Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: wiHG87pgz37wsl5p1abu6C46K8bQMQaVVSyKrOAQbW0=
Subject key identifier: DE:34:A1:70:1C:DA:65:26:FD:D6:8B:1E:04:3C:D0:F5:02:F2:14:10
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 0197B7454B251A5953B766FDE554896790DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0CEA
Signing time: Sat 28 Jun 2025 16:01:01 +0000
Manifest this update: Sat 28 Jun 2025 16:01:01 +0000
Manifest next update: Sun 29 Jun 2025 16:01:01 +0000
Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: mxBDt9ikIpArTLa69vqMgHKkdaPZvFeV6RjIu4i45SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4b:25:1a:59:53:b7:66:fd:e5:54:89:67:90:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Jun 28 16:01:01 2025 GMT
Not After : Jun 29 16:01:01 2025 GMT
Subject: CN=de34a1701cda6526fdd68b1e043cd0f502f21410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:9d:59:92:0a:63:fc:a3:1a:18:49:64:8f:
cf:98:51:40:a8:03:04:1c:67:e0:d0:69:7b:55:b5:
c7:92:99:9f:b1:13:13:92:77:b5:bc:b3:0c:34:f4:
8e:33:ef:a6:70:64:7f:89:18:f9:f7:ed:84:2c:20:
30:99:13:30:82:b6:03:66:65:54:96:a1:35:7a:61:
96:0a:0d:5a:ef:29:be:77:a2:c5:65:dc:b1:3d:db:
d5:75:67:be:1e:51:37:26:62:8c:b6:fc:cb:4e:03:
31:04:3b:94:a5:75:d1:55:2f:13:37:03:4d:69:be:
b0:be:8d:51:08:e5:1c:2a:dc:cc:f8:0f:af:0c:ed:
64:46:06:3a:47:a0:07:4b:ab:a6:80:71:cd:8b:69:
9b:2d:1c:f3:55:b9:ce:04:2f:01:4b:5f:45:52:46:
c6:cc:99:67:92:54:19:8e:6f:4e:07:7a:38:90:4e:
af:57:7b:bb:12:25:c8:c8:ce:db:1c:88:2d:ba:e3:
d6:15:be:f3:1a:07:1b:b1:2c:94:b4:f2:b3:60:11:
89:fc:18:42:9c:58:e4:a3:97:f2:4b:4a:21:61:98:
d3:95:91:9b:05:0e:0f:11:3a:87:b5:28:f0:9c:f4:
4a:4f:37:8b:a4:76:4f:81:07:ac:e5:26:8c:36:60:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:34:A1:70:1C:DA:65:26:FD:D6:8B:1E:04:3C:D0:F5:02:F2:14:10
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e4:7a:f8:cf:40:23:b0:8b:e7:6a:08:7d:a1:80:67:2f:05:
57:a4:f3:6a:51:97:64:6d:b9:d1:50:56:f5:d8:9d:a3:de:6e:
02:13:02:44:2a:f3:93:34:c3:44:ed:9f:b2:e4:4f:7d:ff:48:
fa:e7:46:21:61:e3:61:ef:97:b2:66:b2:11:20:6d:f0:0f:62:
d4:ea:e7:12:ca:5a:d2:45:2b:e3:b5:84:44:17:d9:53:47:ef:
95:60:b4:55:b4:01:9f:eb:ec:5c:c1:8b:f9:8e:6a:0f:fd:17:
ca:48:ee:93:37:e7:60:2b:63:cb:c5:37:99:4b:05:65:a2:f2:
63:e6:b9:34:54:22:83:ea:46:92:62:97:b2:2f:0c:19:25:6a:
00:49:6d:7a:6a:ba:bf:72:51:88:19:6f:ed:02:1d:8f:6b:29:
84:f0:84:b9:9c:9d:41:09:ed:4c:7b:0b:ff:16:31:62:d0:ee:
74:dc:99:53:a0:96:f8:5c:94:01:ce:95:13:ca:81:27:82:93:
ca:dc:6e:68:6e:85:85:cb:17:fb:27:d4:56:88:c7:c0:4a:b5:
95:a9:09:6a:08:a4:04:31:b6:55:91:7f:8b:78:39:52:78:03:
13:c0:2a:55:ad:c9:65:8e:d0:54:8e:0c:eb:f5:47:da:a8:39:
5f:f6:c2:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RUslGllTt2b95VSJZ5DdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWQ3ZWZkNmJhY2Y0MmYxNDVkZjRkNTI4YjBhODMyMGZm
YzM3YjkwHhcNMjUwNjI4MTYwMTAxWhcNMjUwNjI5MTYwMTAxWjAzMTEwLwYDVQQD
EyhkZTM0YTE3MDFjZGE2NTI2ZmRkNjhiMWUwNDNjZDBmNTAyZjIxNDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjudWZIKY/yjGhhJZI/PmFFAqAME
HGfg0Gl7VbXHkpmfsRMTkne1vLMMNPSOM++mcGR/iRj59+2ELCAwmRMwgrYDZmVU
lqE1emGWCg1a7ym+d6LFZdyxPdvVdWe+HlE3JmKMtvzLTgMxBDuUpXXRVS8TNwNN
ab6wvo1RCOUcKtzM+A+vDO1kRgY6R6AHS6umgHHNi2mbLRzzVbnOBC8BS19FUkbG
zJlnklQZjm9OB3o4kE6vV3u7EiXIyM7bHIgtuuPWFb7zGgcbsSyUtPKzYBGJ/BhC
nFjko5fyS0ohYZjTlZGbBQ4PETqHtSjwnPRKTzeLpHZPgQes5SaMNmARgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN40oXAc2mUm/daLHgQ80PUC8hQQMB8GA1UdIwQY
MBaAFMsdfv1rrPQvFF301SiwqDIP/De5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODct
OTlmNjgzMjA2Mzg4LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODctOTlmNjgzMjA2Mzg4
LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOR6+M9A
I7CL52oIfaGAZy8FV6TzalGXZG250VBW9dido95uAhMCRCrzkzTDRO2fsuRPff9I
+udGIWHjYe+XsmayESBt8A9i1OrnEspa0kUr47WERBfZU0fvlWC0VbQBn+vsXMGL
+Y5qD/0XykjukzfnYCtjy8U3mUsFZaLyY+a5NFQig+pGkmKXsi8MGSVqAEltemq6
v3JRiBlv7QIdj2sphPCEuZydQQntTHsL/xYxYtDudNyZU6CW+FyUAc6VE8qBJ4KT
ytxuaG6FhcsX+yfUVojHwEq1lakJagikBDG2VZF/i3g5UngDE8AqVa3JZY7QVI4M
6/VH2qg5X/bCqg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:29 2025 by rpki-client