Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
File: 5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json)
Hash identifier: PCag4Smnn46DeHYG/f5cPFYhjS9jHn0ZgQvYHZ5NVN0=
Subject key identifier: 5F:BA:D0:AB:E4:CF:E3:74:A6:E9:EB:0F:AC:3A:39:F1:EB:B3:5F:5B
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 019780FB8D1B42F977904E59F828FC496CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
Manifest number: 033F
Signing time: Wed 18 Jun 2025 03:00:58 +0000
Manifest this update: Wed 18 Jun 2025 03:00:58 +0000
Manifest next update: Thu 19 Jun 2025 03:00:58 +0000
Files and hashes: 1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: vsREejbSoz5TCNtswENl9pHM4UdyxI3wX2oQPMxcwNw=)
2: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (hash: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:8d:1b:42:f9:77:90:4e:59:f8:28:fc:49:6c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: Jun 18 03:00:58 2025 GMT
Not After : Jun 19 03:00:58 2025 GMT
Subject: CN=5fbad0abe4cfe374a6e9eb0fac3a39f1ebb35f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:2b:b2:0e:f7:a8:6a:5c:3e:47:29:5e:4e:
07:73:b2:e6:0b:95:55:42:fa:cf:07:c1:e9:75:2d:
d6:33:b7:48:7d:ef:b0:43:a7:65:2d:f8:2d:96:e9:
b2:d6:39:c0:5f:76:4d:50:85:0f:76:85:14:83:6c:
69:46:95:ed:77:4f:07:8b:01:cc:25:9c:67:b9:83:
1c:4b:73:1d:91:5a:c4:f8:24:3d:22:b3:04:e8:bf:
66:17:8b:62:84:a8:d2:c2:45:62:17:f6:da:7a:9c:
a2:b6:55:59:76:f9:39:61:6a:1b:5d:63:21:e9:2e:
52:27:31:5c:04:0a:cd:e9:36:a1:ba:4d:de:bb:49:
77:9b:9a:72:4c:70:87:8a:79:17:64:f6:6f:a1:3c:
46:8c:63:1f:43:a3:5e:47:96:a5:1d:f6:d5:d5:96:
26:7f:57:08:d2:39:6a:c8:5e:09:3b:c8:8b:59:65:
10:43:8c:87:b8:b7:94:ac:3d:dc:e4:5a:ae:57:6c:
df:0b:f8:be:4f:8a:8c:b0:ea:57:37:2e:04:4a:60:
04:f6:b9:01:f6:bf:38:04:89:48:87:37:c8:92:fe:
a1:ff:dc:d9:26:ca:64:81:a6:d3:5c:2d:b4:b8:39:
fa:d3:1e:67:63:f1:23:39:6d:c6:dc:38:f2:fb:e5:
24:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:D0:AB:E4:CF:E3:74:A6:E9:EB:0F:AC:3A:39:F1:EB:B3:5F:5B
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:48:a2:4d:2d:5a:df:d9:f1:e0:19:aa:23:ec:ae:25:c3:88:
66:e6:32:0e:79:18:46:71:a2:03:42:c0:5b:4c:2c:00:a2:c6:
46:83:43:98:62:e6:c7:72:78:11:57:8b:00:37:30:06:91:7b:
ec:bb:33:86:af:dd:aa:18:a8:a8:5d:93:73:51:56:52:ca:60:
85:f9:50:42:b5:87:b3:a2:6e:b9:ba:01:f2:40:c0:4f:cb:84:
fd:ec:45:03:bf:81:25:6c:0d:31:af:01:60:1a:c5:47:6a:af:
0b:84:c4:42:4b:66:6f:3e:45:be:92:b0:8b:8d:9a:ba:57:08:
29:d5:53:80:34:ab:70:7b:44:3a:70:ad:04:d2:4b:d8:b1:bc:
94:87:ae:35:fe:38:4d:f2:0f:94:fa:36:53:4e:ca:ab:3d:89:
82:e2:a3:9a:ac:16:80:82:fb:63:d9:93:e8:b5:55:8a:be:1a:
a9:df:07:1c:5b:6f:a0:75:20:37:8c:ff:7c:fa:bc:b0:2d:dd:
8c:ac:4e:9d:41:ef:b6:db:ac:43:11:33:d3:30:42:30:2b:b4:
bc:ba:fa:aa:6e:b2:df:09:a5:cd:68:78:0a:aa:67:eb:4e:06:
ca:10:d8:e9:f6:48:f3:9b:33:17:16:95:98:4a:86:d3:c4:bc:
a8:a7:69:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:00:57 2025 by rpki-client