Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: HhapPAMj1mh5yZNlqpQyCcwFaLoPeowJQnuGEyKDqbE=
Subject key identifier: 66:83:C1:E6:E8:76:6A:8D:1E:99:A7:EF:2A:2D:40:B8:9E:21:B9:0A
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 0197B6A0D4FD695C07F8A9838FF39A483D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: wkkJMdrqugt12mCcAb2vd2u0LnuT8+5tImb7O3QRvEQ=)
2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=)
3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d4:fd:69:5c:07:f8:a9:83:8f:f3:9a:48:3d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=6683c1e6e8766a8d1e99a7ef2a2d40b89e21b90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:a0:ff:74:df:08:69:d5:b9:dc:18:15:ed:
04:11:d1:2f:81:17:e2:77:50:dd:6f:ca:c8:89:6a:
a9:f7:51:de:b2:11:f3:21:52:32:c8:d9:e3:17:5e:
64:da:a7:f5:7f:27:62:fe:4d:c5:b0:5d:0e:a3:fe:
8d:70:32:33:f9:5a:90:86:19:ea:3a:75:6b:ad:79:
2d:56:b4:04:8e:4f:7a:e9:50:e7:92:25:b6:9e:8e:
60:11:f6:07:bf:32:db:76:79:0a:ba:a4:d4:61:d9:
18:6a:4b:d9:a3:10:d4:bf:03:f8:31:ff:6e:47:82:
28:3c:ce:ca:77:e8:40:84:36:b3:15:84:a3:8e:5c:
d1:3f:8a:91:9c:98:c5:74:1f:85:2d:8c:78:e0:41:
48:c8:f8:cd:96:ac:2f:0d:54:23:88:bf:07:eb:bf:
d6:53:6c:53:aa:64:5a:f1:56:a4:85:52:d1:de:05:
44:6d:ca:91:6c:c8:0f:c4:c1:15:06:26:68:63:f7:
45:18:e9:68:cf:09:c6:c0:92:4d:45:9d:a1:af:2a:
53:83:b6:89:11:0f:4f:cb:02:db:3a:20:d5:7a:c9:
85:ca:71:2a:8a:a9:55:4d:b0:e8:07:42:10:b5:c3:
f7:f6:c7:95:27:3e:19:6f:6c:2f:74:51:91:6e:fb:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:83:C1:E6:E8:76:6A:8D:1E:99:A7:EF:2A:2D:40:B8:9E:21:B9:0A
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:28:cd:98:fa:24:42:7e:f2:f2:6d:66:2f:fa:cd:0e:95:03:
35:3d:2f:81:1e:c9:22:28:d2:dd:0d:07:05:13:57:2c:e3:17:
c8:b1:2a:3d:d0:ac:ef:3f:4b:89:58:de:80:2f:e6:06:04:24:
54:5b:03:84:57:7b:12:0c:43:1c:cf:63:24:c4:df:1d:1a:80:
d1:7a:9a:ba:f0:16:e7:68:a4:50:3c:60:1f:7b:94:b9:14:65:
ee:82:bc:a3:8a:03:d1:68:ce:f5:38:aa:bb:c7:43:82:72:9a:
63:4f:5d:d1:80:21:59:4e:40:64:f8:27:6d:f4:e2:71:51:41:
6b:35:c9:68:5f:7f:07:7b:78:d5:7a:00:c0:3e:bb:8e:c6:48:
82:c1:0e:9d:5b:51:91:ba:b7:3c:f9:9d:36:73:bc:44:56:c8:
05:9c:b4:da:34:73:b3:b4:3a:aa:98:8a:95:60:e0:92:43:52:
9c:9c:1f:2c:13:a5:ac:65:2b:77:57:51:44:db:8a:8e:1b:93:
cb:2c:4f:4b:cb:ad:9f:eb:bf:5b:f9:f1:12:80:a9:2c:6b:94:
44:ee:69:f2:3e:e1:7d:00:90:e8:94:e4:fe:aa:7c:bd:b3:85:
14:0c:28:6e:d9:dc:3f:6a:39:01:a2:7d:d3:00:43:5e:fd:0d:
15:09:20:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:48 2025 by rpki-client