Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File: y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier: GZfqtO7x3zkIyDs1q2YyWqWIHuxbQi7LfzImmImDOsM=
Subject key identifier: D8:C1:25:87:37:A4:3A:79:ED:AF:FF:DD:46:7B:85:B9:24:5A:06:C3
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 0197CB711CD93D3E673AB46698B7A9450538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 14:01:17 +0000
Manifest this update: Wed 02 Jul 2025 14:01:17 +0000
Manifest next update: Thu 03 Jul 2025 14:01:17 +0000
Files and hashes: 1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: GO/7HdW74VWDCn5EKrzX7/c595GMWdUue0zP9uh6YcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:71:1c:d9:3d:3e:67:3a:b4:66:98:b7:a9:45:05:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Jul 2 14:01:17 2025 GMT
Not After : Jul 3 14:01:17 2025 GMT
Subject: CN=d8c1258737a43a79edafffdd467b85b9245a06c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:e0:0e:c1:2e:dc:80:20:fc:6f:c3:25:f7:
54:3b:76:ac:0e:0a:45:d3:34:bb:66:7f:3e:30:99:
53:76:58:4b:68:83:b6:9c:51:9d:1f:d7:a9:03:67:
e9:ed:fd:82:85:25:e4:e4:a3:0b:d0:ab:11:0d:58:
63:18:f9:8d:4d:80:8e:83:ee:d9:a8:17:12:34:96:
ff:75:d5:b6:5f:16:0a:05:95:a2:ea:08:40:bf:12:
eb:d4:c1:b5:d0:a4:ee:4d:51:3b:8e:c1:1e:8c:d8:
ce:c4:bf:fc:9a:28:98:08:b7:4b:13:eb:31:92:6f:
32:a1:28:c0:73:b2:42:dc:65:00:89:5d:94:ba:94:
4c:d3:59:71:9f:35:43:15:34:7f:85:a4:59:1c:ce:
02:aa:7d:7a:df:b4:fd:85:8a:2a:08:a4:e9:27:6f:
44:6c:9b:dc:93:c9:49:9c:ca:36:c2:f0:b3:58:ae:
20:1b:02:09:7f:e8:ba:16:63:dd:96:55:47:73:d1:
6f:46:ba:92:af:bb:8d:62:9f:cd:f0:22:bc:15:01:
12:05:31:55:2d:1c:2b:f0:a8:1e:b0:4e:c2:9a:ff:
ab:4d:da:69:a6:75:c0:57:35:33:9f:e8:45:6a:1b:
44:63:d0:77:f2:30:dd:5a:0a:a7:5a:c4:5b:30:89:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C1:25:87:37:A4:3A:79:ED:AF:FF:DD:46:7B:85:B9:24:5A:06:C3
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ac:ea:9d:0d:4f:5c:3b:dd:9a:98:f3:6b:dc:e8:e5:8e:fa:
e3:a0:a4:f1:08:ec:10:d1:8b:3c:c3:85:e1:34:87:e8:ab:0a:
e1:ed:5c:8c:cc:ce:a5:04:99:68:9c:e9:0d:ba:23:75:61:e7:
c9:19:20:65:d2:53:15:81:d1:80:13:e6:25:72:a7:1b:b3:ee:
a0:00:01:11:f7:36:5a:f2:6e:44:6b:4b:99:53:34:cc:21:da:
71:b8:4b:85:d1:90:ec:ec:f6:db:69:3b:42:41:f1:81:9c:73:
0c:d1:73:62:c5:c4:a8:40:7b:bd:0e:4e:96:62:12:a1:45:42:
b8:6b:b1:38:62:3b:20:ed:38:41:f0:96:9f:16:12:10:20:39:
a9:f8:e1:64:f3:12:6d:0b:21:79:4d:cb:4f:7e:1d:f2:d9:19:
20:e7:cf:01:54:c8:a6:94:ff:0f:93:64:6e:40:96:e9:90:b2:
11:84:aa:2d:22:e5:6f:40:75:ea:fd:87:c1:2e:0b:a3:b3:f9:
5b:33:e7:b6:3c:33:ac:52:ea:31:51:5b:4a:97:6d:8b:74:50:
09:72:83:c2:d6:54:b4:4b:09:01:c4:c4:2c:3c:0b:f2:06:2a:
1b:62:30:24:c6:24:0b:80:75:a8:6a:6f:71:23:7a:67:8b:42:
6c:5c:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:40:35 2025 by rpki-client