Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: PtYuaJiV909LHEYYn2/o51GVbwf0XBPWqhNhbhamIkQ=
Subject key identifier: 3E:A3:D8:0A:3E:3C:6D:23:6D:AE:9A:64:5D:3D:A9:AD:7A:C5:F6:C4
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 0197B77C138196619ACDC67CB9F69F9E70F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 1347
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: 4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa (hash: ZVBB3cjYOT3VqfWQ4/A+wZjufx+V4UWOyQ4pBr48oC8=)
2: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: QCe8AXlBDbyzPl8kVViGzDEgbSeorT5RveDo/5I084g=)
3: W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa (hash: BRMekWIhLsWnxOA/bB8odlVJv4hlD7aXq4PRDSkGzkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:13:81:96:61:9a:cd:c6:7c:b9:f6:9f:9e:70:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=3ea3d80a3e3c6d236dae9a645d3da9ad7ac5f6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:43:47:c0:59:d2:7b:88:2c:5e:0f:0a:ba:
7b:ab:c8:31:85:06:1a:14:2b:4f:5c:0e:28:b9:b3:
ab:c9:16:f5:1c:35:a2:31:27:97:a0:27:3d:77:31:
50:5e:43:f2:ca:d6:5f:d9:90:79:f5:54:14:f3:73:
d4:bc:34:d0:8b:8b:36:ff:4d:2c:e8:da:93:58:9b:
0a:c5:c4:5e:c2:47:52:fe:09:fd:81:c6:26:df:c2:
48:ec:ff:60:70:db:0c:ac:db:e9:9c:6f:15:dc:2b:
61:a0:47:be:ba:de:0c:78:a4:0f:50:f7:c6:1b:d6:
af:6e:9e:0a:61:40:a9:60:2d:2a:e2:29:ef:d0:25:
9a:6d:59:18:c5:96:41:29:43:f7:f9:43:34:b1:5c:
39:3b:b6:7d:f2:06:de:a9:d3:a4:cd:63:d1:3d:23:
eb:b1:00:65:c8:fe:e3:9b:ef:82:b5:0c:5e:b7:e9:
11:47:ad:99:f7:cc:b9:22:8d:51:c7:34:a0:2c:f3:
aa:cb:93:79:72:e1:aa:9d:b7:08:7d:fc:d2:20:ab:
1d:8b:fd:25:3b:a0:37:8d:39:c7:de:04:d7:79:27:
86:39:b8:eb:53:47:d0:0b:16:6f:30:4b:c4:7a:2f:
34:61:9b:05:84:db:83:9e:f2:b4:77:7f:35:2b:5c:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A3:D8:0A:3E:3C:6D:23:6D:AE:9A:64:5D:3D:A9:AD:7A:C5:F6:C4
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:64:70:e1:31:fa:bb:d6:1c:7a:f3:93:ff:5a:b5:a7:82:23:
96:2d:e1:56:ea:cd:72:d9:6b:b3:63:8c:e0:96:7c:0b:e7:56:
7f:08:7a:94:cf:ff:05:2d:31:9b:d1:9a:54:dc:09:44:b5:b0:
42:fa:69:62:ae:fe:be:69:04:18:68:f7:1a:33:d2:a0:31:dd:
e4:f9:74:34:d0:e2:f0:e2:b7:c0:51:c7:6e:60:fb:8a:9d:c9:
50:f9:5f:b7:c6:a8:c5:5f:25:b5:67:db:ae:5e:27:c3:da:74:
80:f1:af:bc:88:f7:0c:ea:e2:12:a3:7e:41:d2:41:0e:d7:7b:
0e:c7:8b:88:e1:58:6b:93:17:91:c6:86:2e:32:e0:8d:2a:e7:
ca:45:76:2d:3f:4a:10:1e:b4:63:12:9a:bd:74:8c:9a:03:d4:
b6:8c:49:8c:5a:77:46:1f:04:e3:18:8a:48:e4:1b:89:aa:05:
29:e1:c0:48:9b:f1:93:29:22:21:11:d1:08:9d:73:0f:30:5a:
1c:55:ef:2f:65:61:3e:82:40:06:30:dd:52:02:a0:5f:40:d7:
f9:84:0d:2b:62:79:fd:d6:b1:de:be:87:1a:66:af:8f:b9:9d:
8d:d6:91:67:84:3d:0c:4f:66:b5:ea:90:ea:28:92:c0:0a:2b:
7d:42:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:52 2025 by rpki-client