Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: nHPBk56nZYvwpy0hAogKDzrDLxKA+3zgeRqfM4W6D9E=
Subject key identifier: 51:0C:D6:C5:E8:12:A0:F8:0B:1C:2D:5B:FD:71:2A:91:62:59:96:3A
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 0199FAA0C4E7F0B8DA6F769437D95A1222FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0E16
Signing time: Sun 19 Oct 2025 04:01:03 +0000
Manifest this update: Sun 19 Oct 2025 04:01:03 +0000
Manifest next update: Mon 20 Oct 2025 04:01:03 +0000
Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: uwB8Y0Py48nxjX3HuuMMrvcxDbJO76jolQTe+xqCSAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:c4:e7:f0:b8:da:6f:76:94:37:d9:5a:12:22:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Oct 19 04:01:03 2025 GMT
Not After : Oct 20 04:01:03 2025 GMT
Subject: CN=510cd6c5e812a0f80b1c2d5bfd712a916259963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:97:c9:ac:ce:f5:46:bf:cf:08:56:76:5c:
26:26:04:d8:49:8d:3c:cc:04:cd:5b:ec:99:b2:49:
8d:aa:cb:3e:96:62:e9:da:6c:6a:f0:14:6b:83:b4:
69:44:69:1a:11:8e:4b:ae:b0:24:b3:28:41:af:34:
08:37:ea:6b:66:22:67:69:bb:bd:f5:52:ad:7f:cc:
26:77:9e:42:d8:4a:33:55:02:3a:97:51:74:3f:db:
11:50:56:1c:1e:8b:67:95:bf:04:cd:08:14:54:33:
04:ad:f1:b8:d7:a3:90:71:55:f4:fd:64:d7:bf:74:
92:bc:af:43:d0:aa:f1:97:bd:26:01:07:94:3c:82:
29:ad:0d:bf:01:13:01:28:dc:ea:82:ca:05:5e:a5:
20:74:b1:5d:c1:04:e6:ea:e1:e7:5e:21:6a:4f:b4:
87:d8:f9:99:68:e2:d2:ea:d5:47:36:27:85:df:9e:
e2:6a:28:16:98:d0:5c:57:8a:f6:70:85:4e:e8:73:
70:c2:e5:01:59:84:a6:e1:6d:85:a9:30:d0:28:2b:
0b:2f:b9:0f:c2:ed:87:b4:0f:5b:14:6f:7c:3b:cd:
92:ba:60:fa:7c:22:38:cd:5a:03:09:71:04:c3:c2:
81:20:b3:83:d1:bd:04:ea:19:88:5b:56:a1:c1:d8:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0C:D6:C5:E8:12:A0:F8:0B:1C:2D:5B:FD:71:2A:91:62:59:96:3A
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:4d:ba:8a:9c:73:0a:e1:9d:19:5e:03:7b:1d:f8:3d:3d:
63:6f:1f:c2:6d:05:43:ed:df:d9:52:cc:d6:50:a7:50:6d:44:
a4:24:cc:eb:86:7c:b6:10:5d:75:18:c7:68:1c:32:f5:7a:ff:
d6:72:c9:2c:c6:2c:81:a9:79:a9:1c:a7:da:52:85:fe:39:08:
79:c0:a5:cc:dd:6e:9e:9d:ac:0d:fe:83:5c:0f:e0:8b:8a:4c:
35:c7:d3:b9:da:b6:3e:c9:e6:a6:65:e8:5d:a3:03:ce:ac:ee:
94:26:42:4e:17:42:d1:78:96:47:51:12:73:f9:73:df:af:e0:
28:c4:a5:3c:ad:68:11:a5:88:0f:d3:64:b8:59:18:b2:1b:19:
35:a1:54:17:8b:b8:93:78:bf:fc:5f:55:e8:80:17:55:33:22:
00:2d:d8:57:c7:f7:3b:8a:8f:57:d2:05:ba:77:14:72:d2:bc:
dc:95:f1:83:3f:55:fd:09:27:eb:c6:b8:6e:12:2f:c7:45:78:
95:38:10:82:b8:0e:a5:76:3c:1d:a1:6d:50:27:73:b6:69:b5:
fd:de:4c:1f:26:94:39:dc:22:2f:5a:ae:63:a7:ed:50:0f:23:
f7:bc:a6:8d:94:cc:4b:55:9c:bf:fe:ee:71:eb:1d:1a:40:92:
a1:cb:af:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:18 2025 by rpki-client