Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: 5tKwMi7MMnshQvtGHPbyc5Ao9E0FQPcVxo24USSN/sY=
Subject key identifier: 2F:18:0F:AD:31:05:7E:9E:84:22:95:3C:3E:AA:0C:68:82:98:9C:28
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019770AC566A39AB891D5A80EBAAE78696EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 23:00:31 +0000
Manifest this update: Sat 14 Jun 2025 23:00:31 +0000
Manifest next update: Sun 15 Jun 2025 23:00:31 +0000
Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: wiQGHS3oftsjz+mC7+KTVYl1WXNODJpcgNw6kp0mgAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:56:6a:39:ab:89:1d:5a:80:eb:aa:e7:86:96:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Jun 14 23:00:31 2025 GMT
Not After : Jun 15 23:00:31 2025 GMT
Subject: CN=2f180fad31057e9e8422953c3eaa0c6882989c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:8b:48:a6:97:fe:22:b1:1e:15:88:55:42:
bf:3a:e8:f3:6b:63:78:02:6e:17:05:e0:b7:72:27:
06:b6:e2:63:34:18:5a:64:2a:d6:9c:b9:4b:62:e5:
14:18:49:cf:af:4e:b7:8c:c5:c0:2d:d7:77:2c:be:
37:73:7c:38:ac:37:5a:a9:bb:1c:82:73:2f:2b:10:
b2:72:d3:a2:1d:34:44:c3:85:33:82:e0:c8:d0:42:
20:f6:1a:03:ad:cf:dc:20:6a:fc:b5:02:cd:91:52:
9a:21:6b:ef:9f:0f:95:a6:75:7d:12:d0:da:88:ae:
80:04:d0:c2:ff:e1:3b:20:4c:36:f5:81:2a:92:98:
11:35:de:aa:87:e0:b1:b6:c1:41:ba:bc:19:12:68:
97:45:23:23:7f:20:87:48:a8:83:2f:fd:24:4b:7e:
be:5e:ce:9c:dc:17:bb:92:e9:da:c9:24:47:41:04:
ec:7b:da:5f:79:c3:08:ea:66:f3:9d:48:91:a1:2e:
1d:6d:d7:4d:62:3c:c1:81:19:87:b9:2a:49:53:04:
c4:db:71:be:b6:73:30:03:04:26:af:93:27:54:f6:
0a:b7:2d:c5:7f:1f:65:7b:7d:8b:d8:54:78:58:e9:
fe:75:70:0f:fb:04:6d:cb:b1:87:c9:21:a2:ff:17:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:18:0F:AD:31:05:7E:9E:84:22:95:3C:3E:AA:0C:68:82:98:9C:28
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:7e:2f:37:ce:7f:91:c9:b2:6b:8a:2f:02:59:83:43:a4:
d4:07:e1:8d:27:51:6c:e0:37:f7:a3:84:98:2f:fc:1f:90:85:
dc:c9:a1:1d:fc:0a:b8:c5:dd:73:74:4c:d9:c7:e9:49:8c:c7:
aa:ee:bd:b3:b4:12:77:41:1a:d0:46:51:b3:f3:83:1e:e8:5c:
90:a9:a5:6f:81:2a:6e:41:8f:3c:46:56:e5:d8:8a:25:00:f7:
fb:63:36:d7:4d:f3:c0:aa:a1:7b:92:7f:89:fb:88:79:bb:9e:
dd:a6:7e:21:1b:f6:fa:16:d0:22:0b:fb:3a:ff:0f:74:36:34:
50:0c:09:6b:e4:24:00:c9:b9:81:2e:ef:b4:69:92:41:c8:68:
c4:ad:45:56:3d:af:16:58:0a:6e:5e:90:27:1f:ec:29:73:63:
66:67:28:a4:b2:36:f9:f9:52:e9:de:44:56:6b:21:12:fa:7a:
8f:65:3a:e6:30:75:a5:28:55:97:10:53:d6:6e:0a:d9:6d:ac:
0e:cb:6f:29:8a:90:df:64:c1:e0:d9:26:3c:de:c2:a6:c4:8b:
a5:89:b7:35:0d:9a:31:22:53:6f:0a:a3:e7:93:14:73:54:3d:
31:68:b5:51:94:82:d7:cc:e9:e8:9f:06:80:d2:3c:38:e6:10:
a7:d6:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:37 2025 by rpki-client