Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: EJ5vOkCDxpodLe97RdThSFyve80mneEvUz9ZzARLHJw=
Subject key identifier: FD:69:F3:CC:5F:5A:34:AB:31:04:CD:12:10:60:07:1A:1D:58:2A:47
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 019771F671E7C71B655B18DD0B19E74DF441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 05:01:05 +0000
Manifest this update: Sun 15 Jun 2025 05:01:05 +0000
Manifest next update: Mon 16 Jun 2025 05:01:05 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: TG0anPxBD8Gdw6kjkCm1IT4Cz2QnUhW1qfjdmD+izgk=)
2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:71:e7:c7:1b:65:5b:18:dd:0b:19:e7:4d:f4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Jun 15 05:01:05 2025 GMT
Not After : Jun 16 05:01:05 2025 GMT
Subject: CN=fd69f3cc5f5a34ab3104cd121060071a1d582a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:a8:ff:51:de:99:e2:a8:92:b0:2c:73:e0:
c4:af:09:6d:7c:75:c3:14:de:fc:54:ea:fd:53:11:
55:24:64:7e:f3:62:26:69:a3:4c:5c:c1:71:95:4f:
ae:de:8d:cf:7e:3f:15:f7:aa:20:c4:27:94:18:25:
60:e3:bd:57:14:7f:09:63:5f:00:c9:e2:e0:36:4d:
df:cf:65:f1:c7:da:e9:e5:cc:61:72:7f:4b:80:90:
75:c0:c3:fa:26:de:00:38:8d:a1:ae:62:4c:b5:f0:
f4:82:d9:13:5d:60:4e:78:7c:3a:7e:f8:18:e4:59:
dc:0e:18:ce:ad:da:a2:66:74:9f:88:ec:41:e2:50:
3d:d2:f2:46:fa:f3:a9:49:aa:b7:00:c2:f5:29:60:
20:54:b4:70:53:bc:fb:4c:90:b5:74:cb:fc:a4:94:
83:8e:f7:69:9b:66:ae:dc:fb:af:d4:d0:8f:5f:1b:
65:c9:cb:bd:f7:b6:30:9b:69:ac:2e:3e:dd:5d:17:
2c:9d:5d:df:66:ce:10:a4:7d:43:54:30:81:26:2f:
1d:ed:cb:cc:23:aa:43:07:2e:41:51:6c:5f:2c:44:
d3:89:37:8e:96:36:e3:b7:f7:ba:6a:1a:90:36:5a:
96:dc:08:66:b0:f3:e6:8a:fe:eb:2a:8d:fc:98:76:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:F3:CC:5F:5A:34:AB:31:04:CD:12:10:60:07:1A:1D:58:2A:47
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:82:cb:a7:e6:ed:90:f1:65:4f:c7:a7:7a:0c:9e:fe:86:94:
ad:19:b1:0c:95:71:ab:10:9f:7c:f4:37:ae:44:f7:33:de:be:
ab:53:c3:de:89:b5:80:98:b4:2a:17:5c:7c:88:02:ca:78:25:
0c:26:46:c9:8f:25:1c:8f:15:43:f1:77:d5:79:4d:7c:7a:0d:
45:ce:23:07:26:3b:68:0d:64:d0:71:b8:6a:83:f4:ed:62:95:
05:e5:c7:02:ea:ec:e6:ab:cc:5f:83:2a:2d:3c:63:c9:0a:fa:
fe:b2:93:05:8b:58:d3:48:9e:d0:02:ba:48:85:bb:4a:ab:5c:
1c:a9:7a:d6:08:03:e3:2f:6d:bf:39:1f:d0:06:3f:59:05:31:
60:c2:3a:82:52:5f:88:91:1f:24:4c:40:d9:27:a9:2a:68:fa:
88:c6:49:1f:93:9f:2a:61:8c:e6:99:20:c7:e9:49:68:8e:94:
65:bd:3c:d7:c9:6e:68:6d:3b:2e:3f:1b:e2:4c:f6:73:0d:dd:
23:78:0a:bc:86:b2:f1:41:67:c3:a0:c4:9b:60:68:5c:82:9b:
ae:f4:49:af:f9:f7:a6:04:c7:f3:90:40:30:3d:7f:34:a2:ce:
aa:98:e6:3f:40:d0:b7:24:5b:11:b4:0d:1d:de:60:17:84:8c:
f2:84:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:12:49 2025 by rpki-client