
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: uAlviQy6vga9aLjRULWm6UWayxI9v5ZhaTW7klGQqZ0=
Subject key identifier: FA:B3:3F:37:D1:1E:F2:AC:1C:70:7C:DA:CC:28:24:55:4D:EA:83:AE
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019769CF3BD359306B8DEADFC2AA9CDC0AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 0618
Signing time: Fri 13 Jun 2025 15:01:18 +0000
Manifest this update: Fri 13 Jun 2025 15:01:18 +0000
Manifest next update: Sat 14 Jun 2025 15:01:18 +0000
Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: mZ1eTJkQlkynPIpX7cWD1L5SIr1HEXK6UBIOsQhA1us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:3b:d3:59:30:6b:8d:ea:df:c2:aa:9c:dc:0a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Jun 13 15:01:18 2025 GMT
Not After : Jun 14 15:01:18 2025 GMT
Subject: CN=fab33f37d11ef2ac1c707cdacc2824554dea83ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:15:f4:4e:32:19:f6:0b:3f:a0:29:e7:9d:
a6:80:f8:d5:ef:c8:49:7e:63:5d:f4:ba:6c:09:6b:
d0:58:86:99:a3:96:72:d9:2e:0b:a2:98:5a:49:e3:
7a:23:7c:36:0d:66:cb:b0:01:87:77:f8:d4:bd:45:
37:3b:00:a6:01:10:6c:2a:02:a8:8c:3f:a8:65:0c:
ce:1e:6a:e4:e3:96:71:e2:f5:2f:81:b2:a2:d9:99:
72:e1:dc:9d:df:6d:50:29:5c:6c:fa:01:44:33:9f:
13:13:60:c7:b1:82:e6:6b:25:4d:28:94:37:d3:c6:
62:81:55:a1:a5:57:37:02:c4:df:e5:54:43:34:1e:
17:fa:9e:93:48:5f:16:0a:10:fa:d2:25:13:f4:e7:
42:93:ad:2f:6e:56:45:12:2a:a2:c5:65:0a:19:4c:
cc:51:c8:b8:e0:99:87:ed:74:2e:83:c7:c7:4c:61:
52:48:d9:a3:a1:6c:e6:2d:8e:4b:6c:18:d9:34:43:
63:67:78:54:d3:30:97:ee:36:f5:a0:a4:49:ba:fa:
d8:e0:6f:87:30:53:2d:b1:ce:85:f4:29:18:97:38:
58:d8:1a:c2:c5:76:14:f3:6c:fe:53:2e:6c:6b:a1:
56:67:a8:f7:58:a4:77:79:93:71:ab:65:cb:d3:23:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:3F:37:D1:1E:F2:AC:1C:70:7C:DA:CC:28:24:55:4D:EA:83:AE
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dd:a5:50:77:69:74:eb:a0:92:bd:c3:f9:47:7b:fa:fd:d0:
52:76:d2:e6:c0:59:65:0b:dc:aa:5c:a9:98:bf:7c:d7:aa:f8:
b7:fb:0b:f3:d1:2c:0a:64:73:54:95:9a:9d:d7:5c:8b:5e:d0:
cf:9a:7b:fd:61:84:00:f5:c2:a6:b9:47:48:a0:f9:b9:1d:07:
3f:80:ee:96:65:52:0b:fb:58:0e:ba:b7:4a:b5:ff:57:78:18:
56:a0:0f:8c:47:23:30:0c:83:51:e1:e1:e6:ea:59:17:f8:f5:
16:bd:b6:7c:0b:e6:93:11:4a:24:8f:ab:3d:f3:59:0b:70:64:
5c:c2:e2:ef:2e:55:11:2f:9e:d1:1e:8d:80:a8:60:e8:82:a7:
9c:41:c1:85:55:49:bb:88:c4:18:1f:28:b5:de:44:5d:31:26:
01:5a:6c:42:71:4d:b3:c4:c5:1e:57:40:4c:6a:ec:74:db:cf:
39:a5:fd:f4:9b:a6:4d:1d:6d:6c:25:df:b7:dd:c9:fc:ce:b6:
ac:90:e1:71:50:85:9a:88:98:cd:17:6d:50:ee:e6:64:b5:46:
6f:49:1f:06:fa:af:13:c7:1a:a1:d4:dd:7f:bc:b3:5d:95:d3:
b4:50:d9:20:18:8a:7f:24:9b:0a:e9:77:50:7d:aa:b7:d3:5f:
ad:dd:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:47 2025 by rpki-client