Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
File: y15v1iT-wGkv5waeN5Ix5STYD7w.mft (raw, json)
Hash identifier: KKNuwawqmsuC8wOAFt74Vx4r37gfNAdrNUV/zfDHqKo=
Subject key identifier: BE:BC:29:99:50:58:3B:04:8C:84:D8:8B:50:80:52:06:55:1C:28:8E
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Certificate issuer: /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial: 0197B7B37A001A301CB8A45D4B053C51AE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
Manifest number: 1060
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: 3mViGQZ4y4dgsuOpVqTlOj7Fdak.roa (hash: bm9ouBBryfPy+46YnwBG/A6ErQmwE+ICHvcNK/AHLA4=)
2: y15v1iT-wGkv5waeN5Ix5STYD7w.crl (hash: Kx0NERnWj0d0axQw14UssKFS7mUcP88e3sTtS1XazAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7a:00:1a:30:1c:b8:a4:5d:4b:05:3c:51:ae:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=bebc299950583b048c84d88b50805206551c288e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:2b:e8:b8:c4:30:3f:a1:07:d2:7b:42:d7:
7b:61:aa:92:8d:2b:a0:11:af:ce:26:3e:e4:e7:c7:
2a:0c:85:68:b2:eb:e2:e6:39:a7:78:2b:2a:2e:56:
ae:aa:fb:06:ab:19:a8:3a:2a:6a:78:72:7d:d1:2d:
a3:d9:0b:ca:f7:dc:ac:4c:eb:ce:3f:2a:96:7e:4f:
cd:4d:61:60:a2:2d:ec:a5:90:a0:ec:42:f8:b7:e2:
9b:64:78:cc:e8:09:3a:a6:34:ef:75:97:81:b1:97:
82:1b:0d:b9:e6:c7:db:91:70:b9:49:1e:a2:26:c3:
f2:3f:53:69:15:ba:67:6a:03:f6:4f:95:ea:30:5c:
2a:2c:b5:a1:59:af:f1:7d:a0:cd:f7:0b:ec:ef:70:
43:2e:16:67:0a:6a:6e:1e:08:cb:59:57:96:ee:4e:
18:f3:5b:ee:34:34:94:48:b5:29:2d:30:06:4e:bf:
06:b5:84:d1:07:8b:10:83:a1:65:97:04:bc:79:1c:
36:8b:5c:03:ac:45:71:8e:2a:9b:9f:1e:d3:02:4c:
d8:68:a5:3b:bf:e8:02:f7:0e:c0:c8:b6:e3:4c:02:
a9:88:70:16:97:52:ca:ae:ae:e7:88:d0:65:87:d0:
20:11:24:b2:99:88:10:c8:b4:cf:5e:1d:86:73:5d:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:29:99:50:58:3B:04:8C:84:D8:8B:50:80:52:06:55:1C:28:8E
X509v3 Authority Key Identifier:
keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d4:7a:04:3d:6b:45:ad:61:e0:0a:df:90:be:b5:db:54:b1:
b9:88:40:db:6b:cb:8d:12:a2:72:39:b4:52:fc:e4:41:6d:c4:
1d:07:8c:05:ec:e7:74:df:43:8e:bf:16:e8:24:7c:21:10:a1:
1b:43:42:cc:bb:bf:e7:69:2f:f5:ec:10:e6:e4:d1:35:b2:ed:
3d:b3:a8:1b:d6:4c:9b:6d:c0:43:68:7a:0c:0b:79:2d:58:9c:
5d:21:89:67:28:2f:98:41:00:b4:fc:23:a0:01:02:cf:56:fc:
6f:01:5e:19:cb:fb:12:01:98:ea:e7:c5:17:30:91:51:ac:f0:
c0:e3:30:ac:e8:01:c3:d4:ab:9b:df:98:ef:db:49:0c:cc:ad:
8d:8d:a7:e3:68:b6:91:72:2b:7b:40:d0:02:9c:f9:89:8d:0c:
42:4a:7a:59:f4:80:b0:a0:40:af:38:20:0f:7e:79:72:65:d5:
7e:96:b5:71:50:56:06:63:8e:af:c2:04:f9:4e:fb:01:fa:23:
2a:dc:11:0e:c1:92:94:a2:f2:ed:8d:5f:14:4c:da:56:ce:07:
f8:ed:21:36:35:92:03:e6:27:b9:49:33:7f:d3:b9:c3:1d:05:
8a:5d:a0:ba:ea:66:19:72:62:d2:de:22:76:6b:19:53:fb:a6:
6f:5e:12:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3oAGjAcuKRdSwU8Ua54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNWU2ZmQ2MjRmZWMwNjkyZmU3MDY5ZTM3OTIzMWU1MjRk
ODBmYmMwHhcNMjUwNjI4MTgwMTIyWhcNMjUwNjI5MTgwMTIyWjAzMTEwLwYDVQQD
EyhiZWJjMjk5OTUwNTgzYjA0OGM4NGQ4OGI1MDgwNTIwNjU1MWMyODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOIr6LjEMD+hB9J7Qtd7YaqSjSug
Ea/OJj7k58cqDIVosuvi5jmneCsqLlauqvsGqxmoOipqeHJ90S2j2QvK99ysTOvO
PyqWfk/NTWFgoi3spZCg7EL4t+KbZHjM6Ak6pjTvdZeBsZeCGw255sfbkXC5SR6i
JsPyP1NpFbpnagP2T5XqMFwqLLWhWa/xfaDN9wvs73BDLhZnCmpuHgjLWVeW7k4Y
81vuNDSUSLUpLTAGTr8GtYTRB4sQg6FllwS8eRw2i1wDrEVxjiqbnx7TAkzYaKU7
v+gC9w7AyLbjTAKpiHAWl1LKrq7niNBlh9AgESSymYgQyLTPXh2Gc12DxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL68KZlQWDsEjITYi1CAUgZVHCiOMB8GA1UdIwQY
MBaAFMteb9Yk/sBpL+cGnjeSMeUk2A+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTE1djFpVC13R2t2NXdhZU41SXg1U1RZRDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82YmE2NTYtZTI1ZS00OWFiLWE0YmYt
NjgyNmUyNWI4MDdmLzEveTE1djFpVC13R2t2NXdhZU41SXg1U1RZRDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82YmE2NTYtZTI1ZS00OWFiLWE0YmYtNjgyNmUyNWI4MDdm
LzEveTE1djFpVC13R2t2NXdhZU41SXg1U1RZRDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9R6BD1r
Ra1h4ArfkL6121SxuYhA22vLjRKicjm0UvzkQW3EHQeMBezndN9Djr8W6CR8IRCh
G0NCzLu/52kv9ewQ5uTRNbLtPbOoG9ZMm23AQ2h6DAt5LVicXSGJZygvmEEAtPwj
oAECz1b8bwFeGcv7EgGY6ufFFzCRUazwwOMwrOgBw9Srm9+Y79tJDMytjY2n42i2
kXIre0DQApz5iY0MQkp6WfSAsKBArzggD355cmXVfpa1cVBWBmOOr8IE+U77Afoj
KtwRDsGSlKLy7Y1fFEzaVs4H+O0hNjWSA+YnuUkzf9O5wx0Fil2guupmGXJi0t4i
dmsZU/umb14SJw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:55 2025 by rpki-client