Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: BmfRgXWUfO1NSpGc3rQ46zwuKVQAQIJ0nYaiE1XvA6c=
Subject key identifier: B9:18:4A:5C:39:8B:51:57:55:6C:0E:2C:4D:A8:06:B4:3E:DE:A4:52
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 0197B77C89BD2604353ACFD0630C01B07A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 0DD4
Signing time: Sat 28 Jun 2025 17:01:21 +0000
Manifest this update: Sat 28 Jun 2025 17:01:21 +0000
Manifest next update: Sun 29 Jun 2025 17:01:21 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: 5kQhzEolA2UObCvbnGnYeQFOLY23OO1LZhKV936hcKc=)
2: fn36UtRGyW0zYJnxw32sGSj82q0.roa (hash: xdl6b5qAk+Coe4SCUR+/MRlwgbDH8F0nUd5jIICGFyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:89:bd:26:04:35:3a:cf:d0:63:0c:01:b0:7a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Jun 28 17:01:21 2025 GMT
Not After : Jun 29 17:01:21 2025 GMT
Subject: CN=b9184a5c398b5157556c0e2c4da806b43edea452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:de:05:10:42:e0:11:36:a4:7e:16:3a:27:
ad:72:99:aa:25:84:6e:29:b8:be:6a:80:fa:e1:67:
9d:26:af:ac:92:bc:38:fe:d3:b0:28:56:80:d4:10:
5a:9f:4e:e3:37:39:5e:2a:3d:bd:8b:04:4f:37:f2:
6b:3d:61:ea:42:1e:1f:d4:51:74:1f:6c:b6:81:6a:
b9:d0:26:9c:a6:42:a6:a1:9a:f9:1f:76:8e:97:3f:
0c:71:08:32:3d:8e:37:2e:18:eb:b1:f3:c7:cd:e0:
dc:bf:a1:1e:11:3f:cd:65:0d:10:2c:59:23:db:23:
c7:71:0d:76:fc:08:8b:68:2d:34:27:d3:80:cb:7c:
e9:09:a9:67:81:0b:11:40:21:f1:4c:78:ce:28:c8:
ee:56:fe:ae:65:17:87:df:a7:a2:ba:53:15:b9:6e:
3a:b8:b6:b6:3b:f4:16:2c:93:89:ec:e1:45:82:8d:
84:59:0c:90:c5:44:95:2f:b9:c2:a6:a1:ed:4e:ae:
cf:0d:93:57:8b:9c:57:dd:9d:77:e6:50:95:45:a0:
ac:1e:87:b0:ed:2b:21:3d:33:a2:26:5d:4b:fd:0d:
f7:6c:8a:1e:fc:76:22:66:e7:4d:b2:02:bb:04:92:
f0:29:7c:33:e4:d7:28:7c:1f:c6:ba:38:14:c9:db:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:18:4A:5C:39:8B:51:57:55:6C:0E:2C:4D:A8:06:B4:3E:DE:A4:52
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7f:60:5b:44:44:28:8b:ea:a4:91:c0:d6:53:fc:53:4c:0a:
1c:1d:1f:81:fb:73:3d:2c:60:4b:03:d6:a2:81:9d:ed:ce:71:
74:24:7d:07:f9:76:ce:61:65:49:c7:4a:0b:ea:7b:c9:08:b0:
40:59:bb:13:4f:fa:40:84:55:0b:fc:fa:26:13:d5:d9:c0:fe:
67:03:a1:f3:fd:1e:6d:1c:f7:22:e3:cf:1d:bf:e0:4c:a4:ba:
13:1b:bf:51:29:5f:f2:7b:dd:6e:99:ec:6f:1d:be:96:b5:e2:
db:17:c9:0a:3a:fd:1a:15:11:7f:c2:7f:3d:93:77:e1:74:ba:
cd:a7:9b:ea:1d:b7:09:94:f2:49:50:0e:50:62:de:ae:03:af:
f9:00:3d:ca:73:b4:c9:fc:4a:bf:a6:59:59:ce:b9:f0:57:a2:
d6:0a:3a:ef:f5:36:89:22:04:fa:51:4b:01:04:a8:87:32:29:
52:93:3a:3d:61:8c:f2:b6:33:84:c4:87:d8:ab:bc:14:8d:7b:
09:9d:7c:bd:da:fd:ef:0d:1e:e5:2f:14:f8:d8:98:7d:da:51:
7e:27:ae:a2:fa:2a:7e:0a:1c:66:72:19:ca:8e:0e:1b:53:c0:
8a:58:50:2f:fe:d4:71:7f:23:61:98:79:06:72:10:9b:66:f7:
0b:7d:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:54 2025 by rpki-client