Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json)
Hash identifier: XnGpmCkiMRGBn9AdUh3WOY4haI3ngwKcKQuUCjNYKwo=
Subject key identifier: 38:6D:D3:0D:5B:5D:9E:6B:FD:97:7F:3D:5B:3B:3D:DB:F2:DE:7F:20
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial: 0197711A24556909B42B8609B9F84F070B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
Manifest number: 0B7F
Signing time: Sun 15 Jun 2025 01:00:28 +0000
Manifest this update: Sun 15 Jun 2025 01:00:28 +0000
Manifest next update: Mon 16 Jun 2025 01:00:28 +0000
Files and hashes: 1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: Eyj45zJY1bD32QG4qU2/q5MzCwJfFqKp+I1QjkneZoI=)
2: 6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa (hash: wbgE92t6bLMyfvwqmBJusUZf/7LqDlcOflMgewrcKFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:24:55:69:09:b4:2b:86:09:b9:f8:4f:07:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Validity
Not Before: Jun 15 01:00:28 2025 GMT
Not After : Jun 16 01:00:28 2025 GMT
Subject: CN=386dd30d5b5d9e6bfd977f3d5b3b3ddbf2de7f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:fd:0a:42:16:ea:e1:8d:e2:b2:96:c3:be:
03:9c:8b:13:ca:69:15:8a:48:da:f5:06:c2:5d:9c:
dd:6b:4f:67:2c:14:48:0e:7d:79:ec:6e:f8:ec:0b:
02:6b:e1:26:83:5a:3f:d5:c3:dd:f3:02:14:2d:c7:
1f:86:f5:bc:1f:99:6f:3b:8d:bc:df:a1:98:f4:4d:
bb:e7:8b:8a:36:4f:a0:f2:b1:9b:bc:d7:af:13:e5:
f5:d5:80:6f:7b:e0:74:88:c0:c3:6b:95:a3:66:4f:
0d:cd:32:f6:64:ef:e9:c8:a0:38:28:16:8f:70:f9:
79:73:76:e7:a2:22:c5:f6:20:67:8a:d1:14:dd:42:
6a:ef:99:28:08:d3:4c:89:13:5e:65:c8:3c:c0:fa:
d1:54:d9:4d:90:70:8a:6c:85:65:e2:85:da:4b:c6:
98:5c:d7:b3:dd:02:49:fc:74:70:db:73:87:08:9a:
41:ad:bc:a2:cd:6d:ee:cf:0b:b4:96:88:ee:83:23:
c1:71:92:28:1f:97:de:08:99:2b:27:61:0e:c5:75:
f7:e1:36:7e:d3:dd:05:b4:fb:6c:f2:c4:e0:0a:79:
80:eb:85:ed:8b:a6:c8:59:d5:d6:50:57:b4:43:2a:
8b:65:92:39:76:f5:61:31:c5:4c:f6:5e:44:61:5d:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:D3:0D:5B:5D:9E:6B:FD:97:7F:3D:5B:3B:3D:DB:F2:DE:7F:20
X509v3 Authority Key Identifier:
keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:52:9b:20:6f:56:9a:47:79:fb:8c:18:1a:84:bd:c2:c7:40:
0c:ba:8d:79:23:4a:67:8d:00:b3:b2:6c:27:b3:67:19:34:d8:
54:d6:5e:31:08:30:2f:d0:3d:42:d7:0d:85:43:08:2d:be:2c:
d0:25:ff:61:9e:0f:e4:fa:50:1c:a3:d2:d4:41:36:e7:b6:7e:
62:82:6b:bf:53:de:28:16:67:07:72:84:b5:49:2e:41:4d:73:
5c:2d:24:3b:7e:e4:a3:0d:c7:a3:fb:f5:c3:17:3d:5b:f4:6c:
db:64:19:18:5e:65:3c:cb:1a:13:9c:4b:84:d6:50:d8:31:7e:
16:79:fd:67:49:4d:48:63:d3:35:14:51:b8:3d:f2:2d:46:53:
22:0a:7e:6a:2e:4c:77:0c:d5:66:06:27:fc:b6:b8:f1:1e:24:
45:b5:a1:3b:7a:50:9c:28:54:6a:25:9c:05:7c:db:b5:66:a7:
67:c6:97:a3:c0:8f:27:19:2a:1a:c6:ce:6b:0a:a5:ad:08:45:
12:8a:fe:36:5c:e9:b4:28:68:4a:f1:a5:68:f8:7d:2a:6d:d8:
03:ee:c3:b7:cb:ac:35:0f:7a:89:60:1c:58:23:55:ec:6c:27:
a6:61:5c:ee:cf:6c:6b:91:eb:33:07:c8:16:0a:e1:9c:29:5f:
72:66:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:38 2025 by rpki-client