Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
File: v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json)
Hash identifier: Ig48kajQIRzum9yFSHizpZPWx9m6SjXwx/8T5TlN5Sk=
Subject key identifier: 98:AE:B0:EC:32:5C:A3:03:AF:43:2C:2B:71:7E:36:3B:7D:7D:0D:B8
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial: 01978D6D3C51F25CC115E00CE02637652FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
Manifest number: 1532
Signing time: Fri 20 Jun 2025 13:00:35 +0000
Manifest this update: Fri 20 Jun 2025 13:00:35 +0000
Manifest next update: Sat 21 Jun 2025 13:00:35 +0000
Files and hashes: 1: i6hB2IahOI67PvpUTSQc2nj4R3g.roa (hash: d+MeIEX0oXT1ILgVQ/KLqsvbNLNFr38pDADmv1QHEqI=)
2: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: twJwot5oKIs07ptGl20N4K5OAI2bvVOWJccw73OgSJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:6d:3c:51:f2:5c:c1:15:e0:0c:e0:26:37:65:2f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Validity
Not Before: Jun 20 13:00:35 2025 GMT
Not After : Jun 21 13:00:35 2025 GMT
Subject: CN=98aeb0ec325ca303af432c2b717e363b7d7d0db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:be:cc:41:08:65:1a:36:0a:4c:c2:99:1f:48:
b2:c9:f3:07:70:07:29:6e:cb:35:5f:83:bf:48:9b:
78:44:fa:f3:89:b5:5c:bc:44:6e:4a:47:10:53:fe:
19:29:22:c7:f5:8d:cf:dc:02:ee:18:bd:e7:59:3a:
69:39:2a:b1:9a:92:a6:b7:07:8a:78:de:12:80:f7:
7d:69:10:2e:7f:65:f1:8b:0d:22:03:d6:c5:09:66:
1a:c2:a1:a9:9d:15:bc:00:fc:f8:4a:81:fb:c6:29:
29:2a:34:4e:cc:66:bc:5f:1e:f0:64:01:55:6a:d1:
a0:fd:ea:99:a7:42:48:71:a4:1a:28:ec:75:d3:00:
2e:5d:c5:aa:00:b5:65:b6:4e:6a:fc:24:a9:c9:0a:
f1:bd:86:e8:c3:3e:ea:91:9b:61:e6:0c:10:1a:11:
4e:55:3f:94:f6:dd:67:ed:45:7d:3f:f4:6d:99:6b:
4e:b4:a0:be:cd:b7:72:be:1b:a6:79:42:69:f8:f6:
4d:f3:63:65:ab:9b:02:91:f8:ec:9b:23:e6:46:28:
57:2a:d2:87:21:3e:62:b9:9e:80:1b:22:08:48:f4:
42:1b:87:80:5d:e1:74:af:b1:c4:02:9d:ba:00:4a:
eb:11:1d:b2:08:bb:8d:9c:3f:c4:dc:9c:1c:65:66:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AE:B0:EC:32:5C:A3:03:AF:43:2C:2B:71:7E:36:3B:7D:7D:0D:B8
X509v3 Authority Key Identifier:
keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:71:48:22:11:f9:21:94:b3:eb:82:05:f9:8b:68:c7:43:51:
6c:aa:98:52:11:cc:4b:31:39:31:89:72:2f:09:23:2c:bd:ae:
e4:c6:ff:c9:2a:38:de:c6:7d:19:42:bc:c5:49:7d:be:c2:44:
b8:e4:27:33:cd:54:39:4c:41:73:47:7f:95:6c:bc:cd:81:94:
cc:02:f3:49:f6:48:ac:96:2b:97:f4:84:3e:27:1f:b9:65:8a:
a8:6c:40:16:5e:e9:ec:6f:e9:c1:62:82:7c:fa:7d:97:74:2d:
73:cd:16:1d:50:e7:fc:db:90:49:42:fa:40:e0:77:ca:97:a2:
4c:f3:94:13:0e:22:07:f6:5f:f0:4e:52:84:4f:e9:9d:67:4f:
ac:7f:b9:79:15:a5:d8:26:f4:44:5a:98:a0:c2:56:6e:85:5c:
56:77:a3:10:22:53:81:b5:75:67:84:fc:81:b4:80:7a:f6:f3:
45:0a:9d:8a:cb:1b:a7:5b:63:30:3d:cb:f7:c9:04:41:00:1e:
92:5e:06:f4:bf:d1:22:c5:fa:63:43:67:a8:56:49:fc:d6:49:
42:da:e9:16:3b:3d:60:ec:11:8d:2b:25:2d:72:e9:92:ac:95:
73:7a:a1:a1:32:6a:36:ca:9b:a3:da:a9:12:2a:86:84:64:41:
d6:70:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:43:27 2025 by rpki-client