Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json)
Hash identifier: RPzFG9XaVkD9/jVoWNDoBmPmtxWaFvc5kYhVDgqtK44=
Subject key identifier: C3:D6:4D:81:DC:E3:A9:A2:34:05:BC:F1:3D:43:F5:C4:88:D9:13:21
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial: 019768854B3F2EDFCA5550C9C6DBA7C4F29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
Manifest number: 0D2B
Signing time: Fri 13 Jun 2025 09:00:55 +0000
Manifest this update: Fri 13 Jun 2025 09:00:55 +0000
Manifest next update: Sat 14 Jun 2025 09:00:55 +0000
Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: 17Nkl1o0KbZBZhovr5Cxbc3Ci0RK4sPcu68KsNwOinU=)
2: TeyiHHpQzPXntQ9zcodgsnssabQ.roa (hash: 99RzEV6KxbBUQmEGjwYOg/0KALhFJ98CPqecVaZd8t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:4b:3f:2e:df:ca:55:50:c9:c6:db:a7:c4:f2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e505d93497f19d2563066b409200969711f28c67
Validity
Not Before: Jun 13 09:00:55 2025 GMT
Not After : Jun 14 09:00:55 2025 GMT
Subject: CN=c3d64d81dce3a9a23405bcf13d43f5c488d91321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:be:33:50:75:48:39:3b:46:6b:f5:a4:f7:
ca:64:7f:76:68:ce:70:69:51:99:78:06:3d:34:82:
4f:70:73:32:c6:42:2a:88:6b:7b:70:b1:f2:27:a0:
12:86:28:8e:bb:49:9b:e2:99:56:f1:a8:9a:30:16:
2d:8b:1b:1a:89:a0:a3:22:26:39:cb:e9:65:4b:ee:
7c:4a:d4:db:95:20:bc:de:01:51:02:fa:5a:33:a5:
60:10:ea:31:73:bf:bf:91:11:e8:29:39:1d:c2:eb:
d5:56:fd:82:51:d3:87:b1:86:e7:2c:8c:8a:dc:94:
6a:d2:91:28:0b:d1:0b:df:16:51:f1:02:c7:f1:f6:
ef:ce:b6:43:29:50:00:48:d4:67:09:7b:cb:9e:55:
82:63:1e:9c:7d:cd:55:28:1a:96:36:c2:79:ec:61:
14:5c:68:ef:2d:53:03:8c:60:ae:b4:61:67:d5:46:
f8:6a:c5:40:ac:f1:06:4d:d1:31:e6:a9:ae:23:31:
dc:bf:1b:cc:78:dc:4c:72:1e:a6:af:95:5a:3a:bd:
06:b8:5a:ac:92:04:c8:54:ee:ed:34:bd:e5:60:bc:
84:86:e4:09:7c:d0:e1:ab:b3:9a:09:64:b4:28:d5:
31:b6:c8:33:bc:bf:6b:e6:08:c7:ef:3d:01:41:6c:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:4D:81:DC:E3:A9:A2:34:05:BC:F1:3D:43:F5:C4:88:D9:13:21
X509v3 Authority Key Identifier:
keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:98:9d:14:3b:a1:4e:ad:a9:ca:21:38:c1:f1:77:30:f4:ad:
c1:90:03:cc:86:71:35:e6:e8:3f:4d:e9:6b:e8:08:06:2d:70:
32:13:b5:13:72:90:2e:0d:e9:d3:90:a2:0d:7f:ec:12:58:cb:
7f:51:79:72:3f:0d:b4:fa:bb:4b:e8:6a:d8:38:ef:c7:d7:09:
20:b3:07:4d:a0:e1:c3:54:24:df:62:2d:d4:44:81:be:85:33:
37:52:c4:f7:30:37:8a:00:74:b0:a8:54:73:a8:7a:12:9d:1c:
0b:6a:46:d9:5e:b5:c4:f4:df:f0:c1:48:f1:c0:92:f8:72:d3:
9e:fc:ed:8f:0c:b6:45:14:07:a0:52:fb:03:0a:69:d5:81:7e:
0e:7c:ca:0a:56:5a:33:da:99:0a:7b:1c:0c:73:81:60:74:cb:
7c:04:b5:05:67:ea:5b:3a:22:f4:c7:90:19:8f:b2:1c:a5:8c:
73:ae:c2:2f:b1:d9:4c:6f:be:7b:2f:8f:82:7d:4f:f0:aa:77:
e1:4f:ed:77:f0:8d:d0:ed:00:b9:9b:73:bb:09:1e:aa:b9:59:
e7:3b:78:65:fb:57:97:7a:db:c9:8a:fd:49:ba:1b:0c:5a:de:
75:49:aa:a4:e3:6b:58:3e:4e:70:53:40:a6:64:c0:01:6c:80:
c6:06:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:48 2025 by rpki-client