Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
File: 5Lqtn19putkQB1-OHYBetB0N98s.mft (raw, json)
Hash identifier: j6iUVROQnMmMrE3NiOGz8A3gep7tIALjQ91bg2Gl988=
Subject key identifier: BF:74:6D:D5:6A:FA:F6:C3:73:20:F9:71:1E:2C:7F:E3:02:92:E2:3F
Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
Certificate issuer: /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Certificate serial: 0197B745450D005A3A537B10D06997B64AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
Manifest number: 0E9E
Signing time: Sat 28 Jun 2025 16:00:59 +0000
Manifest this update: Sat 28 Jun 2025 16:00:59 +0000
Manifest next update: Sun 29 Jun 2025 16:00:59 +0000
Files and hashes: 1: 5Lqtn19putkQB1-OHYBetB0N98s.crl (hash: 4d9YvV8cTJMTPJcA9F6/dnaPVr1ncU179rRARR4rtxI=)
2: Q49WFQb687C-dROudfCZNH5xgk0.roa (hash: 6gTPlVN38oZH6TKqFrihOGk/Y67bvVr39M4N4cXiKUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:45:0d:00:5a:3a:53:7b:10:d0:69:97:b6:4a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Validity
Not Before: Jun 28 16:00:59 2025 GMT
Not After : Jun 29 16:00:59 2025 GMT
Subject: CN=bf746dd56afaf6c37320f9711e2c7fe30292e23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:ab:27:45:41:b7:9b:cb:a8:69:b9:ea:a3:
ac:25:5e:b8:ab:25:84:0f:ae:9a:f1:ce:68:16:09:
49:bf:a5:a6:cd:da:bd:74:13:55:cf:52:a4:c4:9a:
70:73:da:43:f7:54:48:c9:d5:65:db:3b:a0:6e:3c:
ba:2c:ea:03:f2:4a:6e:4b:34:0e:25:f2:85:55:58:
19:64:21:65:9b:cc:30:b7:0c:cb:70:c3:b4:07:b4:
24:87:4e:c2:e5:a8:cb:b6:b8:4d:52:b0:47:0e:57:
1a:39:8c:b4:14:64:b7:ff:f6:98:e8:58:4d:17:d7:
35:8b:d5:d8:f4:3c:09:af:d0:a2:77:93:1f:c9:52:
b7:15:b6:11:e3:60:51:fc:ba:0d:cb:c6:88:1d:ca:
c4:c7:2e:cb:45:a1:a7:f9:31:d4:92:63:32:d5:9e:
da:74:17:cf:a9:9a:68:b0:d1:ba:6c:4d:10:21:9d:
6c:ea:51:3e:5d:af:0f:7b:ae:4d:ae:91:da:36:9c:
d4:28:bc:09:44:9d:31:c7:38:cf:20:92:f6:66:a7:
b8:08:ae:e5:de:52:0d:1d:9d:3f:aa:b4:4e:dc:07:
12:24:d4:07:39:6e:7e:ac:1c:8f:26:bc:40:34:41:
05:9d:ea:5a:6a:9d:5a:dd:88:03:0b:f5:8c:a8:41:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:74:6D:D5:6A:FA:F6:C3:73:20:F9:71:1E:2C:7F:E3:02:92:E2:3F
X509v3 Authority Key Identifier:
keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ae:fd:f1:89:cb:4b:dc:d2:94:ce:ce:55:48:f7:bc:43:1e:
45:7d:0b:f2:1f:ed:85:ed:a0:df:bd:62:b4:3a:b8:a7:13:a3:
69:db:95:2e:54:2b:f0:66:2c:a4:a5:63:f7:6f:ba:fc:7a:fc:
d6:47:98:0f:b7:28:b8:0a:21:47:78:20:af:71:f3:89:36:4b:
21:04:31:81:7b:51:7f:4b:07:06:a1:bf:f6:bc:75:4c:7c:99:
c5:3b:e6:08:1a:01:95:a7:23:9b:d6:16:95:18:82:f1:09:c8:
ea:3f:37:6b:cb:46:ac:f3:2f:76:0c:21:60:d3:3c:66:3c:83:
58:fb:12:73:a4:fd:14:3b:df:c8:9e:cf:48:af:fb:d2:54:ec:
ac:58:ff:a4:91:eb:8c:5b:46:2d:27:ba:2b:ed:ea:8b:10:1b:
7a:81:76:e3:f7:c7:3d:0e:6d:7d:9b:27:cb:56:43:d4:1e:06:
8f:a8:e1:44:5d:6a:52:48:a9:46:13:78:82:75:3b:49:09:e1:
5e:b4:cc:a1:b4:3f:cf:6f:77:41:09:4f:43:b7:c0:70:a9:2c:
21:0d:2f:e5:5e:14:63:72:09:05:61:0b:9c:a8:85:04:8c:e2:
39:dc:1a:08:43:c1:8c:f0:ad:28:ac:a9:bf:a0:f9:f6:8e:48:
e1:c0:b3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:42 2025 by rpki-client