Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: jMk7YW9CedavGVqQOIkriA4jFmFrVmjRh9rot2dwOt8=
Subject key identifier: C3:0E:BA:AA:C5:3B:CE:B4:8E:7A:F6:67:BD:8D:4B:55:6C:68:03:36
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 01977075B4A765E29F8437A5533689C314C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 131F
Signing time: Sat 14 Jun 2025 22:00:51 +0000
Manifest this update: Sat 14 Jun 2025 22:00:51 +0000
Manifest next update: Sun 15 Jun 2025 22:00:51 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: xaElaHRL2vX7AssLuWeKdk4Nya1a0CUwE3f/EI9ND1Q=)
2: VzSRXIJg549082TDLwuDhpZSHdM.roa (hash: A7LBmXbBqDdzugUEkji9OFm2eXNsHo+v5p497CjSCCA=)
3: gHDsE-M7Bds6BODdronU54n9Gb0.roa (hash: wZSAuVITgB+tf10qxZ+G6OSnVz70iDg6RypnL81jrkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:b4:a7:65:e2:9f:84:37:a5:53:36:89:c3:14:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Jun 14 22:00:51 2025 GMT
Not After : Jun 15 22:00:51 2025 GMT
Subject: CN=c30ebaaac53bceb48e7af667bd8d4b556c680336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:f0:8f:18:22:f0:ad:d5:05:38:56:96:9e:
03:5c:24:be:c3:c2:1a:ba:84:9e:89:d1:42:a6:ef:
f9:f0:e4:08:d7:22:36:83:06:9f:a3:e9:17:a0:fa:
43:69:00:b5:d4:d4:2b:d1:1b:b2:91:50:6d:3b:0c:
bc:21:0c:a9:a2:86:88:31:31:fc:21:1e:07:57:11:
53:ac:4d:de:6b:ec:dc:ae:0d:30:e3:f9:0d:5d:ea:
49:3e:54:6e:48:0d:f4:7e:32:81:e3:18:51:8e:04:
2b:59:2b:8c:ad:a4:9e:a6:a9:25:c8:bf:03:cd:57:
5f:bd:22:28:27:ca:f9:11:59:7c:d3:23:2f:bd:d4:
63:b1:42:d2:3a:c4:74:0b:d6:9e:01:61:1f:38:93:
8b:3f:37:0c:e0:92:bb:c6:de:54:05:01:98:53:dc:
a8:8e:e6:6d:75:48:6b:fc:2d:95:a8:90:3b:70:bc:
3b:92:98:d9:e6:8d:4d:d4:dc:53:b9:f8:d9:11:70:
d4:ca:c5:42:67:17:de:e8:0f:5d:c9:1f:66:2a:92:
07:52:e2:9c:06:33:fc:11:5e:5b:e8:c1:c3:e2:8c:
02:d5:3c:a0:0b:2b:9c:ab:28:46:b1:fd:f1:f2:3f:
cd:0f:a0:04:f2:1b:e2:2c:c7:0b:cd:07:bb:36:33:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:BA:AA:C5:3B:CE:B4:8E:7A:F6:67:BD:8D:4B:55:6C:68:03:36
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d3:7b:a7:7c:b5:4c:10:e1:0c:06:2c:ce:6e:d0:47:b9:b4:
8c:fe:e0:02:27:de:8a:5d:39:61:e5:2d:30:90:62:39:8c:34:
02:2f:40:bd:a1:b6:c3:5f:d9:da:b5:bc:62:18:f1:8b:da:e5:
c7:c4:53:96:31:06:66:f9:e1:b2:a8:4a:75:1c:42:ef:da:bd:
6c:e4:8a:97:77:86:8b:d5:23:a3:21:00:dd:5e:6d:e3:7f:bf:
15:51:fd:5a:da:95:fe:6c:8f:59:5d:ed:d2:4b:4f:2f:41:4a:
95:86:5d:54:8a:18:8b:54:51:05:0c:1c:66:e1:f5:50:2a:3b:
b5:d6:0a:77:18:de:45:47:bb:95:65:ee:16:58:0a:75:e6:86:
df:e7:cc:0d:19:09:61:7e:8b:59:55:b3:51:f2:cf:90:e0:6d:
cc:df:ec:2b:0f:ed:1e:f9:b1:bd:79:4f:77:62:33:41:8c:5f:
6e:a8:05:c5:5f:74:e2:27:9a:ac:51:7b:10:9c:a3:0b:17:16:
da:d5:0c:7c:cb:ed:1b:d8:b9:11:da:d1:bc:82:e5:db:d8:f6:
dc:10:f7:b8:ac:b5:eb:e8:f1:a2:d1:2b:35:9a:15:66:05:56:
e8:67:05:1b:51:6a:98:84:b6:03:2c:2f:83:03:1e:bd:e4:d4:
79:e9:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:08:12 2025 by rpki-client