Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: sHVuGcbKj9QkR0rE9I9DJbpqhaQjnAnt6s5AZE2fRLE=
Subject key identifier: 85:B7:F5:84:1C:F4:2B:90:C1:5C:83:1D:8C:5F:D6:3E:1C:43:F0:9D
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 0197782EFD930E7427580B1D9BEA4900A107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1598
Signing time: Mon 16 Jun 2025 10:00:34 +0000
Manifest this update: Mon 16 Jun 2025 10:00:34 +0000
Manifest next update: Tue 17 Jun 2025 10:00:34 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: ALv8uwk30K2Ugv4nyvgzQN0CAWszLE/4IHu9VSDi/pk=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:fd:93:0e:74:27:58:0b:1d:9b:ea:49:00:a1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jun 16 10:00:34 2025 GMT
Not After : Jun 17 10:00:34 2025 GMT
Subject: CN=85b7f5841cf42b90c15c831d8c5fd63e1c43f09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:b2:03:b5:c1:c1:ec:ce:36:5c:e2:22:dc:
41:d3:73:94:c1:2b:97:a7:30:a8:f8:0e:62:89:08:
04:94:39:5e:49:e9:a2:21:d2:cf:bf:da:80:cf:f4:
23:be:bf:17:d1:22:29:f8:42:36:bb:bc:e5:fe:05:
89:14:7f:01:f9:bd:42:91:0a:fe:d6:c5:17:f1:78:
e9:a7:fc:fd:79:67:c3:ea:6f:f1:b3:a7:09:7f:95:
b2:eb:b5:6c:ea:be:3a:a2:53:25:4c:a7:d2:3d:ba:
95:d5:e5:09:ba:f7:53:0e:b6:d9:68:dd:6f:55:97:
4e:18:39:de:45:0c:fa:d7:d0:5f:c8:00:a7:5f:28:
86:3c:75:33:35:a6:eb:38:46:f9:b2:26:44:66:66:
81:43:5b:f8:cc:7e:a5:74:e8:3a:ca:38:c8:01:59:
f2:99:1c:72:7e:e3:fb:eb:ca:27:33:f1:01:64:ee:
7a:e1:42:2c:6f:a0:2a:ef:40:63:b2:95:e4:f4:d1:
0e:e0:ab:b5:e7:79:75:35:e9:5c:d6:52:fa:f3:81:
45:cb:0b:37:22:dc:e0:27:e8:3f:7c:5b:9d:d5:4e:
09:92:31:d8:b6:3e:26:94:54:8c:67:0d:97:ac:f5:
35:18:58:39:39:91:2d:67:6d:fc:6f:e3:8b:f9:54:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:F5:84:1C:F4:2B:90:C1:5C:83:1D:8C:5F:D6:3E:1C:43:F0:9D
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:7c:06:70:b9:5b:bf:52:53:b6:85:f3:b7:00:4c:ea:28:
71:38:1c:4b:82:4a:7b:4d:89:48:cc:c6:b9:dd:72:45:4c:d3:
66:4c:9c:0f:59:e8:fd:04:8a:6a:f2:03:7e:e1:c8:33:ca:68:
72:48:44:6f:20:c2:b7:d7:72:bc:40:68:b5:7b:0a:1f:f7:a3:
28:58:12:f8:1e:a4:68:aa:8c:24:f5:31:ed:e9:e5:99:f6:3e:
67:5a:83:2e:b0:e2:49:80:90:5d:5a:cd:88:df:aa:cf:de:f6:
54:bf:cc:8a:a5:72:cf:61:f5:f2:f0:08:ae:7e:a1:fb:0f:ee:
b5:1c:66:f6:3e:72:19:c3:91:a9:96:cf:11:73:1d:3a:29:12:
22:3c:6a:e0:9b:bb:4b:a9:27:8b:d2:b3:92:3f:a4:16:3d:4c:
eb:c5:9a:19:92:10:d0:02:8f:3e:8d:7f:02:10:2b:7a:be:4f:
d0:96:ff:30:ba:86:93:93:23:ba:07:bf:dd:08:27:76:f6:c4:
2c:6b:0f:4f:58:bc:31:44:f4:44:eb:82:ad:cf:13:29:e9:64:
0a:e4:ac:6a:ae:b7:cd:58:56:73:c5:13:aa:42:fd:e2:46:97:
28:e4:54:22:59:29:53:36:c5:88:ed:8f:73:78:dd:2e:fd:67:
67:84:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:21:25 2025 by rpki-client