Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: ICWtFd+11R3/p9fElmgRs9WIiehDAEKmux7HjJBtaEY=
Subject key identifier: B1:A1:AF:85:A8:00:78:AC:84:F5:63:1E:CE:E0:F3:D4:98:D5:50:A6
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 0197B5FC3297EE6039986F48AE58CD88A3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 1078
Signing time: Sat 28 Jun 2025 10:01:33 +0000
Manifest this update: Sat 28 Jun 2025 10:01:33 +0000
Manifest next update: Sun 29 Jun 2025 10:01:33 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: V5lDqkSEQE0+V7qsVBGE6Izh8OhwaOH4xhTRLjIocMM=)
2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:32:97:ee:60:39:98:6f:48:ae:58:cd:88:a3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Jun 28 10:01:33 2025 GMT
Not After : Jun 29 10:01:33 2025 GMT
Subject: CN=b1a1af85a80078ac84f5631ecee0f3d498d550a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:08:32:f8:dd:92:af:06:d0:fc:a6:36:80:
0b:66:86:b0:73:02:c6:8b:6e:5f:fa:b8:c9:ba:ad:
06:db:f1:d1:96:1e:ab:23:9e:d3:45:ba:aa:0f:73:
8c:d6:6c:32:39:66:55:ce:07:13:8f:07:c1:b2:e9:
90:e3:23:55:16:c3:9c:ba:4a:40:55:17:7e:be:20:
0b:22:84:36:ea:bc:b6:11:ce:90:65:a6:20:49:ee:
2d:88:ca:86:2c:f9:06:17:ca:28:cf:8b:2d:37:30:
09:de:65:6f:60:9f:d5:4c:1f:c9:68:53:ff:0c:25:
55:ef:67:45:a8:fe:60:6e:da:7c:76:fe:34:81:b6:
f2:56:6f:2f:49:b9:9e:20:9a:39:f2:0c:a3:71:40:
04:25:4a:51:65:19:00:24:b7:de:07:ef:bc:ba:e9:
04:c3:91:43:10:0b:41:c2:41:03:c7:08:94:9e:1c:
ae:74:85:70:9f:f4:dd:02:c8:45:23:11:3d:85:db:
a5:5b:79:2f:75:2b:87:0f:dc:cd:54:2c:6a:bd:a4:
cf:8e:a1:7e:13:aa:4a:2b:04:c3:20:de:9e:1d:8c:
32:0e:9d:56:ac:ce:f9:71:34:34:b8:40:72:8a:bf:
f9:08:11:bd:98:95:fb:85:0b:fa:10:a1:28:8e:16:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:AF:85:A8:00:78:AC:84:F5:63:1E:CE:E0:F3:D4:98:D5:50:A6
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b5:2f:0a:d7:29:35:f1:8c:66:1e:b4:62:35:c6:41:03:b9:
4d:ea:0e:cf:34:e9:bc:93:d9:ad:91:99:aa:7c:1e:ea:cb:a0:
24:8c:ae:f6:db:58:98:f3:71:48:7d:ea:6d:bc:2e:a3:4c:27:
b3:79:b9:1f:f0:1d:5f:57:99:00:eb:ab:99:8f:a7:8a:35:65:
85:6b:71:de:ad:c7:ff:87:f2:95:4e:4d:3c:47:be:57:aa:02:
78:32:3f:6d:17:14:d8:d4:db:0f:7c:80:0f:0f:ed:bf:01:1d:
db:30:6a:1a:e6:4f:0c:5d:00:af:e5:2b:92:14:8e:f8:e4:63:
c4:66:c6:6c:7c:44:92:7b:18:ed:87:0f:72:8b:d6:9b:90:6e:
06:46:61:53:87:df:a6:ae:d8:17:dc:22:7c:cc:93:1a:21:00:
43:10:6b:9e:f0:73:86:64:12:a6:18:d5:96:08:9d:f2:e7:e8:
2d:51:b7:88:dd:6d:38:45:b8:43:7d:56:c3:22:3b:35:56:98:
89:70:85:ac:f0:c6:f8:8f:e7:dd:ef:8b:aa:30:7d:c2:95:67:
fb:2e:7e:98:ef:7e:8b:f7:9a:8f:88:bb:16:e5:4e:18:09:3b:
6e:2f:79:85:e2:4e:45:c7:c9:e4:14:d6:6b:75:8e:b8:dc:bd:
4c:43:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:13 2025 by rpki-client