Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: pDIBbN6iOdmP4/bzTIgh2QtxCLnNdcmC4idA9I9iLS8=
Subject key identifier: E5:4F:00:3B:F1:45:06:01:AE:CD:CE:96:E1:6B:AA:9D:D5:F1:74:8D
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 019768F29DE0BFF485CECF5D0390FF2FC5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 10E8
Signing time: Fri 13 Jun 2025 11:00:19 +0000
Manifest this update: Fri 13 Jun 2025 11:00:19 +0000
Manifest next update: Sat 14 Jun 2025 11:00:19 +0000
Files and hashes: 1: 505QcayJo-pBwK1VqJNaBX1Q-5M.roa (hash: fIMbj/fl7aaDNKfopMcxB8cXpCnGq59ztvvwuTU/2xA=)
2: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: HiBQ4TFAXS+5ecQPItt4Le8jRmFp75ApbhPl5KMcPtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:9d:e0:bf:f4:85:ce:cf:5d:03:90:ff:2f:c5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Jun 13 11:00:19 2025 GMT
Not After : Jun 14 11:00:19 2025 GMT
Subject: CN=e54f003bf1450601aecdce96e16baa9dd5f1748d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:3c:ff:67:50:59:88:8f:8b:85:8b:15:0c:
18:da:8b:4e:7c:b2:50:b2:82:4e:16:86:65:45:69:
d5:58:46:6a:15:16:ed:b5:76:23:c0:db:c9:13:7f:
d7:5f:3b:a3:2a:a6:9b:ba:de:ca:93:fa:d9:b1:29:
90:87:2e:11:5e:aa:a9:60:de:9e:0a:cc:ee:a2:b4:
92:42:ef:47:e3:24:2c:a1:47:49:db:ff:67:b2:86:
6b:1b:d6:ec:79:87:90:6e:56:5a:b7:a4:ca:c2:42:
0a:9a:33:e8:e6:d1:de:c1:18:63:15:be:11:81:35:
07:4b:e9:06:e6:79:bc:bd:12:6a:88:69:28:2e:d8:
8c:96:e1:f3:3c:7f:c7:25:31:09:ca:a2:90:87:ee:
91:eb:37:1f:5a:39:c5:71:0d:8e:f3:78:bc:36:47:
a6:e4:eb:1c:18:7e:4b:d0:b5:8b:75:f6:da:7d:dd:
1c:7c:b9:cb:a7:05:59:98:ec:ee:9f:77:b4:e5:95:
b8:47:44:5d:ad:0f:8d:00:b5:ce:de:69:d5:96:c0:
ba:de:80:61:8f:b0:af:3a:6c:2e:5d:52:e7:d3:f7:
9b:4a:f3:7a:f9:b9:7b:ed:ac:46:30:98:b2:9d:4d:
6d:b6:17:3f:b4:8f:70:75:6d:aa:3e:76:91:89:a7:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4F:00:3B:F1:45:06:01:AE:CD:CE:96:E1:6B:AA:9D:D5:F1:74:8D
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cb:3b:3c:9f:bb:ce:02:03:18:94:b8:40:ff:9b:72:70:6c:
9d:8c:81:1b:4a:5f:e0:fc:28:3b:99:58:81:b4:58:03:1c:59:
4a:c9:22:b1:7e:98:63:21:1f:38:c3:56:ea:70:be:37:90:67:
8d:5f:3f:9b:ae:c0:03:fe:02:e9:03:52:68:3b:30:ed:86:3a:
98:b9:79:73:d0:b3:b4:88:ba:45:f3:c9:57:33:38:25:1b:4b:
17:d6:30:c1:66:bc:01:14:59:3c:c2:d9:36:88:86:b8:18:56:
8c:fe:df:72:fd:14:f2:ce:f3:d7:f1:8f:21:d5:f6:5d:e9:26:
40:a0:28:78:9b:5e:cb:1b:25:22:c5:fc:2b:b9:24:40:e7:51:
40:15:f2:76:5f:69:79:92:a9:94:3c:ee:15:43:dc:6c:4c:9d:
7d:44:ab:f2:ba:be:3e:f3:e3:98:67:82:ac:3d:38:e1:1a:01:
71:c2:aa:84:86:53:4f:c7:57:2d:fc:04:06:e0:f3:64:b3:06:
1b:f2:5c:79:e4:71:a1:00:dd:ed:0c:4d:ce:af:5d:bd:d6:b5:
e0:dd:bb:d9:17:e0:27:6b:5d:dd:9c:c5:9a:e2:11:79:36:09:
55:e9:75:8b:36:60:53:40:df:e2:bd:65:38:ee:f6:f4:1d:33:
28:97:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:22 2025 by rpki-client