Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: K7z+mi+bAPaSIWsfWS6DkEd0TfWGfaxoZ71H0Cgc8XQ=
Subject key identifier: FF:13:55:7A:E4:E5:DB:40:54:E4:85:39:D4:9A:D0:96:D8:4E:1C:C8
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 0198D5F19E2CBB0DFBDD2722DBE18EDF3E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:38 +0000
Manifest this update: Sat 23 Aug 2025 08:00:38 +0000
Manifest next update: Sun 24 Aug 2025 08:00:38 +0000
Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: 5puNc+Cd/kKm94F0ZdzK8c1YiCOpt+diN6X9XH1YbEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9e:2c:bb:0d:fb:dd:27:22:db:e1:8e:df:3e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Aug 23 08:00:38 2025 GMT
Not After : Aug 24 08:00:38 2025 GMT
Subject: CN=ff13557ae4e5db4054e48539d49ad096d84e1cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:44:29:d0:f5:c8:ce:f5:3d:ad:4b:b8:93:
52:3d:1f:12:e5:e8:5a:c1:68:03:e7:e8:78:40:5b:
22:e4:a6:6e:5b:98:fa:8d:ae:5c:f9:d2:31:08:53:
f1:c1:e8:14:b7:0f:e0:37:ae:7b:18:22:bc:e6:aa:
0d:b0:c4:05:a9:58:f5:5a:da:72:2d:f6:bb:8b:cd:
51:80:22:81:c1:a3:3e:63:79:06:e8:43:13:62:7e:
37:6c:88:48:8f:b1:14:e4:91:9d:f7:bd:f7:b2:56:
7a:1c:ce:85:5c:84:37:2e:62:dc:54:35:a2:1e:74:
c3:40:25:34:b1:88:8d:ee:1b:99:12:84:1f:ce:83:
68:78:5c:4e:44:19:44:45:d6:79:8c:c4:62:72:ba:
ca:84:43:e7:a5:d7:db:6a:18:2d:86:01:8e:56:11:
0c:8e:dc:16:a1:67:37:8b:da:44:41:23:9e:6a:6b:
02:5c:6c:ba:58:03:97:5a:5c:9e:2e:89:73:3f:1f:
11:20:cc:70:38:22:c0:87:5f:c4:9e:3b:41:59:30:
23:29:db:a2:ba:5f:21:52:42:b0:15:88:e0:3e:fe:
20:cf:74:4e:f0:b4:53:db:2a:9e:c6:ad:0f:ed:30:
fb:d1:13:55:05:a8:d5:0e:c3:f4:c5:f8:74:40:2e:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:55:7A:E4:E5:DB:40:54:E4:85:39:D4:9A:D0:96:D8:4E:1C:C8
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:27:10:0b:89:86:b4:c2:7f:bb:b4:b0:aa:93:a0:b9:74:
39:d9:a2:af:46:91:8d:4b:95:45:fe:97:0d:9d:ed:f0:60:01:
1d:05:7a:b7:1f:7d:4d:eb:d0:db:4e:95:c9:1b:d8:61:51:7c:
9d:19:48:6e:d3:99:0b:8f:b1:7b:1d:c5:6f:67:b1:05:5d:af:
4e:54:0f:b9:3d:be:d4:38:e0:4b:a7:58:5c:58:51:52:7c:b7:
e7:26:e5:c1:e0:ad:89:dd:77:af:65:31:79:00:70:64:ca:1a:
0a:0b:67:00:a6:af:1d:2b:18:ca:85:2b:bc:fa:b3:17:f4:b5:
62:69:0d:38:5c:22:38:86:6c:df:0f:d7:6a:8a:4e:03:53:1c:
78:6a:7b:f6:65:bc:2d:6a:ed:e5:ce:4e:b4:ce:d0:a7:3c:f7:
37:62:74:35:c5:be:cb:94:80:5c:c0:c4:57:af:19:22:40:1c:
e0:94:87:9d:b2:3d:1c:2b:97:0c:93:6d:1a:09:13:0b:1f:60:
ed:8a:5a:2f:20:44:cb:c1:33:cd:97:87:4d:d8:db:ba:c7:25:
36:7a:1a:a2:aa:4f:f7:2d:85:c6:12:da:8d:3b:73:8c:7f:82:
6a:fc:ce:75:cb:b5:89:ad:d5:44:bd:1c:dc:45:95:97:e8:ff:
26:04:aa:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Z4suw373Sci2+GO3z4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTczZThhODI3ZTYzNmM0ZjI1MWVmMzYzYmQ5NGVhOTBh
MDRjYmYwHhcNMjUwODIzMDgwMDM4WhcNMjUwODI0MDgwMDM4WjAzMTEwLwYDVQQD
EyhmZjEzNTU3YWU0ZTVkYjQwNTRlNDg1MzlkNDlhZDA5NmQ4NGUxY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUxEKdD1yM71Pa1LuJNSPR8S5eha
wWgD5+h4QFsi5KZuW5j6ja5c+dIxCFPxwegUtw/gN657GCK85qoNsMQFqVj1Wtpy
Lfa7i81RgCKBwaM+Y3kG6EMTYn43bIhIj7EU5JGd9733slZ6HM6FXIQ3LmLcVDWi
HnTDQCU0sYiN7huZEoQfzoNoeFxORBlERdZ5jMRicrrKhEPnpdfbahgthgGOVhEM
jtwWoWc3i9pEQSOeamsCXGy6WAOXWlyeLolzPx8RIMxwOCLAh1/EnjtBWTAjKdui
ul8hUkKwFYjgPv4gz3RO8LRT2yqexq0P7TD70RNVBajVDsP0xfh0QC4FpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8TVXrk5dtAVOSFOdSa0JbYThzIMB8GA1UdIwQY
MBaAFMsXPoqCfmNsTyUe82O9lOqQoEy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgt
NWM3ODYzOTI2NGFhLzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgtNWM3ODYzOTI2NGFh
LzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrcnEAuJ
hrTCf7u0sKqToLl0Odmir0aRjUuVRf6XDZ3t8GABHQV6tx99TevQ206VyRvYYVF8
nRlIbtOZC4+xex3Fb2exBV2vTlQPuT2+1DjgS6dYXFhRUny35yblweCtid13r2Ux
eQBwZMoaCgtnAKavHSsYyoUrvPqzF/S1YmkNOFwiOIZs3w/XaopOA1MceGp79mW8
LWrt5c5OtM7Qpzz3N2J0NcW+y5SAXMDEV68ZIkAc4JSHnbI9HCuXDJNtGgkTCx9g
7YpaLyBEy8EzzZeHTdjbusclNnoaoqpP9y2FxhLajTtzjH+CavzOdcu1ia3VRL0c
3EWVl+j/JgSq4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:04 2025 by rpki-client