Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier: TPD5y9MBcq5iUz/RplpQKyACLYCdrZeTFv7u4O87EyU=
Subject key identifier: 15:E2:B0:18:09:20:A7:C2:40:E5:EC:62:16:C2:F2:15:F1:7F:2A:B8
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 0197B7B30075ABB2005318E43BEE236151B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number: 0B29
Signing time: Sat 28 Jun 2025 18:00:50 +0000
Manifest this update: Sat 28 Jun 2025 18:00:50 +0000
Manifest next update: Sun 29 Jun 2025 18:00:50 +0000
Files and hashes: 1: FXCR9Lc6KgRx_HPpZhjXnE6ILJY.roa (hash: TawwcEelbsmmDw/jX+MvcIQud2NnCnis9eNEGbrjubs=)
2: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: /eCgsfJf1VTqlB828ZEZWGCkH6EJuw9u88GcVC9Xy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:00:75:ab:b2:00:53:18:e4:3b:ee:23:61:51:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: Jun 28 18:00:50 2025 GMT
Not After : Jun 29 18:00:50 2025 GMT
Subject: CN=15e2b0180920a7c240e5ec6216c2f215f17f2ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:5b:be:d7:24:38:87:97:45:b8:f7:de:3f:
1e:ec:b7:59:a2:4e:46:a6:7e:d9:5e:93:47:eb:9d:
4e:63:a6:30:15:0d:75:f1:ba:d8:f9:28:ad:e5:f0:
9b:1a:5e:c3:be:0c:c1:64:ba:86:02:00:1c:80:9c:
58:cc:ef:e8:23:60:c5:75:f3:9b:62:2a:56:81:44:
20:a6:60:1a:1f:4b:15:48:f9:45:a8:75:1a:44:fd:
22:ee:dd:af:ef:28:9e:12:16:13:07:27:fc:ff:f0:
9d:18:b1:56:48:e6:29:b6:c7:9a:a3:6b:00:74:fc:
c7:11:20:17:a6:d4:86:77:f3:d7:3f:72:a8:be:9c:
bf:eb:51:90:e3:60:28:7e:71:af:79:3b:14:28:48:
57:c4:49:ad:65:2b:90:3d:8c:69:1d:f4:67:b7:3b:
44:4e:62:df:48:b0:8d:aa:a9:76:dc:16:ac:a0:21:
86:06:a9:b3:9e:b5:e1:6e:36:38:db:49:77:31:5e:
a6:e4:27:54:73:7e:58:07:66:78:45:c7:aa:72:6e:
24:8b:8c:63:80:d7:43:60:0e:53:6e:85:de:07:76:
66:7c:61:ed:0d:66:31:41:12:7c:53:f2:5b:9f:d1:
95:c4:f0:e7:7a:e6:4e:82:26:9d:c7:3f:c3:f1:8b:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E2:B0:18:09:20:A7:C2:40:E5:EC:62:16:C2:F2:15:F1:7F:2A:B8
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bc:e1:db:26:5b:29:d1:b9:18:f6:94:f7:ab:bb:41:a7:d6:
4e:77:bf:13:6d:3b:6c:ad:1c:cd:5c:2b:91:1c:6d:73:5b:8a:
8a:a1:ea:e5:14:2e:0a:36:c3:85:31:b1:e5:5e:52:b5:c7:f9:
dd:15:1d:c8:29:f9:b4:20:ae:86:12:9e:f8:63:af:c0:21:f1:
1c:ae:15:0a:f1:67:d6:31:ec:86:d8:b0:ea:97:07:43:41:d1:
51:ab:07:c7:f5:00:df:39:fe:45:91:8e:5a:e9:d5:f7:ed:60:
ba:d8:cf:af:b8:6e:b7:98:b7:84:60:8f:80:a6:79:30:ff:bb:
96:f3:18:76:3e:78:5c:e8:69:92:dd:f3:70:f5:b0:0d:21:4c:
ee:4c:67:b6:8c:0d:f1:fe:1c:cd:7c:2a:c4:e1:ba:0a:9b:2a:
7b:3c:09:d5:4a:2e:22:12:5f:b2:7a:fd:71:aa:63:0c:69:b9:
20:de:65:1a:ff:d4:c0:ad:dc:62:11:12:d1:41:4f:33:21:dc:
bf:90:b5:e8:8d:b8:cc:c2:ae:9c:9b:e5:ab:e4:10:25:19:ee:
66:ac:02:00:ad:69:e2:76:c7:32:cd:5e:d9:ee:1b:68:21:51:
b0:63:d2:ef:63:f9:b9:18:65:c5:42:df:3c:95:41:5a:ae:3f:
fc:a3:41:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:07 2025 by rpki-client