Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: ZR1xNeqEFEbdOvhrMykjO1bJQBltVQIZBgAGNr+u2NE=
Subject key identifier: F6:26:44:9D:D6:29:78:8B:69:E9:51:94:1E:67:A8:BC:67:A2:52:5A
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 0197B6A047064648A73E7905640A41F1C481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 0186
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: Ru4saUMcorqSrN7X0t/s5Y5fjjfrY7Bkm0x1tLXCSOs=)
2: nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa (hash: toI1tT2hR8zRYJnuO8W3FR+ZELFSDV5ej6CQ6AsxKnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:47:06:46:48:a7:3e:79:05:64:0a:41:f1:c4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=f626449dd629788b69e951941e67a8bc67a2525a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:6c:e1:86:9b:28:0e:95:d6:6f:1f:d4:7d:
28:d8:49:83:3e:73:05:a8:34:0d:85:cd:40:39:d4:
b1:e5:3e:37:26:0d:13:11:48:d0:86:ff:15:8b:22:
fb:5b:41:04:16:ab:a9:6d:ec:a5:cd:4e:e0:91:57:
37:92:ed:94:58:93:cd:31:db:63:ec:81:84:59:0b:
e5:ca:36:47:7f:60:ef:d5:2d:6f:73:8f:29:5d:06:
c0:58:26:0d:ec:4c:21:9e:15:45:6c:91:4e:ce:2b:
32:a1:92:b0:75:cd:6c:77:4f:14:8d:fd:e0:a4:5e:
97:3f:9c:8c:27:4c:7f:6e:10:66:e3:f7:ba:72:00:
36:a3:ce:d0:1c:e3:11:bf:91:df:a1:71:07:a8:d9:
3b:3b:69:16:73:b5:ca:38:69:89:a2:ef:6d:a9:3b:
71:34:bc:b2:ba:f0:6d:0b:68:5e:ab:bc:0c:58:3b:
dd:9f:df:56:bf:1b:d0:d7:93:d0:94:60:ad:f2:c7:
15:16:ea:82:91:a3:07:49:b0:05:22:1b:07:1a:56:
85:f1:a3:da:10:f6:3d:06:17:83:e3:91:b4:78:17:
85:93:fa:86:12:4d:29:d9:b8:e8:09:ed:b3:a7:79:
d0:aa:89:32:9d:d2:b7:7b:be:61:0c:0c:52:c3:75:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:44:9D:D6:29:78:8B:69:E9:51:94:1E:67:A8:BC:67:A2:52:5A
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8e:d9:75:cc:4e:33:e4:c2:0b:92:0a:85:83:e8:55:85:d8:
23:83:49:b4:a3:ba:f7:d0:b9:76:30:d9:11:74:02:ed:ae:50:
3f:f0:21:cc:80:a6:b0:50:7f:b9:44:ef:48:2b:15:5d:6e:28:
c9:9f:2a:3e:e6:62:e3:25:11:ff:b8:44:51:4b:5f:a2:70:49:
a5:93:cf:8d:38:91:89:39:29:b0:a1:7c:9b:4f:c2:c1:ff:33:
1e:b8:da:25:a0:b0:9e:2d:f7:63:87:d5:be:4e:95:1b:7c:d2:
fc:94:e3:83:49:ea:bd:ee:94:08:fd:34:17:df:5f:10:f3:33:
20:15:0f:6a:be:f9:27:5f:79:87:aa:0a:b3:c0:2b:ce:24:db:
e1:35:06:b3:fc:21:0e:38:21:88:40:c8:3b:a4:f1:c5:58:bb:
2e:8b:3a:4e:43:62:58:b5:f9:54:fb:6c:f9:91:ab:96:96:46:
36:e2:db:3f:55:fe:eb:52:e1:37:e3:a1:fe:44:10:55:2d:b8:
cd:c9:df:fd:3e:43:7e:23:e9:35:c2:2f:82:a3:ed:9e:61:4c:
2b:77:5a:58:27:14:a4:93:72:b7:4f:6c:7c:6f:33:eb:82:62:
01:b9:de:9b:cc:83:39:e5:55:6f:9b:91:ea:ed:01:be:d3:53:
c2:82:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:29 2025 by rpki-client