Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: 8Rm6+J15K3sOwJa+BswQcq+RGeuZjUzA8k5eia6xYA8=
Subject key identifier: 6C:09:07:C3:72:65:59:CC:09:9B:03:7C:A3:F7:1E:27:48:51:F6:49
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 01977753AAC397BED21597049E038B645B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0627
Signing time: Mon 16 Jun 2025 06:01:01 +0000
Manifest this update: Mon 16 Jun 2025 06:01:01 +0000
Manifest next update: Tue 17 Jun 2025 06:01:01 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: t61kXvpRUZBhiU4gn6WMsDU8GIIWhwlSnavzXitiM5c=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:aa:c3:97:be:d2:15:97:04:9e:03:8b:64:5b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jun 16 06:01:01 2025 GMT
Not After : Jun 17 06:01:01 2025 GMT
Subject: CN=6c0907c3726559cc099b037ca3f71e274851f649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:22:8c:5d:ad:54:4e:e3:1f:75:09:c8:34:
13:8a:54:58:b6:fd:1c:87:43:f9:e9:89:77:86:e2:
fe:19:9d:1c:a5:0a:f8:bd:a6:df:0e:b8:cf:9b:1e:
83:5a:de:64:d9:ba:f7:e5:e5:bd:2b:47:40:d7:7e:
23:37:10:bf:51:9b:fe:2f:87:d4:89:91:33:ca:c4:
38:47:14:48:a5:b4:e9:62:11:32:a4:57:39:68:0b:
11:82:00:d7:e9:b1:4a:29:54:4c:b0:d8:fa:3b:f7:
52:30:21:fe:52:4a:fa:e3:ea:bf:6c:27:51:45:9a:
bc:9d:54:67:a8:20:32:1f:ba:28:5d:7a:82:25:74:
0b:3d:96:43:28:71:e7:37:db:3d:69:62:20:44:fd:
00:96:4f:25:22:a0:44:0b:a7:7a:77:0d:d0:dc:cf:
d1:dd:48:9b:1c:ce:75:a1:24:9b:89:5b:d0:c4:66:
b8:17:19:4b:fd:cc:c8:b8:3d:f0:ca:86:62:d5:d0:
07:72:d9:9a:cf:23:40:fe:fa:37:9d:44:31:66:5d:
d9:28:cd:85:54:98:1a:ec:ac:d2:aa:be:94:00:b7:
16:33:b4:f6:82:b0:31:2f:35:73:3d:02:c4:1d:8e:
b8:25:9b:8c:e6:b7:66:e9:2d:09:0c:7a:00:f5:20:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:09:07:C3:72:65:59:CC:09:9B:03:7C:A3:F7:1E:27:48:51:F6:49
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e7:1b:82:ed:a0:c5:45:79:2d:08:3a:a7:35:c2:93:35:a5:
f5:71:b0:8a:81:a1:2c:36:95:a1:08:31:cd:69:91:53:d7:3e:
2e:f7:89:ac:8f:2f:a2:d9:7b:16:a2:4d:aa:18:f8:c3:4c:ea:
56:41:ac:3e:1e:6f:df:dd:3b:6e:3a:e8:c5:39:ca:58:bb:77:
61:b4:52:84:7d:26:1a:69:61:3c:f2:9b:77:00:6a:67:28:7f:
25:2c:9d:31:00:07:85:5b:6a:9f:43:4b:6c:d9:a3:21:a0:f2:
32:5f:ed:06:c6:8d:7c:95:fd:17:9f:cf:ec:27:81:9e:94:db:
3c:ed:07:cd:c5:a6:10:91:19:fc:7e:18:7b:7b:b4:0e:ca:76:
bc:5c:bf:f1:71:3a:2a:c0:f7:aa:c0:39:0c:95:0b:f9:c1:9d:
f9:e9:61:db:45:47:bc:b2:7b:43:4b:9b:fd:a3:73:ea:42:7e:
e3:11:c6:63:85:b3:4d:69:03:1d:ac:d3:ca:48:d7:62:89:59:
15:04:cc:f4:08:7a:41:ed:27:4b:fd:06:69:64:0d:11:9e:af:
fc:46:0f:25:a3:10:3c:7b:71:41:86:21:cd:8c:7c:df:a0:f5:
f4:5e:7e:0a:c9:b0:a4:4c:43:80:ff:88:7f:07:16:57:59:91:
16:f0:56:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:46:52 2025 by rpki-client