Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: LqPfCweD2Ir5o82VxAKrTZdsEmnyLRvzhjDJrxrN0Xc=
Subject key identifier: 2A:3A:3C:B8:40:37:76:B9:0A:E7:37:2D:AF:F6:79:3F:82:EE:D1:BC
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 0197B8C5EC6205D78CECC9E685AE3751CD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 23:01:08 +0000
Manifest this update: Sat 28 Jun 2025 23:01:08 +0000
Manifest next update: Sun 29 Jun 2025 23:01:08 +0000
Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: LpLNLIDTTqryOPuPyd1M4D4jlx4XQXknVKsUmhnP3H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:ec:62:05:d7:8c:ec:c9:e6:85:ae:37:51:cd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Jun 28 23:01:08 2025 GMT
Not After : Jun 29 23:01:08 2025 GMT
Subject: CN=2a3a3cb8403776b90ae7372daff6793f82eed1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:2f:08:6a:a9:c3:02:ac:13:78:75:83:a1:
d5:ac:b2:fc:b2:44:5d:89:72:6e:52:d5:c4:e5:03:
73:3d:f3:d8:04:7d:fc:42:7a:72:bb:cf:2d:aa:a2:
9d:84:b6:ed:2c:be:85:36:25:78:a6:a1:c0:c8:cf:
64:c9:d0:32:32:03:5b:55:2b:23:d4:26:ba:29:c6:
14:b6:f5:33:a0:cd:24:01:f2:80:ca:9f:4e:64:2b:
9e:3e:1f:db:9e:b3:9d:0c:e8:f2:9e:b4:3d:c4:14:
39:72:91:ac:a3:c3:04:c7:9a:a5:be:33:0d:0d:bb:
15:b1:c6:86:55:b8:91:b6:45:54:43:d5:b7:a2:75:
b8:fe:2c:55:6f:13:71:c8:5f:80:15:73:b0:40:65:
3a:ae:71:8f:e7:1b:f9:7d:d3:fc:ae:3e:b6:dc:d4:
6a:26:00:cc:21:07:ee:be:2f:89:50:50:0f:bd:fb:
69:77:25:7a:27:99:8b:1e:d1:7a:58:fb:30:09:cc:
cf:2a:97:36:50:13:a7:c0:eb:bc:9d:7e:20:04:cf:
cd:91:37:23:5a:4b:d5:9b:d0:d7:bd:4a:f5:66:41:
52:79:d3:c9:65:6e:77:c5:91:7f:77:b6:c3:61:7e:
69:2d:1a:61:0d:cc:90:16:7d:c9:1f:88:50:1a:48:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3A:3C:B8:40:37:76:B9:0A:E7:37:2D:AF:F6:79:3F:82:EE:D1:BC
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1c:64:f5:a3:2a:34:00:ee:c6:61:a5:6e:dd:86:b6:58:45:
75:70:af:9a:9c:1c:1c:b7:e6:16:04:c2:37:32:c8:1b:28:77:
ec:1f:e7:76:42:93:2f:dc:3d:81:6d:6b:03:29:9a:78:7c:43:
45:0d:1b:92:b3:37:93:9a:00:da:b5:59:fb:b7:25:30:09:c9:
5f:b3:a5:31:9b:ab:f3:e8:cb:de:a7:1d:ba:6e:2b:23:57:fe:
93:b2:d0:17:97:59:f0:4b:20:23:fb:a3:01:bf:b4:80:c4:b6:
31:ad:f8:46:45:bc:ea:56:87:e2:ab:f2:00:bc:e6:de:7b:5b:
fa:77:ef:44:d5:48:28:85:25:b4:4d:e5:09:ea:34:9d:bc:fb:
6b:d7:1e:bb:b9:26:8c:d8:08:b4:56:6c:da:c8:cf:5d:79:5c:
e7:97:cd:a8:29:c3:39:cc:d7:d7:65:70:a8:74:4b:2f:90:84:
e4:0d:87:e2:76:41:18:d0:b5:03:2d:4a:37:3e:af:12:0e:04:
5a:35:e3:e4:5b:fa:30:03:6a:1e:ae:11:3d:d5:27:9a:84:ce:
18:04:ed:b7:ba:cd:81:02:19:9f:fa:62:e9:49:32:08:66:79:
74:41:7d:b2:45:94:b0:48:b2:ee:39:e5:f8:d4:62:fd:16:91:
83:9c:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:29:16 2025 by rpki-client