Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: cp5D1GZEecyWV0Q22GORNq4MiSa32cC7NNZ9MauvVgM=
Subject key identifier: 4B:02:6B:90:0A:E0:D6:2D:C3:E8:31:4D:F5:53:CA:2B:58:09:E7:F4
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 01976F99ADE1C18B3D9E0C1B06C8DBC920B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0CF2
Signing time: Sat 14 Jun 2025 18:00:31 +0000
Manifest this update: Sat 14 Jun 2025 18:00:31 +0000
Manifest next update: Sun 15 Jun 2025 18:00:31 +0000
Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: 7sKsEnXKIsmPHZMBSQOqN2Mfb8YKEsPKII+jZTtO54Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:ad:e1:c1:8b:3d:9e:0c:1b:06:c8:db:c9:20:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Jun 14 18:00:31 2025 GMT
Not After : Jun 15 18:00:31 2025 GMT
Subject: CN=4b026b900ae0d62dc3e8314df553ca2b5809e7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:d3:6a:c0:63:86:5b:2b:27:45:7f:77:a6:
6e:66:f2:62:e8:99:24:ff:f8:39:bc:7b:2b:c7:f1:
31:44:62:5c:e0:83:4c:f3:69:c0:38:cb:0a:00:11:
50:55:03:70:d7:31:ff:55:bb:45:ac:8d:d8:65:bb:
54:35:f6:24:0c:75:4a:5a:90:9d:8c:79:1c:ad:17:
ac:cb:fd:ae:c4:6d:86:f4:a2:84:af:4b:a6:0c:d8:
6d:65:5e:ef:8b:18:0a:2b:b9:7f:77:c2:c1:ff:b1:
70:67:4f:06:b7:c5:89:82:7b:0b:a6:14:a1:71:e4:
a5:e1:00:b4:6a:b7:fe:07:32:77:11:9c:63:9d:f0:
36:76:27:90:16:29:08:30:a6:7d:26:81:6a:dd:28:
c5:6a:b4:9c:6f:7a:aa:d3:74:40:f6:b1:76:2c:e7:
df:4c:2a:e8:99:71:0b:d6:a8:fb:87:78:4f:54:40:
11:65:25:3b:ca:80:a2:1b:f6:ea:41:d1:3a:b6:dc:
d5:fa:ac:3c:0f:57:0e:84:25:b0:7d:e9:61:b3:88:
fb:01:a1:fe:ad:ff:13:1b:fa:49:22:f8:e5:a5:14:
9b:bc:14:35:6c:9f:52:57:45:ba:fc:e2:b9:c8:05:
5c:7b:f6:21:9a:be:db:44:1a:54:b2:ba:41:a5:8c:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:6B:90:0A:E0:D6:2D:C3:E8:31:4D:F5:53:CA:2B:58:09:E7:F4
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:85:36:bb:fe:14:a6:05:7d:0e:db:b3:fc:b3:cd:13:87:48:
2e:cf:07:06:82:4a:8e:56:a3:28:b6:81:6f:05:71:8d:c8:85:
ab:1e:8f:2b:fb:fb:92:66:b7:18:2c:4c:9c:9d:2e:59:79:02:
f4:30:1c:f8:93:0c:fb:22:14:e6:14:95:4e:9c:96:98:21:19:
a9:9e:11:41:67:73:8c:77:e0:5d:f0:0e:b7:d6:99:22:4a:26:
51:94:a7:30:7c:03:51:86:c9:b7:d5:51:d6:5f:ef:34:85:14:
13:9d:c6:57:ed:e2:00:f3:fe:55:b7:7e:ea:9a:58:06:48:29:
be:12:eb:01:ae:92:02:25:53:70:27:aa:f0:a4:c9:4c:e1:a1:
53:1e:87:9d:fe:ea:4c:10:59:32:3a:32:0a:40:40:c6:7a:a3:
4c:13:27:be:9d:5d:ff:ba:38:1e:80:97:de:89:a0:8f:31:a9:
af:ca:58:0a:ac:0a:fd:22:74:f5:9c:95:cb:c8:bb:5e:72:48:
84:14:95:34:43:98:84:bb:72:ce:19:68:1f:2e:b6:49:64:0d:
22:57:55:39:91:c8:52:8c:c0:1c:e2:7c:14:a4:47:02:04:f0:
8d:eb:e7:43:91:e9:12:94:9e:c7:22:9b:67:1f:a7:a8:fb:1c:
37:2d:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:25 2025 by rpki-client