Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: rx3aT4FB0hks8+vFSgW58YwGNXCFJcSs3SWrlfLHdSY=
Subject key identifier: 65:EB:DD:5B:02:39:6B:D9:BD:28:E8:4C:5B:45:FA:D8:6B:DC:81:16
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 01977A1DE88829161E33B61577D44148C274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 024F
Signing time: Mon 16 Jun 2025 19:01:09 +0000
Manifest this update: Mon 16 Jun 2025 19:01:09 +0000
Manifest next update: Tue 17 Jun 2025 19:01:09 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: VRNvffwA2V8CfhHfc+JyWQ/BCORtHbbZPO4WNDuB9Tg=)
2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:e8:88:29:16:1e:33:b6:15:77:d4:41:48:c2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Jun 16 19:01:09 2025 GMT
Not After : Jun 17 19:01:09 2025 GMT
Subject: CN=65ebdd5b02396bd9bd28e84c5b45fad86bdc8116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:e9:d0:fc:c0:48:60:ba:55:66:c3:0d:f3:
29:d0:a1:07:79:e8:e1:22:0c:b5:6d:df:f7:c5:59:
bd:0d:bd:5e:8b:c0:21:b6:91:95:06:23:6b:5f:88:
d9:11:86:86:45:44:e2:26:f4:56:77:dc:72:72:40:
54:b8:92:2e:a5:85:40:58:9f:8b:f9:89:9a:67:4c:
1f:c5:7b:56:b4:61:68:8b:aa:c8:5d:87:a3:44:73:
07:a3:3d:c9:7d:e2:26:3d:65:07:a1:ec:b9:c2:bd:
44:ae:00:00:01:05:87:e1:b2:da:2f:a8:f0:f6:09:
c4:96:79:4c:49:67:d9:f6:81:90:4c:52:72:50:36:
75:cd:e8:1e:b7:73:45:e6:fa:a1:14:66:17:db:7e:
e4:b8:f7:94:95:52:11:ce:9c:84:90:7f:96:90:d3:
5b:d7:24:8e:f2:ad:9d:50:b0:c8:06:cd:7a:73:5b:
82:97:d6:fb:d3:18:c9:d1:b3:2d:60:a9:23:54:de:
2a:a8:e2:db:5c:13:cb:3b:b4:7e:ac:6d:ab:fc:61:
06:ce:73:06:07:07:7c:5a:31:70:35:4e:f7:76:70:
1c:19:04:6f:7e:af:33:87:9a:0f:47:9b:a1:f1:8f:
71:90:e8:41:2f:47:b4:3f:02:4c:0f:3d:18:1c:f2:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EB:DD:5B:02:39:6B:D9:BD:28:E8:4C:5B:45:FA:D8:6B:DC:81:16
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6e:15:30:11:21:f1:2d:e5:3a:1c:bf:50:f9:e3:9d:c2:a2:
7a:27:a6:fb:c1:63:fc:2a:a0:5f:e4:33:0e:ea:1e:5c:5c:9c:
10:8e:b4:a7:08:d8:3e:23:7c:c7:18:e7:18:84:2a:a8:36:b8:
eb:30:1b:af:d6:cc:0a:c5:9b:95:33:99:70:8f:52:d2:61:6b:
ff:58:5c:24:e7:9c:23:89:ce:c5:b4:6b:ab:a5:fa:d6:bb:b7:
68:84:6a:57:eb:73:b2:63:cf:8a:92:f1:76:c9:71:07:8c:19:
f6:da:14:cb:88:f4:c0:de:a0:71:28:f6:06:42:20:37:14:62:
97:05:f2:79:b9:70:be:88:d8:c1:ed:d1:c6:f7:27:97:cc:a0:
5d:c7:3e:cc:4e:e2:04:ed:78:89:ef:04:2e:0c:dd:4d:ba:88:
94:b4:a4:ef:69:51:63:2b:f4:d5:e8:c9:a7:f8:ae:4c:54:0e:
98:62:f0:3a:0c:45:d7:1f:2b:fb:b3:9e:82:8a:82:fa:40:26:
bd:88:5a:bb:4b:82:ed:f1:bf:1f:0f:0a:ca:6e:bf:01:53:ed:
5a:9a:4e:1e:4e:18:03:f4:f0:d0:b6:7b:5e:47:17:e1:ce:c1:
53:f6:79:5d:69:c5:a9:ce:70:64:28:7b:18:81:3f:a3:f4:6a:
ba:83:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:41:17 2025 by rpki-client