Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: e8I9TihJikpLzfcQKMEziWX3aRurDJuqh9IEpIu7l00=
Subject key identifier: E3:0F:B4:61:D6:E2:9D:1D:4D:F8:AE:34:21:EA:FF:11:B5:F0:BC:DC
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 019770AC74178C5032F2C83ACA61B3DF053C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0AE3
Signing time: Sat 14 Jun 2025 23:00:39 +0000
Manifest this update: Sat 14 Jun 2025 23:00:39 +0000
Manifest next update: Sun 15 Jun 2025 23:00:39 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: AzJvq82Q/0f2VMmagHwKd/A6aem3Ct1HkojF0/jr0Mk=)
2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:74:17:8c:50:32:f2:c8:3a:ca:61:b3:df:05:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Jun 14 23:00:39 2025 GMT
Not After : Jun 15 23:00:39 2025 GMT
Subject: CN=e30fb461d6e29d1d4df8ae3421eaff11b5f0bcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:23:96:93:9b:62:39:9c:35:f4:a6:f2:16:
e6:95:e3:27:89:28:11:cf:22:b1:bf:83:82:ff:e6:
09:ba:81:c1:3b:2a:fc:f5:22:08:cb:ef:c0:b3:ff:
64:71:c5:fa:57:7e:e6:19:47:ef:28:b5:e6:52:de:
b7:21:4a:7f:63:90:19:9f:f8:a5:e2:5d:81:d8:ba:
b2:38:88:d7:2a:18:78:9d:ce:7f:79:d5:1f:3a:d5:
39:0b:08:a7:84:fc:e5:6e:c8:c7:f6:65:ad:13:54:
e6:cc:ee:30:5e:e2:5d:df:90:7c:8e:52:e6:2c:ca:
94:91:11:11:86:09:ee:65:56:a0:07:6d:ff:c8:a2:
d9:72:80:60:fc:a8:bb:52:40:0f:98:18:c3:4c:48:
64:7b:ad:8f:dd:95:fa:cc:20:f7:47:bf:cb:a5:a9:
d2:31:be:26:eb:a3:4f:a4:a3:d3:19:45:33:0b:19:
fd:e9:83:42:db:46:60:d3:bc:67:57:94:7b:d1:03:
eb:8b:93:65:95:fe:83:d0:34:de:0b:98:d3:dc:d9:
ec:80:03:58:82:d1:15:16:49:e3:e7:fa:b0:aa:51:
cb:21:fe:d0:c5:68:5c:98:80:fa:fe:e0:72:f3:5e:
b8:a5:3a:a6:a2:e8:36:d8:ab:3b:22:53:90:53:0f:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:B4:61:D6:E2:9D:1D:4D:F8:AE:34:21:EA:FF:11:B5:F0:BC:DC
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:36:b4:84:4a:54:30:aa:38:21:5a:07:7b:51:88:48:d5:f3:
49:cc:d6:bd:ef:e4:8e:f7:59:b2:f2:6c:01:84:f4:d3:69:e3:
32:7e:3e:3c:a7:be:82:ba:74:c6:2b:44:7f:dd:bc:e7:a7:dd:
5a:89:ba:e4:5f:35:08:84:bd:17:ff:bf:13:1b:44:e4:af:95:
7d:ba:6a:b6:77:68:69:b8:56:6e:84:d9:62:ef:48:c1:b3:bb:
88:9c:b4:e7:24:f8:90:a3:51:d1:d4:c8:4b:7a:e7:a5:7f:78:
07:09:c4:1c:2b:9e:85:50:ee:c5:46:85:71:1f:e6:2f:97:d8:
46:c6:bf:05:3b:d2:1b:1c:69:3a:ad:ad:b2:69:09:2b:33:94:
4c:5f:fb:52:8a:7e:d1:af:b6:8a:cd:cc:14:2c:39:4a:98:d7:
a9:5c:34:6c:06:a2:c7:81:82:f3:7d:75:01:2e:b9:19:a3:1e:
e8:8c:e2:d4:ca:4d:6f:70:87:1b:be:37:ac:80:ec:14:4a:95:
fd:2e:ec:2e:3f:13:68:64:6f:6f:1c:e2:b7:ea:6e:62:16:f1:
57:4b:80:f2:24:00:02:19:9a:83:b2:67:d1:58:db:0b:08:71:
8f:6d:d0:91:df:c6:7e:da:7c:eb:18:69:42:b3:45:da:83:60:
db:14:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:03 2025 by rpki-client