Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: Ea1s5dZA4xpcdx4YopITrKeg5s4HLCJzw23gYoi2C0A=
Subject key identifier: 5F:5C:D8:24:CF:8F:71:7D:6B:E5:12:C7:77:E8:72:D5:32:87:D8:50
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 01976CCFC4A5E227800A97B38EA55285BBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 05A4
Signing time: Sat 14 Jun 2025 05:00:44 +0000
Manifest this update: Sat 14 Jun 2025 05:00:44 +0000
Manifest next update: Sun 15 Jun 2025 05:00:44 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: chgJFwcv/F6uNUnMWT1Reeunz4QklBzd8Hmh9o8wyGo=)
2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:c4:a5:e2:27:80:0a:97:b3:8e:a5:52:85:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Jun 14 05:00:44 2025 GMT
Not After : Jun 15 05:00:44 2025 GMT
Subject: CN=5f5cd824cf8f717d6be512c777e872d53287d850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:51:a8:1d:55:58:6c:86:40:eb:b8:c6:40:
5a:e7:01:ed:e1:6b:f9:37:c7:ec:2c:6f:ef:63:e8:
f9:52:06:a3:6f:36:77:c3:12:0b:cd:de:a5:f2:08:
c6:ea:ac:de:a3:92:20:f3:cd:80:9a:4e:41:dc:d2:
94:ca:45:e0:6b:4a:d6:fe:73:69:2c:d3:7d:d1:3e:
68:87:4b:05:aa:f3:be:be:64:19:19:38:2d:8b:ad:
6e:50:e7:08:c4:a2:e8:96:03:47:80:ea:03:b0:a4:
27:29:83:4e:61:a7:5d:4a:5d:91:1c:4d:1f:b4:67:
82:f9:a2:97:65:fb:5c:49:51:c4:f5:c0:1f:f8:6a:
8a:a5:91:b1:e2:62:2d:d7:a8:98:4e:38:99:84:8f:
14:87:e4:97:fa:e3:66:b5:6d:2c:78:23:e5:63:51:
4e:90:e8:d8:2c:2e:c6:e3:7a:ed:23:02:96:fc:58:
5e:3a:df:32:33:cf:4b:61:10:43:8e:eb:47:50:5a:
2f:a9:19:e1:7f:f2:7f:9f:45:2a:45:16:a3:f8:ec:
14:94:61:46:ff:30:6e:4a:54:ba:10:01:32:48:d0:
a4:65:c2:8e:be:a2:a9:2c:fb:33:99:b1:82:e6:4f:
d5:52:11:e9:b2:4e:b8:ee:22:cf:a7:50:74:f2:3d:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5C:D8:24:CF:8F:71:7D:6B:E5:12:C7:77:E8:72:D5:32:87:D8:50
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:84:57:10:39:49:cb:47:b2:d8:52:e5:38:a7:47:20:1b:49:
55:88:cd:32:87:04:5a:13:97:90:6a:f9:7c:b7:d8:34:00:df:
ba:41:19:1e:92:79:4b:62:a5:18:b9:82:e0:18:5b:f6:1e:f0:
62:b5:c4:36:28:1b:af:f9:ff:85:a8:da:37:5f:e2:45:45:46:
9e:34:72:97:fe:02:aa:a0:21:73:dc:77:f4:83:f6:84:14:94:
41:12:83:d1:01:37:e8:b9:7b:fd:5f:91:a7:94:c9:5c:72:a5:
c3:34:57:bc:b1:41:1f:f2:0e:f7:71:3d:db:2d:9d:56:a9:55:
50:12:dd:c4:fd:26:35:91:f6:17:6a:d2:44:52:4f:59:78:bd:
6c:a0:33:63:b5:80:63:e5:1a:fc:4b:b0:c7:5a:24:1e:e5:43:
80:80:b3:60:7d:e2:6b:89:5c:72:af:d8:ef:76:2d:7c:73:22:
b4:8b:34:1f:6d:20:3a:3e:e7:79:24:19:50:6f:64:4b:81:c0:
1f:a9:e2:8d:4f:47:93:81:00:ea:b0:9f:ef:8b:34:2b:a4:b4:
04:ac:9e:cd:a2:7c:58:4f:0d:a9:cd:1c:2b:58:64:6d:e1:18:
78:63:07:46:c3:a6:74:43:20:ca:28:2e:89:3b:15:8e:6e:35:
51:3c:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:29:20 2025 by rpki-client