Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: CrR3flujoQLQbqbhLVqJFJHQCDOLn7vr48suhIqkKvw=
Subject key identifier: E4:58:B3:A6:AC:26:8B:0A:C7:D8:B4:80:82:B7:11:18:90:11:85:15
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 01978EB6B0B4B11DA5F29E3303E8BBD65B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 0D20
Signing time: Fri 20 Jun 2025 19:00:26 +0000
Manifest this update: Fri 20 Jun 2025 19:00:26 +0000
Manifest next update: Sat 21 Jun 2025 19:00:26 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: p/MZG+cLPv6+rgGk6/U4Kgnj8fM9RthjR1uutTL8lVM=)
2: ook9uIQAuCcVv2Fg0PJ5r3IwiNU.roa (hash: Y/wn2KIY7krXyisLSYMbczx5AjYDM8sXL4TRFNZpN6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:b6:b0:b4:b1:1d:a5:f2:9e:33:03:e8:bb:d6:5b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Jun 20 19:00:26 2025 GMT
Not After : Jun 21 19:00:26 2025 GMT
Subject: CN=e458b3a6ac268b0ac7d8b48082b7111890118515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:10:42:74:63:05:3f:7d:38:50:62:65:c9:
10:0f:7c:57:65:d1:c8:af:de:8e:1d:01:cd:b6:bb:
a9:08:f1:56:10:9a:7d:34:7f:ae:be:99:6e:a7:c7:
87:08:40:2e:bd:80:a0:29:5e:e5:ee:51:c0:c8:87:
91:b2:a8:b6:79:e4:13:c5:f2:22:3d:b6:62:71:05:
bf:31:a0:c2:13:8c:bb:48:29:20:ad:19:e3:62:95:
f4:57:20:d0:d3:1c:05:d1:26:5d:87:34:5b:80:e2:
ee:39:64:48:8d:3d:36:26:57:e3:52:f2:37:04:5e:
b4:66:8c:48:fc:d2:52:87:86:0e:92:49:9d:78:16:
67:a6:ce:02:76:14:33:51:65:bd:ba:46:19:62:0b:
74:08:ec:26:bd:c0:ba:8f:3d:94:3d:3d:8c:66:d6:
aa:59:d3:e0:78:9a:e6:cb:ec:75:74:bf:53:d7:0d:
dc:77:40:05:18:ca:c9:31:2e:88:0b:6c:0d:9f:0e:
60:44:c2:79:9a:93:c8:11:8f:ba:58:97:37:15:fd:
8f:fa:9e:ba:86:ce:1d:54:bb:cd:2a:b5:86:dc:c0:
71:cf:ed:bb:bc:01:35:68:19:70:08:88:9e:4e:24:
cc:62:0a:f1:19:88:2b:85:7b:91:23:f8:01:f8:31:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:B3:A6:AC:26:8B:0A:C7:D8:B4:80:82:B7:11:18:90:11:85:15
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7a:5a:3a:b2:0d:0c:63:45:1e:05:1b:a9:17:a3:e6:0b:e8:
c0:f9:94:54:f8:3c:5a:1a:ca:f5:d7:c6:e1:76:ff:0d:81:df:
82:d8:0e:97:7f:aa:11:67:a7:ab:d2:b1:75:d8:d7:fa:a4:4c:
01:ed:7e:4b:da:bf:65:67:9f:1c:ba:36:59:1c:b6:ce:06:96:
7c:06:4b:ff:59:26:11:2b:44:21:fa:b5:a3:1f:ea:b9:ac:32:
30:df:d2:c5:3b:e8:d6:63:e0:dc:cf:59:45:38:d9:9c:37:45:
c5:9e:7e:2f:71:f1:83:e1:b4:51:da:15:82:f5:21:f4:e7:6c:
5b:67:f1:b7:6a:9d:d7:ae:2a:a5:ea:2a:3a:d8:aa:e9:4a:c0:
fd:23:ec:02:aa:2b:dd:dc:db:d9:41:09:a6:d9:7f:06:17:e7:
99:8d:f1:29:72:d5:ec:74:c8:05:8a:6d:0e:60:91:b6:4e:e2:
e9:9f:68:92:0e:4c:6b:38:49:d1:b4:fa:73:a6:4e:4b:dc:19:
44:ca:52:63:6a:09:4a:a4:ce:f4:9b:75:f2:78:94:18:31:04:
c9:10:4e:db:18:54:22:3b:69:fe:d7:58:66:34:1b:58:cf:ee:
23:4a:d7:a4:6a:21:d7:3c:6f:e9:8d:7a:20:f7:48:16:be:5f:
be:13:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:09:11 2025 by rpki-client