Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: 6kZkYGK9jkogMgqemIXy+mYP3rDsYVDmEpxzRv4FKk8=
Subject key identifier: A2:B8:3A:D4:6F:01:42:D8:1D:27:C2:E4:92:21:26:AF:6D:13:34:AC
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 0197B7450A9E49D553C8EDA0E17C388625CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:00:44 +0000
Manifest this update: Sat 28 Jun 2025 16:00:44 +0000
Manifest next update: Sun 29 Jun 2025 16:00:44 +0000
Files and hashes: 1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: FUUIOWN6uZn/3qNjG0z5qx49LGDK+MMiHcSVSKc6XFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0a:9e:49:d5:53:c8:ed:a0:e1:7c:38:86:25:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Jun 28 16:00:44 2025 GMT
Not After : Jun 29 16:00:44 2025 GMT
Subject: CN=a2b83ad46f0142d81d27c2e4922126af6d1334ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:79:10:df:67:ec:0c:47:ef:11:83:5d:5e:
64:1c:ac:2e:95:8b:1e:10:a2:ce:e9:66:05:66:1c:
5d:1d:8e:c8:23:dd:90:56:0c:a4:81:c3:d1:d2:36:
df:06:0f:12:b7:63:af:c0:69:b7:dd:41:f6:7e:25:
d6:fc:9b:4e:41:cb:2c:a0:de:37:2d:6d:43:2d:6a:
da:3c:49:25:0c:0e:53:87:52:e9:7f:31:6b:a8:db:
0b:58:d8:ad:60:73:19:b7:50:18:51:ff:28:31:6f:
81:d8:a9:6e:36:65:ca:59:ed:9c:b1:0a:06:c7:22:
e9:1f:57:20:1a:94:21:8f:27:20:a2:ec:78:ac:b9:
0d:6d:99:29:f3:8d:2c:d3:be:37:ef:e7:5e:bd:20:
05:c4:8d:32:d4:5d:58:42:3a:ab:e2:4a:ac:87:48:
bd:86:31:b1:30:80:a3:15:78:de:c0:08:90:f1:30:
1e:a9:53:cc:17:af:d9:7b:f9:f3:fc:62:90:5c:e8:
51:a6:69:8f:90:80:c5:96:94:2e:63:d6:fd:66:26:
c0:2e:fe:83:70:a5:70:21:b7:4d:83:a4:d3:8b:47:
3f:cf:53:4c:77:12:09:d5:87:65:99:8b:70:e4:04:
52:b2:39:d4:9a:9b:77:92:26:04:eb:8c:d2:c8:03:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:3A:D4:6F:01:42:D8:1D:27:C2:E4:92:21:26:AF:6D:13:34:AC
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cb:bc:dc:80:c2:06:9c:5b:00:7d:7b:ef:22:44:b2:82:24:
be:c5:57:1f:a0:33:14:02:bb:f2:3a:8b:60:7f:c1:ae:1a:a9:
60:e2:e4:1f:08:57:d4:54:b8:d6:c5:f3:4c:78:75:7a:1f:ce:
b0:13:c8:6f:dd:6d:05:60:62:6e:23:9a:e2:bf:bc:bd:1e:f0:
12:0b:0c:44:af:80:c6:44:9f:13:19:e4:f3:7a:7b:e7:cd:d8:
4e:59:26:13:89:bc:58:e9:83:b9:9e:31:b7:5a:8a:b2:84:01:
a7:d4:28:3e:fd:66:20:9f:86:23:ec:ac:2e:66:f9:24:b0:a2:
72:10:e6:de:7c:11:11:dc:b7:3b:f1:c8:c9:04:ae:98:d3:5e:
25:07:48:e0:12:fe:85:4d:22:07:6a:ef:4b:12:df:69:cf:73:
ea:c4:ee:9c:91:59:84:63:ca:d7:aa:17:8d:3c:7b:fb:7b:f7:
ed:43:58:60:02:9e:f6:54:99:42:c7:e3:5c:c0:16:32:ec:d9:
35:e2:c0:e8:7d:e9:31:89:50:4e:8d:c7:5d:41:11:fd:8f:a3:
e3:00:76:26:96:42:e3:b3:9c:c8:69:33:f2:12:bb:ac:93:40:
c0:44:0a:0a:1a:50:6b:d6:fd:b8:24:72:ae:aa:f4:0d:fe:7c:
66:77:3f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:17 2025 by rpki-client