Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: 5ll4iICD/hGrHeHk0AOLoiOMI3bMdbyKsGdd9/Exsdc=
Subject key identifier: 14:80:53:A9:70:F6:B8:53:69:C6:09:7C:50:6A:10:E5:B5:E3:9B:74
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 0197B77C944F79BC34E57936502169F12F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:24 +0000
Manifest this update: Sat 28 Jun 2025 17:01:24 +0000
Manifest next update: Sun 29 Jun 2025 17:01:24 +0000
Files and hashes: 1: 1prUVz0HPmxrICK89MLWQGvd_os.roa (hash: nYOxG6xI/OF/g1onNafntFHFC9rtfVRgZj8b/z6tXRg=)
2: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: hj9rWRxqPg4pSadJAeLm6zSTFaE3iH17GROrWgezBPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:94:4f:79:bc:34:e5:79:36:50:21:69:f1:2f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Jun 28 17:01:24 2025 GMT
Not After : Jun 29 17:01:24 2025 GMT
Subject: CN=148053a970f6b85369c6097c506a10e5b5e39b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:e1:66:ba:9b:82:da:ce:a4:e9:94:05:53:
35:ba:d4:1d:4f:54:34:b5:b2:5f:ff:15:50:67:d3:
7d:20:54:35:c9:c1:ed:8c:60:f9:82:b2:bb:79:db:
c3:df:ac:a7:1d:ee:d1:35:39:f2:e6:36:b7:fe:9c:
ca:83:49:61:15:df:12:67:c8:8d:d9:ca:dc:28:88:
84:71:50:78:a5:6e:91:7c:0e:c3:0e:e8:b4:63:ee:
23:49:d6:09:14:12:92:f1:9d:2c:88:e4:5d:dd:ff:
c9:ba:38:d5:71:25:39:90:d1:7f:b0:f8:f8:3e:5b:
ab:fc:6c:dc:11:99:e6:3f:4b:70:b8:f7:1c:c1:63:
9f:86:52:2b:ab:4b:c7:17:ed:94:34:e0:33:a9:90:
21:9f:6c:b4:63:33:b2:ec:84:e0:43:65:93:ea:82:
19:88:10:b7:2a:81:bb:da:f4:d5:37:0b:d7:d0:b9:
1f:a7:9d:25:be:c4:72:2a:08:cc:af:f8:f0:ff:ac:
71:a4:ea:91:0c:0d:c9:4c:3d:60:ed:07:fd:2d:b1:
c9:ca:de:5c:49:a9:8f:4f:9b:96:b5:ec:2b:f3:30:
03:ec:c6:97:7f:34:c4:b5:8e:17:07:47:0e:7c:cf:
48:0b:7d:3a:8d:87:39:4c:fb:f2:63:b2:69:89:84:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:80:53:A9:70:F6:B8:53:69:C6:09:7C:50:6A:10:E5:B5:E3:9B:74
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:88:fd:13:8b:60:85:39:8f:c0:8f:67:f9:a9:92:6c:b7:bb:
a8:2d:f0:0e:72:14:37:13:7a:71:e1:3f:f8:34:8e:98:4f:79:
ce:2b:3c:2e:f6:fc:ef:d5:de:90:02:3b:46:03:b7:e6:0b:23:
d7:fc:ab:b8:80:c1:1c:6d:46:95:9e:28:42:f7:4b:d6:70:93:
6b:71:a7:07:62:05:16:70:73:d4:9c:3c:0d:2d:6d:0c:67:88:
90:03:53:47:7e:f2:ff:39:66:e2:68:a7:21:5d:d2:39:6a:0d:
19:f0:ff:a4:70:0f:1c:3d:8b:da:84:f1:e7:c7:b8:45:bf:04:
c7:a0:5a:2e:83:e0:14:00:c6:58:60:dc:6b:15:c0:7b:1a:89:
1f:eb:7d:e6:b0:3a:b7:78:d8:ab:fd:ef:76:bf:ae:74:e5:bb:
22:7c:3b:6d:96:0f:3c:56:6c:83:5b:aa:9f:57:c7:41:5b:6c:
f6:37:b9:94:63:c0:39:68:17:a9:65:29:91:9b:57:7b:a0:cb:
2c:14:34:45:8c:cb:bf:75:76:1f:7a:c0:a7:3d:5a:7f:75:a1:
3e:87:ab:65:aa:37:b1:c8:bd:45:87:b8:11:f6:ac:a1:9c:f2:
d7:43:d2:62:53:33:8b:cb:f3:a1:78:c1:19:b2:11:c8:78:0f:
2b:be:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:23 2025 by rpki-client