Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: n3Pkk9B2b2DWD0FOFsrw77YhQE5WVfrMJwX8LOgWfn8=
Subject key identifier: 65:E5:CB:4C:C3:72:F1:52:40:99:FD:AB:7B:F6:D0:D4:B7:14:3C:82
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 0197B7EA1F3930EAE64A8F2596E47C0FF5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: p0jME6mmbKYrXucuYlMCl9bZc53a0QQKJxG0g5R/2HU=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1f:39:30:ea:e6:4a:8f:25:96:e4:7c:0f:f5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=65e5cb4cc372f1524099fdab7bf6d0d4b7143c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:8e:a2:b8:dc:78:c8:e3:8f:8f:6c:35:72:
82:02:6b:c8:ad:9c:ba:98:d8:23:ed:71:a2:9b:94:
28:88:60:7c:31:c6:e9:97:5d:fc:b4:0b:e6:44:8e:
87:ee:d8:01:b1:ca:41:c2:17:f4:cd:01:fb:e2:6b:
ef:7b:1d:00:c1:ca:bf:da:45:b3:40:f9:97:4a:e3:
43:d6:41:9e:0d:bf:fc:21:da:9c:57:9f:cc:30:db:
a0:6c:31:ba:cb:7b:e2:14:c7:9e:83:3e:86:bf:0a:
e7:c4:d1:80:e7:26:20:df:fe:61:83:03:2f:60:b3:
75:68:b5:1f:6f:d7:94:f7:70:c7:01:fe:5e:62:13:
d4:c6:4d:45:f3:eb:42:fc:42:ed:fe:b7:cf:42:5b:
b4:86:2b:e8:98:84:d2:2b:85:4e:72:a7:d9:8a:94:
f7:78:c3:8a:09:cd:5a:6a:d3:4b:c4:cc:cc:6b:52:
5d:fb:77:86:e8:9a:19:ca:de:1b:90:6b:15:c4:3c:
40:e8:f8:95:db:6f:67:da:78:d4:8f:ab:c5:ad:b8:
d1:22:54:d2:8c:d8:e6:8a:54:ff:c9:ec:59:4e:ff:
c8:01:0e:53:b2:5b:98:e8:38:c6:58:78:ec:dc:e5:
c0:2a:dc:24:19:87:27:d3:61:42:dc:7d:fe:af:59:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:CB:4C:C3:72:F1:52:40:99:FD:AB:7B:F6:D0:D4:B7:14:3C:82
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:46:f8:84:97:3b:48:1a:41:50:ba:91:2e:51:2a:81:d2:3e:
37:e4:07:2d:5b:cd:0f:ee:9d:10:d7:30:68:3d:84:26:cb:39:
86:17:16:d2:b0:f0:0b:88:f2:fc:4b:99:23:a7:48:3e:ca:ab:
5a:dd:83:d5:79:14:d0:5e:08:7f:f7:85:4c:68:7e:bf:bb:97:
68:05:42:bb:0e:00:21:81:45:b2:5c:30:50:d3:77:43:fa:33:
1a:bc:6e:4b:a7:ac:6f:80:d6:b9:74:54:22:bd:fa:86:65:16:
84:fb:8b:2e:79:62:5f:c9:8f:1c:f9:b7:54:e4:57:44:66:0f:
7f:ec:66:84:68:20:ac:ff:60:df:7f:dc:4e:2b:f2:41:b0:7e:
46:38:c9:b7:cd:cf:18:82:80:b0:37:f3:3d:d0:6d:85:b8:57:
f2:c0:65:1e:e9:b7:a0:3f:f2:4d:24:1c:65:df:c8:17:97:13:
74:25:64:f4:a8:81:6b:a3:54:fc:67:9f:1f:cd:54:36:0e:10:
8e:2f:36:14:d7:80:32:f9:a2:e4:96:6f:7a:39:00:a5:45:fa:
7d:11:1e:ce:b5:62:c2:28:09:35:0e:80:fa:6f:af:a3:83:f2:
56:03:c9:fe:ea:58:28:79:52:e9:9e:b8:75:55:04:38:90:07:
92:92:24:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36h85MOrmSo8lluR8D/XKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmNiZWU0NGY0Y2VmMDkxOTg1ZTU0NmE2ODU0ZjljY2Iy
YWRhOGEwHhcNMjUwNjI4MTkwMTAzWhcNMjUwNjI5MTkwMTAzWjAzMTEwLwYDVQQD
Eyg2NWU1Y2I0Y2MzNzJmMTUyNDA5OWZkYWI3YmY2ZDBkNGI3MTQzYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYeOorjceMjjj49sNXKCAmvIrZy6
mNgj7XGim5QoiGB8Mcbpl138tAvmRI6H7tgBscpBwhf0zQH74mvvex0Awcq/2kWz
QPmXSuND1kGeDb/8IdqcV5/MMNugbDG6y3viFMeegz6GvwrnxNGA5yYg3/5hgwMv
YLN1aLUfb9eU93DHAf5eYhPUxk1F8+tC/ELt/rfPQlu0hivomITSK4VOcqfZipT3
eMOKCc1aatNLxMzMa1Jd+3eG6JoZyt4bkGsVxDxA6PiV229n2njUj6vFrbjRIlTS
jNjmilT/yexZTv/IAQ5TsluY6DjGWHjs3OXAKtwkGYcn02FC3H3+r1kvrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXly0zDcvFSQJn9q3v20NS3FDyCMB8GA1UdIwQY
MBaAFJe8vuRPTO8JGYXlRqaFT5zLKtqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgt
ODMwM2FkMTM3MWRkLzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgtODMwM2FkMTM3MWRk
LzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkb4hJc7
SBpBULqRLlEqgdI+N+QHLVvND+6dENcwaD2EJss5hhcW0rDwC4jy/EuZI6dIPsqr
Wt2D1XkU0F4If/eFTGh+v7uXaAVCuw4AIYFFslwwUNN3Q/ozGrxuS6esb4DWuXRU
Ir36hmUWhPuLLnliX8mPHPm3VORXRGYPf+xmhGggrP9g33/cTivyQbB+RjjJt83P
GIKAsDfzPdBthbhX8sBlHum3oD/yTSQcZd/IF5cTdCVk9KiBa6NU/GefH81UNg4Q
ji82FNeAMvmi5JZvejkApUX6fREezrViwigJNQ6A+m+vo4PyVgPJ/upYKHlS6Z64
dVUEOJAHkpIkWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:40 2025 by rpki-client