Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: DmALcR56/9305a8rvniKus/Ct0IdaGOaxoI4TolFeO0=
Subject key identifier: D6:44:3B:79:CE:18:9B:83:E2:8A:52:F4:62:61:A0:AB:D6:22:DD:BB
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 0197711B1CB41DEA8AB5F84C3063BFC9248B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 0533
Signing time: Sun 15 Jun 2025 01:01:31 +0000
Manifest this update: Sun 15 Jun 2025 01:01:31 +0000
Manifest next update: Mon 16 Jun 2025 01:01:31 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: E5qldqV3n8M2nF8HBhe0+UKhJ4czSGaF7iHUsdo7Ojw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:1c:b4:1d:ea:8a:b5:f8:4c:30:63:bf:c9:24:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Jun 15 01:01:31 2025 GMT
Not After : Jun 16 01:01:31 2025 GMT
Subject: CN=d6443b79ce189b83e28a52f46261a0abd622ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:37:90:9e:50:b4:55:cc:df:e2:c5:d7:4a:
aa:e6:73:28:29:f0:a2:9e:4b:9c:f2:97:17:94:33:
0d:97:7a:46:d1:fb:01:b7:33:c8:ef:d7:69:66:12:
4b:e1:c7:88:af:29:ad:cc:cb:05:37:7a:14:1f:ff:
5b:a9:30:8b:88:6a:b2:7e:21:d9:2e:b2:1f:f7:45:
0a:d1:9b:32:bc:77:82:e9:d0:0c:9d:49:35:7c:4c:
7a:40:c5:05:b8:33:b7:57:40:e3:a3:0a:44:00:cd:
70:9f:c7:5a:37:18:d7:27:86:d7:b5:7d:9e:94:27:
83:b9:34:30:92:15:ee:b4:8e:b5:bc:11:41:dd:8d:
49:37:ad:f0:ae:12:c1:5a:e1:39:d7:bd:d4:b3:43:
f2:ee:14:b6:d3:ba:fa:e2:24:77:44:b9:21:67:eb:
47:d3:67:ab:9f:b8:d9:20:c3:0b:f0:12:2a:fe:21:
26:72:9a:81:ca:57:8f:9a:d8:c5:68:c3:9a:f5:83:
57:a9:dc:c2:e4:e3:81:3f:6a:36:18:d4:b6:04:41:
be:56:fb:89:24:d1:0b:47:5c:ba:79:e5:34:0c:26:
39:66:00:51:b3:2f:9e:8d:93:86:e4:17:ec:de:b3:
52:84:0e:83:7e:6f:bb:4a:08:ed:2d:93:82:30:b3:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:44:3B:79:CE:18:9B:83:E2:8A:52:F4:62:61:A0:AB:D6:22:DD:BB
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:54:c1:d0:65:4f:f3:a2:26:99:8e:17:36:d1:52:99:ed:8a:
7f:61:20:31:37:00:25:32:e4:39:c0:5d:fa:c7:82:27:23:4c:
e3:32:f4:18:43:ec:f9:62:2a:2f:14:9b:63:5f:ee:4c:f0:15:
88:ab:0d:2a:91:60:de:a5:c1:70:ce:46:7c:f5:fe:4e:6e:29:
3c:61:b1:fd:2c:da:41:15:cb:2d:6b:c2:f1:79:2e:14:40:55:
7e:bc:c5:a5:3c:f4:86:ef:f5:12:09:b4:e7:05:da:9a:e8:56:
4b:29:ae:39:9c:99:0b:af:8e:57:70:08:ec:4b:56:de:cf:2b:
8d:a8:85:f3:6d:7e:89:d2:df:6d:ed:1d:be:d3:98:54:85:97:
90:55:c4:df:0f:54:1c:91:40:31:4c:a4:10:be:5b:45:d9:0f:
a2:b8:8f:fb:7e:8f:3f:00:ca:89:ad:7f:ff:2a:a3:70:7d:a4:
e8:42:2e:d2:1f:17:96:07:82:9f:a7:05:b3:9d:6f:e6:05:58:
61:75:44:b6:2e:41:b0:c7:71:16:bf:a4:3d:52:b0:02:e9:2f:
42:ba:16:e1:8f:02:61:4a:8d:90:c1:86:b5:09:a9:ae:03:a3:
12:b7:c0:e2:35:34:ff:0f:79:c7:43:f1:e9:52:f9:46:07:41:
1c:e3:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:55:44 2025 by rpki-client