Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: +/KtvLf9qAzzolK/RqkeAFcj5IHhSPocmdzAHM4nxwY=
Subject key identifier: 8B:ED:FC:A9:63:37:25:7D:59:F6:A0:BE:AE:7F:61:32:EA:94:6E:EA
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 0197B7EA7ED5E56609C6C327D30089B8E2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: erRTM1_91VtMTpdLg1tFc8DEnKQ.roa (hash: igv5stthjArSt6knKlRkVvpjhTI9/bVwYZs5FEOn1NI=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: y7UXqXTxM3vI/6LlEM1Wd1LHURuXC14XW4O9vnr7D4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7e:d5:e5:66:09:c6:c3:27:d3:00:89:b8:e2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=8bedfca96337257d59f6a0beae7f6132ea946eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:05:3c:61:e7:72:5b:10:a4:ed:b1:ef:5b:
29:94:a4:2f:a3:99:d7:51:d6:54:ad:ed:1a:ac:50:
67:8a:73:50:09:78:ff:dd:5a:9a:1a:24:9b:9e:ea:
94:45:71:bd:59:51:53:88:fe:e8:7d:6b:03:87:2a:
fe:4e:15:7f:68:c2:b1:61:35:d8:08:f8:27:91:df:
26:98:20:37:b3:fb:39:31:e8:00:5f:fb:b6:d8:99:
20:91:4c:46:e1:47:47:32:61:ef:b3:85:48:08:14:
d0:c8:ad:59:4c:9c:8f:ac:d8:f6:f0:7b:ff:ea:5e:
36:62:79:10:98:00:ac:ad:06:21:e1:f4:43:f5:10:
c4:6d:1d:47:bc:43:58:3d:a7:59:a1:c0:a6:c0:3d:
d5:c5:c7:3a:f9:57:3b:19:f7:e6:72:a3:46:98:05:
0b:92:d4:c6:df:4b:dc:78:9b:b7:45:86:73:32:e7:
3c:48:94:bf:64:7d:cb:0f:f0:31:2f:11:6a:e0:d9:
49:91:1d:5c:3f:91:16:09:f3:c8:34:7c:73:41:10:
ab:40:f4:1a:6a:cf:c5:a2:ab:a7:73:ee:7c:ba:b8:
35:4e:ec:25:c5:7a:32:2c:64:76:87:75:a6:c4:12:
7a:ea:cc:18:9b:f4:0a:68:42:40:a0:d4:98:cb:56:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:ED:FC:A9:63:37:25:7D:59:F6:A0:BE:AE:7F:61:32:EA:94:6E:EA
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:f5:1d:a7:c0:8f:c9:fd:a7:73:10:38:e9:84:fe:de:19:
7e:db:af:68:1a:0e:6e:f6:38:6a:2d:38:25:c0:a1:f9:2b:e3:
6e:87:53:5d:ff:f8:68:e5:6f:f5:8e:b3:1e:31:c1:ee:b0:0d:
ac:28:a3:0d:35:fd:c6:43:96:f0:70:8e:a6:6a:d4:01:53:2e:
26:3e:db:26:75:22:7c:88:fd:97:70:04:11:8a:1e:6b:95:c5:
9f:85:50:ea:51:29:a2:3e:16:8e:8d:fd:e9:0e:2d:5f:a8:e5:
94:7d:14:f1:88:96:32:fc:36:e3:98:04:80:cd:28:95:8e:a5:
02:d8:02:d9:3f:13:cf:c5:ec:65:d5:18:b8:39:3a:9a:34:80:
d1:a2:5d:6d:42:51:cf:f1:65:f5:ad:93:03:1c:7d:a0:3a:1f:
fd:98:9d:47:bc:85:70:67:eb:42:9b:6e:18:81:2e:02:89:d8:
c2:a7:b6:0e:ba:a5:9c:ee:f9:c4:1c:bb:af:5c:49:fd:6a:90:
a4:cf:9b:cb:81:9d:cc:16:c4:cf:3b:2b:5e:ee:26:c3:db:3b:
76:ca:c9:58:55:6c:b2:24:dc:45:c5:a1:48:37:53:ec:ea:48:
21:c6:55:26:92:9b:13:b2:35:9d:5f:6e:50:63:21:93:fa:cb:
c7:3b:75:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:03 2025 by rpki-client