Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: RDc0dbNMBgBXa1jhuxsSA9FOCl/M6+m9NRbQzHQhLJ0=
Subject key identifier: 60:BE:A2:35:05:1E:9F:86:2F:18:61:44:BE:D4:A7:7A:CA:12:2F:C3
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 01978C23FB6FFEFC0E76481D9FCE7FD35931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 0F72
Signing time: Fri 20 Jun 2025 07:00:57 +0000
Manifest this update: Fri 20 Jun 2025 07:00:57 +0000
Manifest next update: Sat 21 Jun 2025 07:00:57 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: UMzPiBDTXg+ZiT70xCimnA4LQMkzO5WnfcWNtLQyRsk=)
2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:23:fb:6f:fe:fc:0e:76:48:1d:9f:ce:7f:d3:59:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Jun 20 07:00:57 2025 GMT
Not After : Jun 21 07:00:57 2025 GMT
Subject: CN=60bea235051e9f862f186144bed4a77aca122fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:46:87:a0:60:7b:27:f9:fc:cd:f4:80:f9:
0e:ff:4a:8f:43:5d:24:40:66:cc:ea:ce:a0:65:b3:
2c:9e:b2:83:5e:1c:da:6c:c8:d8:0a:b9:1b:ce:df:
c5:9c:b5:53:0f:76:c5:ef:89:cf:ef:f0:8c:1e:32:
79:0a:6a:31:70:9f:a0:ea:fd:a1:da:12:76:99:55:
9a:b4:c9:dc:c2:53:57:fa:67:5f:f0:ea:19:41:a4:
21:b8:d7:4a:c6:3f:02:d1:03:a0:18:e5:2c:1e:51:
ff:f9:d5:26:ea:58:c3:2a:a7:eb:59:eb:e0:5f:47:
2a:3e:4c:a3:ce:7a:1f:81:68:9d:8d:65:f6:aa:af:
5c:4f:94:fd:b3:71:07:9a:6d:5e:63:ca:4c:2c:23:
19:30:2d:58:3e:7b:55:65:2b:1f:95:4d:b9:82:07:
59:2d:f9:19:28:cd:1a:29:3e:77:f6:27:ee:3e:37:
e2:4a:7c:37:3e:f6:23:71:b7:ee:aa:e2:8b:9b:13:
d6:ce:6d:1d:bd:97:d5:f9:6a:87:d3:0f:39:59:43:
3b:cd:36:87:c6:6d:3b:32:96:5e:82:56:41:2a:c5:
29:9e:9f:c6:45:1e:76:d2:4d:5a:f0:a0:90:24:d6:
f2:a3:b7:4b:3b:ed:63:2f:b2:88:76:6c:4d:2c:20:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:A2:35:05:1E:9F:86:2F:18:61:44:BE:D4:A7:7A:CA:12:2F:C3
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:17:fb:df:b6:a6:bf:cf:13:6e:e8:fd:c8:cd:f9:2b:8c:08:
7c:9f:f2:d5:78:e2:3d:fd:bf:64:a0:83:fa:f4:f2:b6:8b:71:
a6:a3:d4:cf:c8:c6:f6:29:f3:2e:18:33:5c:00:06:3d:8d:53:
ed:92:8f:12:92:8a:44:b2:75:5d:c3:bb:f2:1c:ed:76:31:99:
db:d3:e4:01:91:00:33:fc:fc:23:74:ca:56:d9:00:39:0c:5e:
34:8a:bd:0c:9f:9f:1c:48:4e:dc:36:aa:0a:9d:d7:f9:db:d8:
b2:65:de:fe:e7:e3:13:c5:93:7d:9c:bc:7e:c3:a3:5f:5e:c3:
8e:d2:61:5c:1b:63:50:0d:a5:f2:d5:72:e2:13:86:71:a5:d2:
82:f5:7a:9c:d0:3e:14:6c:96:31:1e:50:34:28:c1:c8:be:a3:
b7:02:c1:75:c6:59:39:19:8f:94:2c:09:c0:d9:25:b3:61:62:
fd:90:a6:9f:e1:1f:7f:a0:f1:39:f4:7d:d6:12:27:50:0b:ab:
f2:ab:6b:ed:5b:f3:eb:44:35:3d:ff:c6:12:b3:fe:f7:f6:c1:
25:ae:79:33:6f:75:b6:14:fb:d1:65:1a:2d:13:73:e4:fc:38:
11:98:15:55:10:f1:00:ce:48:ac:29:57:8d:c9:1d:c2:b5:7a:
6f:e2:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:42:55 2025 by rpki-client