Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: 8KIpPf+56Pu+ny4wUpSaukGxs2ucrAX0m9f+Fw56QaM=
Subject key identifier: 9B:68:8C:2D:3D:E0:73:1E:2E:C6:50:4D:A7:BA:82:3F:11:D2:52:EA
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 01976C98D964DF7BF4A246CBB5BD3D9353EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 04:00:45 +0000
Manifest this update: Sat 14 Jun 2025 04:00:45 +0000
Manifest next update: Sun 15 Jun 2025 04:00:45 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: vSO/PvrDQNytYzRDVe27WktVZJhyAEgalLQmebs4HZc=)
2: kenow9ooVwL0t4IuHSVvvQIsN8M.roa (hash: tJkXtVd1TBPTWkBnhiKcyLiHlQeoQgvy5+UbWV83vUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:d9:64:df:7b:f4:a2:46:cb:b5:bd:3d:93:53:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Jun 14 04:00:45 2025 GMT
Not After : Jun 15 04:00:45 2025 GMT
Subject: CN=9b688c2d3de0731e2ec6504da7ba823f11d252ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:5f:19:6a:0a:c9:ee:3a:a5:02:81:d6:6d:
b4:2e:69:9d:c4:1f:91:34:c8:a6:ed:1d:b2:66:c0:
bc:4c:c4:07:f3:f1:b0:08:9f:43:a7:55:67:d2:f0:
7c:2e:f0:34:99:42:0b:d2:34:52:ae:c6:ef:70:d4:
7b:00:e8:ac:ad:d8:13:7d:28:1b:23:82:97:6c:4c:
83:13:4e:11:8a:84:22:93:80:40:1b:c7:f1:72:ea:
06:70:09:27:42:db:aa:c3:f0:9a:d0:af:fa:02:92:
b1:b2:8d:d7:68:e1:4f:92:7b:11:5c:e5:35:51:c9:
f2:9a:2b:a7:70:3f:69:e9:a8:34:a2:9a:a8:4e:02:
36:a3:8e:80:2d:63:03:66:76:be:f2:7f:b9:39:d8:
a2:2f:b9:31:46:60:a7:25:42:9e:a4:a2:5f:5c:08:
a2:37:3b:0a:58:26:6b:3e:93:45:6f:b5:cc:3c:ed:
be:e2:a5:aa:59:84:39:9d:4a:ce:2a:c4:0c:05:90:
23:32:e9:67:42:50:fd:9b:0e:24:fd:8b:5c:45:d9:
ba:ec:4e:92:85:f9:8b:ed:1f:f2:02:13:92:5b:3b:
ee:84:01:2b:32:30:29:2e:36:98:dd:38:62:32:64:
b2:38:fc:db:16:48:c0:ad:e4:62:e3:98:68:76:41:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:68:8C:2D:3D:E0:73:1E:2E:C6:50:4D:A7:BA:82:3F:11:D2:52:EA
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:02:e3:36:d0:1c:dd:c7:7b:3d:53:48:1a:d9:5f:ac:73:c4:
d1:00:0d:07:f0:3e:3e:96:2d:39:88:f4:e2:83:32:49:e1:40:
ca:82:6b:9c:2d:e1:17:49:a9:eb:94:b0:4e:8e:22:7b:36:6a:
aa:22:2c:b5:eb:9f:25:c0:35:c1:34:1c:c2:15:02:4f:1f:88:
8c:70:0d:b4:a4:83:97:40:2a:23:6d:cb:1b:df:2d:27:70:41:
f2:e2:87:6f:f7:d6:c6:58:9c:13:6d:bf:79:e1:36:79:42:b5:
2a:33:f9:0e:e6:b5:eb:a8:e3:4f:28:3d:3b:26:82:3b:08:28:
b2:37:a5:6e:f6:a6:35:3e:49:f9:0f:ba:53:6c:29:5e:c0:21:
5a:5b:94:d5:02:91:fe:c3:68:be:3c:05:97:77:6b:31:6f:71:
1f:87:56:56:a3:75:9d:41:71:0e:0e:ee:d6:76:2e:3e:13:07:
16:9c:57:c5:30:ea:80:bf:81:68:0d:2f:23:fc:6a:44:ef:b1:
8f:16:03:84:1e:14:56:ba:5c:bf:b4:17:ba:e1:38:4d:ce:1f:
08:ac:a8:9c:fe:96:f6:0f:d3:49:63:1b:ab:cc:54:ea:ea:08:
74:f7:5d:d3:0f:df:61:0d:72:8a:97:18:d7:60:54:b7:50:f5:
b1:5c:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:49 2025 by rpki-client