Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: qlxZHB3zruAn+0peWFH8MMX4Z0YM1/V52PyrpJdMlpE=
Subject key identifier: 1D:87:3E:1D:EC:B1:7A:14:36:AB:13:7D:08:7E:C6:79:3C:66:DE:DA
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 0197B933B14BE27F5D477E6160B8AA7DF644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 01:01:01 +0000
Manifest this update: Sun 29 Jun 2025 01:01:01 +0000
Manifest next update: Mon 30 Jun 2025 01:01:01 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: X3KHjslIpjvIeS2kyjXJfRrQSzAvI5ChXWGBxAmI8po=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:b1:4b:e2:7f:5d:47:7e:61:60:b8:aa:7d:f6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Jun 29 01:01:01 2025 GMT
Not After : Jun 30 01:01:01 2025 GMT
Subject: CN=1d873e1decb17a1436ab137d087ec6793c66deda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:8c:d5:b7:bd:40:d8:69:c2:bd:b4:c1:4b:
e8:25:11:e4:c7:48:98:a8:3e:23:83:79:24:6a:18:
e6:97:1d:58:3f:f4:ff:97:6f:d8:99:88:8b:34:e5:
12:f9:b6:7c:3e:2f:71:3b:a5:6d:0e:1a:0c:0c:70:
1d:29:f1:6b:cc:58:10:61:cb:fa:cc:32:f2:0c:0e:
87:ee:37:01:cf:07:d8:b2:25:6b:3f:9d:53:09:5e:
72:5b:7a:00:c5:d9:61:6f:c0:ea:19:33:f5:52:cb:
50:23:2d:84:f8:db:d9:13:d6:5e:52:e6:65:4c:ed:
1d:66:0c:1e:f5:d8:bd:b4:34:84:17:1a:29:8e:dd:
43:2b:c5:da:4f:8f:f7:00:7d:f4:08:93:22:35:ff:
6d:86:b9:e8:30:27:d2:a0:e0:04:13:44:68:ed:c5:
ba:f0:e6:c6:b5:bd:1a:27:5d:22:ab:d2:38:f9:02:
69:b6:d2:df:59:aa:4d:00:f9:20:75:c1:6b:07:a0:
80:90:0c:c0:b1:45:3c:1b:0e:c6:ad:24:49:d1:04:
c2:40:94:96:2f:72:29:c5:a9:ea:95:a4:64:9e:fb:
b6:ef:00:12:9d:55:e5:c0:72:cb:d1:f6:78:b3:63:
6f:c1:9e:e9:85:58:82:78:b7:ce:ae:94:97:4e:85:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:87:3E:1D:EC:B1:7A:14:36:AB:13:7D:08:7E:C6:79:3C:66:DE:DA
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:06:8f:df:f6:92:84:dd:cf:27:77:3b:d4:8e:a7:5b:fd:1f:
ff:46:9a:bb:14:52:c2:77:84:fe:37:2d:f3:3b:ed:81:b7:a6:
62:13:48:8b:7d:de:14:06:ad:6b:a3:cb:15:86:c8:b1:de:bf:
9b:fc:c0:ed:49:ba:ca:75:bc:d0:fd:22:86:54:df:3e:61:de:
80:a8:5b:eb:49:af:17:ae:b1:e5:a0:c6:3f:9a:89:b4:0d:96:
22:f1:be:2d:54:80:e6:f5:4d:1e:5b:84:a0:5e:a0:d3:46:26:
04:54:e5:41:03:87:10:bb:83:60:59:88:da:5e:a9:1b:8b:6a:
28:81:e2:8b:e6:c6:e9:95:16:74:59:cb:91:2d:7f:bf:85:6a:
a6:ee:2b:a1:31:7e:84:7d:f2:10:36:01:d5:30:a3:1d:43:2f:
d0:d8:1d:70:01:f5:af:f6:a3:03:3b:74:84:e9:67:fe:3c:0f:
9d:48:6d:e6:84:66:34:8c:a1:ad:ae:6b:d4:8c:b8:c0:28:20:
43:d6:1d:4f:08:c4:d3:13:95:12:00:25:f5:f9:37:86:56:69:
cf:fc:95:8d:c8:b9:a1:ef:34:09:a6:78:2c:e7:8e:46:9c:55:
b9:3a:3a:be:71:23:6b:da:68:ab:3b:2a:27:0f:0d:5e:07:34:
00:59:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:20 2025 by rpki-client