Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: bGfsUKw2nAd74pEbSmRanxMic2wA0KTewbYP94Qr868=
Subject key identifier: 10:14:8C:34:EF:BE:97:D8:BD:7F:4C:9F:39:E7:47:03:D9:54:89:7B
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 0197432F500EF0289C9CC78BCEC088D21F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 1215
Signing time: Fri 06 Jun 2025 03:01:03 +0000
Manifest this update: Fri 06 Jun 2025 03:01:03 +0000
Manifest next update: Sat 07 Jun 2025 03:01:03 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: 1I6uCPGWrIOYcO1nkpt1sBooVR8NwopnZNXzFZmZcgY=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: yV2QuoCYFVjM2-OTmFDea8Z9hyw.roa (hash: Fm6HaS57Sk5HrIHo3AJdE4/OrtFAnjdqKcrhGRoXq3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:2f:50:0e:f0:28:9c:9c:c7:8b:ce:c0:88:d2:1f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Jun 6 03:01:03 2025 GMT
Not After : Jun 7 03:01:03 2025 GMT
Subject: CN=10148c34efbe97d8bd7f4c9f39e74703d954897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:38:c6:c1:f1:ad:de:85:39:d1:ea:eb:20:
42:1d:11:ac:3d:0c:88:c8:6d:0d:93:cf:e2:8d:17:
a4:ac:1e:c5:aa:e4:8c:7b:63:59:54:a8:f7:23:aa:
94:06:9c:f9:8c:13:ce:10:ab:98:64:5a:74:6e:25:
33:0b:d5:67:0b:a6:a7:d4:84:b7:5e:50:59:64:43:
d1:66:0e:13:fe:eb:ee:f2:a2:6f:19:68:fb:5b:bd:
09:aa:c2:c0:a6:06:2a:e4:db:89:04:2f:cf:97:12:
37:13:10:da:87:1c:04:9b:5a:0f:7f:5c:c3:23:3f:
42:5f:4f:0f:fc:d0:a5:bc:eb:0e:8b:f2:fd:23:ff:
cb:95:6f:7c:89:b9:c8:7a:c8:d7:24:24:ad:4b:ba:
b4:2b:8f:dc:39:f9:7a:db:e9:d9:72:ec:c3:70:bb:
54:19:b4:5f:67:86:aa:a9:20:18:32:2d:3e:4c:c3:
c1:1c:34:76:39:21:22:b0:64:40:c3:50:ae:33:c1:
b2:67:f5:8c:23:36:20:35:5f:c9:8f:bd:59:06:33:
30:6f:1d:14:db:fc:1a:fc:32:be:c2:05:23:72:82:
e7:c2:67:e4:1d:40:8a:de:aa:ba:6b:85:c0:a8:59:
60:f8:8f:95:ed:e7:69:51:62:08:c2:28:cd:ed:5b:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:14:8C:34:EF:BE:97:D8:BD:7F:4C:9F:39:E7:47:03:D9:54:89:7B
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2c:f7:ae:2c:cc:b5:d2:48:ca:42:a1:6b:7b:57:e4:70:c4:
a3:4c:fb:90:be:3d:f3:ce:c3:ec:c7:ae:e4:46:2f:5f:5f:fb:
31:b6:18:60:f2:96:1e:11:0a:1a:bb:54:ea:27:c9:5f:5c:d4:
2e:70:2d:b9:1f:93:9b:a0:e2:28:8b:1b:7b:26:bd:74:5d:ef:
bd:fc:70:72:eb:e2:c9:2c:82:99:42:5a:4f:0f:ad:79:57:ee:
e7:91:c7:3e:b1:b3:02:21:d9:19:ba:06:84:f8:f4:de:f3:7b:
72:6e:01:b1:7f:6a:c9:e2:44:df:94:9c:5f:26:1f:52:17:2d:
d6:f3:57:35:0c:74:e8:0f:c0:f6:88:47:49:be:c5:f9:fd:b6:
1b:eb:ec:e1:45:54:90:66:f6:a6:8a:d6:8e:3b:1c:e9:8f:32:
cb:8b:7b:88:e9:43:6f:f9:8b:ac:22:c2:11:e1:3c:5a:72:b2:
e3:f9:f8:f7:a0:e4:17:66:78:d0:c9:54:83:3f:42:5b:94:4e:
cb:d1:0f:6a:0d:a4:a1:10:3b:bb:28:c6:d6:f8:14:97:72:b6:
5d:0d:d7:2d:ca:14:23:3f:9b:f9:f8:e6:57:ad:93:34:48:3b:
18:8b:d5:9e:5b:55:58:4c:fa:eb:11:cf:f4:2c:52:e6:f6:f2:
73:5e:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:03:36 2025 by rpki-client