Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: KUH9dD45BNUXeTXm24Cp+CaurI9TSLVLVHsAgiE7bBc=
Subject key identifier: 81:E2:F2:BD:04:76:A4:66:F7:57:F6:FB:A7:E9:A9:DB:70:B1:A2:DF
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019746D48CD3F8B63F2317E869F65252E7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 15D4
Signing time: Fri 06 Jun 2025 20:00:24 +0000
Manifest this update: Fri 06 Jun 2025 20:00:24 +0000
Manifest next update: Sat 07 Jun 2025 20:00:24 +0000
Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: QcGC3gOzGwKyxgt+xuRAzmz4nOquehLhlJoN8U3AhRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:8c:d3:f8:b6:3f:23:17:e8:69:f6:52:52:e7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Jun 6 20:00:24 2025 GMT
Not After : Jun 7 20:00:24 2025 GMT
Subject: CN=81e2f2bd0476a466f757f6fba7e9a9db70b1a2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:f8:28:a0:15:cb:86:cf:6c:28:a1:d4:20:
5d:49:be:a4:27:bd:56:e4:e3:87:2b:f8:8d:dd:b5:
4c:9d:cc:0c:67:27:17:ac:cb:27:72:52:30:65:55:
dc:c2:42:2c:44:03:d5:a0:52:a6:15:95:21:fc:ea:
5d:87:61:9a:89:ce:ee:ea:fe:66:0e:87:ac:d5:78:
ea:24:36:bd:86:e6:4d:ce:fa:fa:78:a1:db:95:77:
da:5d:87:40:ca:4c:cb:75:b1:28:98:e6:43:99:64:
5b:c7:ae:f9:7b:11:0f:8a:42:dc:0a:66:ea:89:37:
72:76:57:12:2a:89:22:24:c8:f2:56:13:e6:af:a8:
70:c2:3e:6f:a6:d4:24:d7:74:a8:b7:b1:fb:4c:fc:
1f:13:d6:33:90:d4:68:c5:35:eb:10:70:15:59:1f:
92:13:5f:3d:89:59:15:d1:64:4b:54:ae:06:6f:34:
2c:0d:3d:cf:60:85:6f:e3:f3:7a:61:c6:d2:35:b7:
44:a9:b5:35:e9:6c:aa:f9:bc:d7:6e:c9:b8:78:c8:
72:9f:25:d6:75:3a:e1:8e:91:30:03:dc:20:1b:8f:
fd:4a:2d:93:38:4b:7c:1f:e3:26:38:e3:a7:47:f2:
bc:43:07:1f:e1:0f:a9:be:88:ba:5d:07:ec:53:92:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E2:F2:BD:04:76:A4:66:F7:57:F6:FB:A7:E9:A9:DB:70:B1:A2:DF
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:fd:43:cc:0a:03:ff:7e:25:25:07:5b:2c:9f:bf:1f:97:9e:
f0:5e:56:80:af:4b:84:1b:ce:7d:0d:ea:b4:d9:33:7b:e8:93:
bb:7e:c9:d4:b0:10:6c:35:f2:b8:f8:64:21:46:3a:35:ec:cb:
2f:ce:6d:83:9c:72:18:a2:5c:55:97:aa:35:09:e6:5e:59:bb:
e0:e4:13:f2:a7:12:a6:61:fa:9f:4c:53:a0:4a:40:a1:29:7b:
21:c3:f9:64:f6:05:c0:12:2c:ed:8f:c0:e4:27:2c:d9:42:e0:
68:97:c2:df:cb:69:88:c8:e4:c1:70:d8:98:67:15:5e:fd:b1:
7f:11:7f:23:ee:94:ae:b1:44:69:6f:a6:63:21:75:d8:47:6f:
25:28:e8:4f:65:c3:d0:d7:4d:9b:96:ed:c0:18:51:f8:47:ee:
8a:1b:73:f6:57:8d:67:32:f6:a3:61:b5:57:a1:a0:67:82:53:
6b:d5:a5:24:fc:57:ff:81:12:5e:05:c3:93:38:78:ba:6d:3f:
30:31:cb:5d:e6:a4:3f:1d:31:d4:7f:fb:e9:55:2a:33:9c:55:
7e:dd:1e:65:72:cb:99:a3:ea:f4:09:ae:4f:cb:f6:94:ee:fb:
45:03:0d:f5:3b:53:0b:2e:7e:71:c5:bd:53:55:09:59:1f:d0:
ef:c4:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:00 2025 by rpki-client