Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: TiJ9P5Lr7hcdEUNW7x89CafQ7iN2VPimoGYds+oD5Tk=
Subject key identifier: 5F:AC:19:2E:36:66:2F:FA:9F:4C:EA:49:A9:45:1B:04:EE:91:3D:4A
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 0197782EECBF43B46852E8DCF4DAFA147C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 1406
Signing time: Mon 16 Jun 2025 10:00:30 +0000
Manifest this update: Mon 16 Jun 2025 10:00:30 +0000
Manifest next update: Tue 17 Jun 2025 10:00:30 +0000
Files and hashes: 1: 0cEqGKjfm76Pz1TjiCr0iAFNt_k.roa (hash: 8zpaYy8O1j58gbBpTxxShajSZwJzqKtViEUnKsc1qt8=)
2: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: w4Ik3zU1kTz1ink7ebqZg9SUyu6E4lq0k6WuEkEafH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:ec:bf:43:b4:68:52:e8:dc:f4:da:fa:14:7c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Jun 16 10:00:30 2025 GMT
Not After : Jun 17 10:00:30 2025 GMT
Subject: CN=5fac192e36662ffa9f4cea49a9451b04ee913d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:ca:0b:ad:92:7b:e3:0d:b6:da:88:55:07:
23:55:ef:ac:b4:75:cc:04:9e:cb:d1:37:3e:ca:01:
82:67:2d:50:29:07:44:de:2d:31:09:52:a7:35:e0:
ae:d0:a4:83:24:a6:86:6f:2c:a9:5d:fa:90:82:54:
e2:3f:d5:4b:fc:eb:60:e1:b3:0d:e2:af:3b:d9:74:
2b:5a:47:7c:88:7f:ff:97:ff:ed:32:c2:1f:06:0f:
31:82:2c:5f:b0:84:ec:bd:3d:38:82:28:fc:e6:7a:
b1:1e:86:de:0e:87:3e:a4:22:68:aa:5b:b5:b6:ef:
67:8e:53:0c:17:26:ff:58:b6:f2:43:ab:90:db:73:
39:93:e2:84:fe:c4:33:1d:9d:3d:f2:cc:d1:8e:93:
c6:38:b1:9b:91:07:a8:3c:84:29:d0:23:13:12:b5:
c8:92:e9:73:fa:25:79:79:26:12:dc:a3:49:8c:df:
65:b7:9a:fe:b7:cd:06:89:39:21:92:2e:9d:98:f7:
76:83:5b:01:fc:64:64:4d:d6:97:6c:12:2b:1b:a1:
76:81:6a:c0:f1:c4:83:98:6c:90:6e:1b:15:eb:6d:
65:3d:90:a5:34:d7:f4:76:28:8e:b4:32:f9:f1:7a:
8b:d8:d7:b7:86:b0:c9:6b:78:43:08:e4:cf:c2:3c:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AC:19:2E:36:66:2F:FA:9F:4C:EA:49:A9:45:1B:04:EE:91:3D:4A
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3a:77:53:0d:bf:eb:c7:64:f7:ed:52:f7:cc:a6:f8:a0:97:
0d:ee:3c:4a:f8:88:99:ef:57:99:0e:88:c8:89:c1:ee:9e:4e:
57:63:c2:a4:cf:d7:db:e2:12:20:e0:3b:2f:fa:a1:4e:cf:9e:
91:6f:01:58:ef:c6:e3:9f:e0:05:32:c8:a9:2e:c1:19:af:dc:
74:dc:27:a7:98:5f:98:2d:d4:e8:a5:c1:2f:db:6f:f6:d8:a2:
2a:8d:35:a1:06:fb:bb:b7:ad:4e:07:f8:9b:a3:1b:f3:b2:69:
0f:70:20:fb:09:83:8a:08:43:86:25:ed:35:67:c6:ab:8d:b1:
aa:ef:c9:ac:f0:e6:76:33:2a:f3:f5:85:b0:2d:c8:93:92:7d:
84:66:6a:9e:6c:84:91:cd:62:44:4b:27:49:80:69:a8:b7:b7:
46:65:c2:db:ac:7b:0d:42:9f:83:d8:b3:93:37:1b:d8:83:c1:
d6:04:24:50:52:7e:ef:d0:29:27:6a:37:ce:53:7a:5d:3f:1e:
bd:0a:ca:0e:a9:11:ec:f0:90:ec:03:87:83:6d:a7:98:53:c9:
12:3c:17:2e:94:45:53:47:52:2f:1a:c4:b0:96:88:69:57:f2:
ff:34:e7:37:df:46:3e:95:68:79:46:b7:c9:f1:cc:a3:21:15:
a3:b5:65:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:04 2025 by rpki-client