fa:65:f4:90:dd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Jun 28 20:01:20 2025 GMT
Not After : Jun 29 20:01:20 2025 GMT
Subject: CN=6b0ec5d2ed3222b6ec63ec057a000873eec08501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:36:63:69:0d:e0:3d:b2:f8:46:d2:56:6d:
ac:75:a0:02:d0:b8:8a:49:78:b5:c6:5a:6e:ed:50:
f9:c4:b2:8d:70:8a:96:58:4f:01:fe:4b:4f:ca:96:
2d:5e:79:56:65:8b:75:69:91:a0:2b:e8:9a:18:ee:
6a:63:8c:62:77:33:4f:a1:64:72:63:61:8e:0b:74:
85:1d:25:0b:fa:66:0b:01:80:f2:d5:05:5d:01:67:
1f:95:73:e1:de:14:3c:ca:be:cf:f0:47:78:56:ae:
ea:6f:f1:ad:8d:dc:4d:51:ee:6b:ce:4f:06:81:e8:
42:a0:8c:67:f2:1b:13:f7:37:3b:22:c9:8d:4e:9f:
65:60:78:a9:08:5e:86:eb:8f:b0:86:67:af:2d:2e:
72:f1:12:ec:58:08:e3:a3:be:93:23:9d:f6:9a:5e:
04:23:6b:6e:06:3a:9b:c2:96:27:d0:c5:2a:bb:8a:
8d:cd:f4:b7:2a:ce:02:ac:60:54:45:37:8b:8b:45:
95:5b:37:27:ab:84:78:df:f3:04:51:94:69:48:f8:
12:58:ac:4b:ec:b6:4e:d0:5a:bd:c6:67:d4:a2:10:
0e:e6:2d:d8:b3:45:47:bc:36:59:5a:d2:dc:5a:b3:
6c:f3:44:9b:66:88:bf:95:03:bb:a0:56:33:60:7c:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0E:C5:D2:ED:32:22:B6:EC:63:EC:05:7A:00:08:73:EE:C0:85:01
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:43:e6:96:d9:7d:d7:35:93:c9:98:73:b1:dd:e8:fb:c0:f2:
b3:4c:f9:c0:d9:8c:1d:42:ab:78:86:df:f4:c4:11:18:3a:2f:
42:2a:e5:49:d7:2e:fa:d3:d9:04:40:b4:78:1e:aa:0e:50:f3:
1d:6d:cf:a5:26:40:21:b6:2a:71:ad:f8:0c:79:10:2b:fa:e4:
e4:c9:8b:bf:84:8f:0d:67:05:79:8e:a4:19:82:ec:ed:e1:e3:
6f:52:af:bd:a6:ba:a9:0b:f0:f0:41:0a:35:ea:35:61:4c:f9:
8d:12:68:c2:9b:05:3e:cc:ff:45:6d:f9:d4:22:08:06:d4:89:
af:13:b9:7c:c0:f8:3d:ad:34:b8:a8:46:1f:06:d5:fd:f3:de:
81:f4:c3:50:70:94:d0:d1:8b:90:cf:b3:d2:88:cb:60:f1:8c:
20:c1:7b:06:39:ae:4b:f0:e6:46:0a:d8:94:e9:89:70:f2:88:
35:9d:7a:d1:a8:4c:52:d1:ff:be:d0:5b:b6:7b:f6:76:20:02:
72:9a:42:77:d5:9c:be:c5:38:1b:13:8b:03:15:59:f5:c2:c4:
e2:c5:c7:48:c5:25:e1:7a:f9:f9:68:af:53:37:63:64:9f:9b:
0e:07:02:2a:96:4c:b8:76:74:08:2d:21:b4:bf:c4:c9:39:b9:
88:6d:ae:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:37 2025 by rpki-client