Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: tJhW9olvqvjnDRWG9cyrQJqvKTnweGwkCUZVfejCB9A=
Subject key identifier: 5F:19:26:CC:2F:4C:7A:C9:25:BC:C1:E2:86:63:91:1B:57:D6:28:4A
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 0197B6D74DFB7844BC565FDE15A1CA3FCB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 0F87
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: /i7G4Lx0zgn/Lqlb6WIu+U3S+5rDHHFcX7shYLN2O7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4d:fb:78:44:bc:56:5f:de:15:a1:ca:3f:cb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=5f1926cc2f4c7ac925bcc1e28663911b57d6284a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:d9:02:ed:18:58:9b:e8:40:98:62:30:b4:
65:03:26:2b:f6:eb:f7:db:8e:60:ff:04:48:34:73:
b4:fd:20:5b:fd:aa:7e:0f:eb:c5:7e:e0:dd:86:1c:
39:28:a3:01:31:11:75:5c:8c:c7:d1:f1:e0:7b:5d:
e7:23:3a:b3:c9:1f:dd:c3:5b:5f:c6:1c:de:1c:f2:
20:62:3f:9c:1f:61:f3:71:38:a5:e5:88:c4:86:cb:
26:c5:b3:f7:53:5a:dc:94:28:58:f3:c2:0b:99:dc:
51:03:9a:c8:12:5e:d5:ac:ae:ef:d7:48:75:77:90:
c9:6c:de:ea:ff:e6:de:37:8a:d0:15:27:e4:73:1b:
c6:19:4c:f2:f6:0e:c0:7c:7a:13:ab:58:19:b8:f4:
45:b7:21:a5:69:0f:e3:29:31:48:ef:46:f3:c5:3d:
95:4b:58:40:31:a7:67:d0:6d:64:5b:0d:16:14:3a:
4b:54:15:ed:a8:29:84:40:74:c5:6c:33:6a:40:bc:
86:f5:8b:ba:c6:f3:f4:32:92:37:6f:33:f7:8d:6e:
d3:29:0b:03:af:35:54:cd:f1:a2:ab:dc:ad:81:ee:
7e:3b:15:7a:a5:aa:85:69:a0:19:41:ba:06:e4:04:
f2:6a:2e:e5:33:b9:9c:7b:06:d1:b2:a8:85:b7:0b:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:19:26:CC:2F:4C:7A:C9:25:BC:C1:E2:86:63:91:1B:57:D6:28:4A
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:16:7a:f9:e7:13:e7:46:ae:06:42:d5:22:c8:04:18:d6:01:
bb:3e:b1:04:9f:d2:fe:aa:a3:c5:ea:08:7e:e7:ad:10:a4:33:
02:98:6e:a6:76:27:23:6e:b0:75:d6:84:3b:69:54:da:cd:4a:
c0:b7:c3:ab:af:5e:e3:32:b3:8a:3d:fb:d2:df:c4:5c:ea:30:
66:7b:8e:08:6f:36:84:60:c6:c6:00:26:1d:71:3a:2c:0f:79:
75:fe:b4:c8:78:a2:a6:a9:6b:47:b0:e8:8a:d0:9f:85:9d:21:
2d:af:6c:fd:53:61:0a:e1:bd:42:ea:79:cc:e6:49:b4:63:02:
8b:7d:dc:af:74:05:db:33:99:7f:88:1c:7a:58:58:8d:49:68:
ad:68:9b:f1:e3:71:73:75:8e:4a:38:f2:fb:53:83:a6:b8:37:
6a:89:86:a9:4a:ad:7c:b6:0c:7b:55:24:6a:70:ae:c5:7d:5a:
02:98:bf:1f:3e:d2:79:d1:40:7b:12:89:03:69:56:2d:43:66:
b6:59:88:f0:54:be:90:20:7b:03:c6:e7:02:11:57:f2:5c:ae:
88:00:8f:5e:b1:1c:e9:b0:4a:0f:e6:95:d8:9d:49:6c:af:fd:
7a:f8:18:e9:cb:63:f9:da:6e:ec:fb:1b:29:c0:11:9a:eb:b0:
e3:1d:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:50 2025 by rpki-client