Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: 9p8QyrVrrMKWAVTff+2tdxhImd0D+JY9wdLK8aPm430=
Subject key identifier: D0:B5:C5:8B:BE:D2:A0:04:91:38:8C:DC:55:C3:02:81:9B:45:3A:74
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 0198D51655C8FE4530F25B0D3447545DD6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0D7E
Signing time: Sat 23 Aug 2025 04:01:07 +0000
Manifest this update: Sat 23 Aug 2025 04:01:07 +0000
Manifest next update: Sun 24 Aug 2025 04:01:07 +0000
Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: BeO0wx67SvV+tbqHmxhfrdCU6NyKdrWqwectVzodNyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:55:c8:fe:45:30:f2:5b:0d:34:47:54:5d:d6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Aug 23 04:01:07 2025 GMT
Not After : Aug 24 04:01:07 2025 GMT
Subject: CN=d0b5c58bbed2a00491388cdc55c302819b453a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:8f:07:99:b0:35:1f:a8:70:96:6f:5a:13:
a5:4a:ec:c0:f3:ac:02:80:25:57:4d:00:1e:9f:09:
19:5b:32:ab:de:5d:b6:b3:7a:8a:e2:3d:12:b0:2a:
bf:a2:d3:e6:5c:76:e8:0b:1a:78:26:35:8b:2d:de:
73:43:e6:7e:87:c7:4e:19:52:a2:4c:16:df:29:1f:
ea:66:8e:fe:1b:bf:d9:e7:8e:c6:c9:7e:d3:76:1e:
48:3a:a3:35:a2:96:9d:ba:eb:db:0a:61:9b:9a:b6:
e0:19:c4:1d:33:40:dd:94:19:9e:46:75:ef:43:6b:
19:8b:33:83:3a:ce:f6:5c:8e:0e:ec:e0:04:80:c8:
2c:1d:30:2b:44:fe:7d:6a:37:cd:ce:79:7d:0b:f1:
90:c3:56:36:32:40:35:80:c2:c3:9a:06:70:69:5e:
a7:0c:15:3f:66:ff:7a:74:38:c9:50:48:28:5e:a8:
82:fb:ab:81:89:bc:17:82:03:02:85:5f:48:39:44:
b5:0f:49:30:74:ee:30:f1:d6:07:90:6b:60:8c:c4:
99:ff:eb:56:39:48:f3:a6:74:9c:e9:77:ef:1f:1b:
3e:6b:52:ac:f1:55:78:92:a6:3e:1b:49:bf:95:a5:
9e:74:ec:12:e8:b7:2b:01:4a:a1:c6:40:bd:b7:83:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B5:C5:8B:BE:D2:A0:04:91:38:8C:DC:55:C3:02:81:9B:45:3A:74
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6d:3e:1d:01:a4:4c:98:06:ae:68:a8:96:fe:d1:9d:45:74:
65:32:d7:8e:92:71:85:d7:b7:e2:b0:db:83:a3:91:29:cd:b1:
45:33:f5:1f:6c:11:cf:6a:28:2b:0a:54:0b:51:16:ed:57:74:
d4:22:9d:94:7d:c5:9b:76:4f:ea:c7:c3:23:40:b0:53:f3:60:
3d:6d:c8:8d:ec:55:5f:c8:cd:31:8b:3c:1a:46:82:1c:30:f7:
40:1a:1d:cd:95:bd:5c:50:09:16:09:c3:33:85:c9:ad:93:7f:
6f:e3:4e:51:08:4f:ef:01:4f:d5:db:42:23:e4:c0:52:ae:82:
2a:3a:01:33:e1:a0:2c:f2:fb:ef:59:31:30:0e:ba:8e:2e:89:
23:6b:5f:38:20:60:cc:f3:f5:90:3c:c8:5b:94:2a:74:0e:65:
30:70:dc:70:a3:5d:4d:52:02:69:cf:3d:25:0a:c4:7d:c7:78:
51:7d:3c:3e:ee:13:d4:0e:4a:50:ed:63:36:b9:6b:84:8c:08:
98:e8:7b:e4:79:b0:90:70:0f:3e:0c:cc:7c:14:7d:0d:03:3f:
9d:59:51:9b:de:75:34:b6:70:08:e0:c0:40:a5:b7:c9:91:9b:
6b:60:3f:5d:7e:13:27:b4:e1:ba:3b:73:88:25:90:d5:d8:ec:
7e:c3:55:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFlXI/kUw8lsNNEdUXda5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWQ3ZWZkNmJhY2Y0MmYxNDVkZjRkNTI4YjBhODMyMGZm
YzM3YjkwHhcNMjUwODIzMDQwMTA3WhcNMjUwODI0MDQwMTA3WjAzMTEwLwYDVQQD
EyhkMGI1YzU4YmJlZDJhMDA0OTEzODhjZGM1NWMzMDI4MTliNDUzYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2CPB5mwNR+ocJZvWhOlSuzA86wC
gCVXTQAenwkZWzKr3l22s3qK4j0SsCq/otPmXHboCxp4JjWLLd5zQ+Z+h8dOGVKi
TBbfKR/qZo7+G7/Z547GyX7Tdh5IOqM1opaduuvbCmGbmrbgGcQdM0DdlBmeRnXv
Q2sZizODOs72XI4O7OAEgMgsHTArRP59ajfNznl9C/GQw1Y2MkA1gMLDmgZwaV6n
DBU/Zv96dDjJUEgoXqiC+6uBibwXggMChV9IOUS1D0kwdO4w8dYHkGtgjMSZ/+tW
OUjzpnSc6XfvHxs+a1Ks8VV4kqY+G0m/laWedOwS6LcrAUqhxkC9t4OiNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNC1xYu+0qAEkTiM3FXDAoGbRTp0MB8GA1UdIwQY
MBaAFMsdfv1rrPQvFF301SiwqDIP/De5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODct
OTlmNjgzMjA2Mzg4LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODctOTlmNjgzMjA2Mzg4
LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWm0+HQGk
TJgGrmiolv7RnUV0ZTLXjpJxhde34rDbg6ORKc2xRTP1H2wRz2ooKwpUC1EW7Vd0
1CKdlH3Fm3ZP6sfDI0CwU/NgPW3IjexVX8jNMYs8GkaCHDD3QBodzZW9XFAJFgnD
M4XJrZN/b+NOUQhP7wFP1dtCI+TAUq6CKjoBM+GgLPL771kxMA66ji6JI2tfOCBg
zPP1kDzIW5QqdA5lMHDccKNdTVICac89JQrEfcd4UX08Pu4T1A5KUO1jNrlrhIwI
mOh75HmwkHAPPgzMfBR9DQM/nVlRm951NLZwCODAQKW3yZGba2A/XX4TJ7Thujtz
iCWQ1djsfsNVOA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:33 2025 by rpki-client