Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
File: y15v1iT-wGkv5waeN5Ix5STYD7w.mft (raw, json)
Hash identifier: iZIHXZxW6S0bg5tvkmKqAoRciRcAJK8yfMmgIvCaBbg=
Subject key identifier: E1:DC:78:92:A2:12:13:BB:08:E3:BC:92:FE:55:15:3D:DA:FA:08:50
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Certificate issuer: /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial: 0198469AFDCDDD1FB548C78CB0964255C17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
Manifest number: 10AA
Signing time: Sat 26 Jul 2025 12:00:19 +0000
Manifest this update: Sat 26 Jul 2025 12:00:19 +0000
Manifest next update: Sun 27 Jul 2025 12:00:19 +0000
Files and hashes: 1: 3mViGQZ4y4dgsuOpVqTlOj7Fdak.roa (hash: bm9ouBBryfPy+46YnwBG/A6ErQmwE+ICHvcNK/AHLA4=)
2: y15v1iT-wGkv5waeN5Ix5STYD7w.crl (hash: 4ivD3+wmuBSbfCgzATTLdjVfuoHsohylrO+bSN4OYYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:fd:cd:dd:1f:b5:48:c7:8c:b0:96:42:55:c1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Validity
Not Before: Jul 26 12:00:19 2025 GMT
Not After : Jul 27 12:00:19 2025 GMT
Subject: CN=e1dc7892a21213bb08e3bc92fe55153ddafa0850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:ae:88:61:62:22:66:8d:3b:9a:71:8e:ac:
a8:8e:68:bd:f7:e6:e3:58:ae:43:62:fc:c9:e3:7d:
54:fa:bc:45:de:28:c4:9a:7e:47:51:82:2e:f8:0e:
f5:e5:ba:52:eb:36:a2:58:67:9f:6b:02:7d:c7:2f:
04:e6:ac:50:2d:ef:eb:89:4b:63:fb:e3:ee:c0:35:
37:ae:a7:6b:1d:96:6d:3f:63:a7:07:17:8b:91:37:
a4:43:30:fe:b9:fa:d9:9c:44:e3:96:b2:18:af:68:
87:54:df:65:71:60:7c:72:c1:86:f5:db:7f:aa:5a:
e0:d6:93:2d:27:d9:38:96:e8:22:34:1e:92:b5:ab:
a1:6b:dc:77:45:b5:77:93:ba:4c:f5:95:5f:86:18:
ad:dd:5d:aa:a3:cc:2d:c5:c5:07:39:75:a0:9e:e4:
84:e5:71:6e:55:5a:00:ec:26:33:22:bd:a8:c2:af:
1e:29:0e:ba:e6:63:39:f9:a5:65:0c:13:49:ef:e4:
e4:fc:d4:3e:7a:8d:e1:72:87:19:69:b3:4e:f7:54:
54:21:cd:82:7c:9b:a1:65:b7:58:3b:81:58:19:22:
8b:e8:59:89:34:12:4d:24:48:3e:08:91:45:97:91:
82:01:d6:2b:f0:94:fc:c4:8e:14:c6:5e:74:86:da:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:78:92:A2:12:13:BB:08:E3:BC:92:FE:55:15:3D:DA:FA:08:50
X509v3 Authority Key Identifier:
keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:25:a2:4b:ac:06:74:a4:da:10:59:a3:45:2d:70:8f:54:ce:
ed:4f:46:8c:e2:96:c6:64:a2:01:52:91:ee:dc:fa:0a:2b:20:
d3:a2:40:74:9c:e1:8f:e5:f7:23:b0:e9:bc:ae:bf:96:7a:8d:
9a:0c:97:bd:c8:ea:2b:e5:55:15:8d:40:31:be:0b:99:d4:15:
b5:f1:67:f1:33:1b:f5:9f:05:5e:99:6b:2e:34:e5:7e:e4:f4:
68:27:8c:58:30:c8:36:f2:bf:54:1f:90:08:70:f0:1f:f1:1f:
0a:c7:17:17:50:b3:a7:7d:1d:fb:40:b1:b7:b1:0b:a0:5f:7e:
a0:e8:10:bd:7b:87:60:3d:43:fb:ea:3b:d6:40:80:d7:48:59:
06:48:b5:92:a6:c9:04:69:fd:f4:e5:ac:0c:02:19:e4:69:c9:
bb:a0:23:ea:aa:03:35:eb:d8:8f:55:fb:fa:3a:db:4b:28:43:
aa:a1:a1:1a:17:9f:10:da:38:bb:56:40:35:57:0a:74:c2:c3:
af:2a:ab:9e:3f:3c:15:e7:97:81:3a:d4:41:68:2c:cb:68:62:
59:f3:f1:44:b0:78:7b:14:d3:97:2f:cd:9b:e6:d6:5a:d2:dc:
0b:5a:3c:0c:ae:3d:0d:05:cd:7f:91:6d:dc:46:e1:95:1a:58:
c0:79:51:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:47:29 2025 by rpki-client