Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: tv59eGHoVg2RkxPZUwT9+gdFVCjdMzDEs86HycYpjWI=
Subject key identifier: D7:3B:A9:A8:A0:CA:7B:0A:69:EB:D2:0C:B0:25:44:C3:C6:E2:14:66
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 0196BF00C8ACE6D5D1374674B11C3617BF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 11:00:21 +0000
Manifest this update: Sun 11 May 2025 11:00:21 +0000
Manifest next update: Mon 12 May 2025 11:00:21 +0000
Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: NVKNgCTyMEOmN3dOfvN+t0qcQQL/LVhdeCWwM6ic5eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:c8:ac:e6:d5:d1:37:46:74:b1:1c:36:17:bf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: May 11 11:00:21 2025 GMT
Not After : May 12 11:00:21 2025 GMT
Subject: CN=d73ba9a8a0ca7b0a69ebd20cb02544c3c6e21466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:2d:a7:bd:4c:7f:0a:03:3a:ed:1b:d6:1a:
8a:4b:bf:51:d3:f1:e8:3c:bc:fe:5d:f0:c5:35:a4:
08:10:5b:d6:88:49:70:e3:d8:ab:e8:c8:0f:5c:bf:
8f:7f:3f:59:a7:7f:bf:63:1c:bd:69:e7:aa:57:7b:
9f:6a:06:55:a0:0b:ab:bb:67:49:18:fd:f1:52:6d:
b3:b6:c3:79:f8:b8:1b:8f:b5:4c:7f:62:48:67:0b:
c8:80:8f:7d:35:2f:1d:38:85:61:11:bd:81:82:26:
9a:97:b0:8e:8e:85:94:53:c3:c3:99:82:3e:cb:46:
dd:6d:c4:e8:94:79:e4:ea:83:c0:ab:cc:f1:fb:2c:
01:dc:84:bd:8b:40:f0:5e:29:5e:f4:ca:05:fe:9b:
1f:65:8f:16:4b:b9:e5:2b:8b:29:8f:9a:08:96:27:
58:05:a6:b2:bc:1f:64:83:ce:0c:8c:e2:cc:2f:13:
39:f5:71:87:62:e2:28:60:28:73:92:98:91:89:68:
d9:dd:28:cc:35:0a:aa:b3:ea:c4:f4:bd:24:37:f1:
6e:c1:64:45:2e:01:af:b0:a7:aa:b2:31:13:b0:94:
01:84:dc:48:8c:37:17:11:ab:0c:5e:5d:5d:91:f1:
8a:3e:c4:09:14:8a:82:06:8b:88:6d:f5:7b:73:e2:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3B:A9:A8:A0:CA:7B:0A:69:EB:D2:0C:B0:25:44:C3:C6:E2:14:66
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2b:bd:a6:0b:20:3c:6a:8f:5b:54:7c:c2:f3:1c:65:d2:bf:
57:3e:a9:0c:e1:d8:33:0d:88:e5:0a:38:8a:25:e8:c8:97:d2:
3a:f7:4f:42:aa:8a:c5:4c:f4:2c:32:3b:95:0f:ab:08:a0:58:
83:03:56:10:04:c1:b3:df:e1:6d:59:85:2b:73:53:f8:4f:ad:
23:90:e7:52:f9:d3:50:e5:f9:ac:52:be:1b:ba:34:21:ac:da:
5c:82:e4:54:b0:92:e7:e0:71:49:12:be:3c:7f:0a:b6:c8:2a:
6a:88:b0:2c:da:c2:55:e3:17:4b:33:a1:a4:77:2f:fc:e2:6f:
76:e8:01:20:75:3a:97:fc:b3:48:82:eb:09:a5:56:81:d8:a3:
a5:7f:b5:e1:c8:b3:36:10:13:b1:1d:17:d8:2a:5f:cd:7b:94:
79:f9:75:a0:59:48:77:cd:82:8a:d0:36:28:0a:3f:39:eb:d6:
f8:12:4d:62:0f:71:d5:02:3e:bd:1f:7a:fa:56:40:a8:25:98:
e2:1c:08:8e:08:ec:8f:31:ec:2a:31:b6:03:84:93:29:6e:0f:
fb:3a:98:8e:35:33:e5:c8:08:9e:14:9c:ae:4c:a1:d9:f2:32:
eb:b9:92:ef:7a:82:09:27:d9:09:9e:bd:0d:41:d4:13:67:17:
4b:ac:f6:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/AMis5tXRN0Z0sRw2F78RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTczZThhODI3ZTYzNmM0ZjI1MWVmMzYzYmQ5NGVhOTBh
MDRjYmYwHhcNMjUwNTExMTEwMDIxWhcNMjUwNTEyMTEwMDIxWjAzMTEwLwYDVQQD
EyhkNzNiYTlhOGEwY2E3YjBhNjllYmQyMGNiMDI1NDRjM2M2ZTIxNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Qtp71MfwoDOu0b1hqKS79R0/Ho
PLz+XfDFNaQIEFvWiElw49ir6MgPXL+Pfz9Zp3+/Yxy9aeeqV3ufagZVoAuru2dJ
GP3xUm2ztsN5+Lgbj7VMf2JIZwvIgI99NS8dOIVhEb2Bgiaal7COjoWUU8PDmYI+
y0bdbcTolHnk6oPAq8zx+ywB3IS9i0DwXile9MoF/psfZY8WS7nlK4spj5oIlidY
BaayvB9kg84MjOLMLxM59XGHYuIoYChzkpiRiWjZ3SjMNQqqs+rE9L0kN/FuwWRF
LgGvsKeqsjETsJQBhNxIjDcXEasMXl1dkfGKPsQJFIqCBouIbfV7c+KT4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNc7qaigynsKaevSDLAlRMPG4hRmMB8GA1UdIwQY
MBaAFMsXPoqCfmNsTyUe82O9lOqQoEy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgt
NWM3ODYzOTI2NGFhLzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgtNWM3ODYzOTI2NGFh
LzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiu9pgsg
PGqPW1R8wvMcZdK/Vz6pDOHYMw2I5Qo4iiXoyJfSOvdPQqqKxUz0LDI7lQ+rCKBY
gwNWEATBs9/hbVmFK3NT+E+tI5DnUvnTUOX5rFK+G7o0IazaXILkVLCS5+BxSRK+
PH8KtsgqaoiwLNrCVeMXSzOhpHcv/OJvdugBIHU6l/yzSILrCaVWgdijpX+14ciz
NhATsR0X2CpfzXuUefl1oFlId82CitA2KAo/OevW+BJNYg9x1QI+vR96+lZAqCWY
4hwIjgjsjzHsKjG2A4STKW4P+zqYjjUz5cgInhScrkyh2fIy67mS73qCCSfZCZ69
DUHUE2cXS6z2FA==
-----END CERTIFICATE-----
Generated at Sun May 11 19:18:13 2025 by rpki-client