Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: kz6rYddZApMBg22MHiK8/QeJNVPEk9v246WKtM1PzOM=
Subject key identifier: 3F:8C:01:8F:E0:27:5B:6F:7A:24:0A:66:D4:D2:C1:86:96:B1:5E:51
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 0197B96ABA1F17139E384885BA5A1D73B326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 0FB3
Signing time: Sun 29 Jun 2025 02:01:08 +0000
Manifest this update: Sun 29 Jun 2025 02:01:08 +0000
Manifest next update: Mon 30 Jun 2025 02:01:08 +0000
Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: PPRRZTTC4Qa5FovZJWD1FPwal8nJq6oA9sLG3HhcXrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:ba:1f:17:13:9e:38:48:85:ba:5a:1d:73:b3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Jun 29 02:01:08 2025 GMT
Not After : Jun 30 02:01:08 2025 GMT
Subject: CN=3f8c018fe0275b6f7a240a66d4d2c18696b15e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:23:2c:5c:04:aa:cc:48:a5:2c:b8:30:c5:
20:96:10:29:ed:4c:f4:be:ee:4a:f9:74:5b:11:45:
be:05:26:59:07:6f:e2:2b:5a:7d:19:ad:81:29:0d:
84:c4:28:40:71:f8:a1:23:3d:52:bf:b5:f1:04:d8:
2c:9b:79:8e:56:61:03:2f:86:3d:40:5f:06:8e:01:
a9:9d:1b:d3:21:7c:cb:60:13:69:2c:79:19:5e:57:
35:1b:36:c8:d8:6d:df:30:b7:0d:c7:70:d8:7c:a0:
d0:88:33:c7:6d:65:98:a2:24:5c:8f:15:63:7b:f2:
c4:c2:f4:c6:3a:d8:bd:66:77:4e:d2:a3:82:92:12:
46:05:7f:1c:88:2a:63:ec:cc:38:fa:3e:1a:6f:6a:
45:90:8a:42:75:0e:ad:a0:2e:0e:bb:98:7d:80:47:
3e:6c:12:3d:33:b4:7e:65:8c:1b:80:df:37:40:9d:
39:a2:cf:4a:20:2b:ef:f1:65:a9:b3:89:5f:cf:95:
74:d7:ce:c6:90:60:66:be:8b:78:25:45:d9:a2:c2:
62:ba:85:e7:90:ea:74:00:7b:0a:14:43:15:b0:19:
d9:4d:8d:10:84:ac:7a:86:54:db:86:77:a9:f0:18:
8a:fc:23:08:73:27:d2:9c:5e:31:ff:c8:aa:6f:2c:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:01:8F:E0:27:5B:6F:7A:24:0A:66:D4:D2:C1:86:96:B1:5E:51
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b9:09:d1:e8:d8:e3:9f:9f:71:d8:bc:09:0b:3d:38:2c:7d:
a6:50:44:fe:a0:5c:90:1c:8b:b5:4a:c9:8b:1b:b5:55:3c:ca:
6b:81:c0:46:ad:a6:0a:cf:fc:e8:fa:7e:15:4b:31:fc:9e:18:
76:ad:6d:da:67:10:95:97:18:54:36:bc:d0:28:4d:c4:4e:49:
96:f6:95:b0:0e:48:9f:84:6b:ea:e9:c7:94:4c:32:f5:fc:75:
ef:33:10:df:85:ce:db:00:8f:6a:86:9f:71:f5:72:fe:d2:30:
92:a0:0c:af:3c:94:22:be:69:e7:41:66:d9:e6:39:7e:a0:62:
a0:38:83:b8:cd:56:2c:57:ae:60:9c:32:e3:0d:b2:d5:20:99:
0a:a9:85:58:5c:af:6c:2b:27:b6:0e:fc:84:b8:9a:7b:58:f6:
2e:e8:7e:99:c4:f8:81:9a:37:1a:9f:28:5d:53:03:cc:6c:8d:
aa:dc:db:ba:ac:d2:f1:df:b4:63:b0:c7:55:29:dd:ff:c8:28:
7d:33:1b:68:ef:c5:f6:bb:a7:0b:21:6f:3a:79:5a:39:21:0e:
03:55:0e:86:63:ea:31:b2:ad:ab:b4:51:62:ed:d9:41:d2:b6:
9e:55:73:3e:61:5e:53:81:e8:74:c6:fe:28:ec:a1:0f:8c:8e:
a4:0c:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:13 2025 by rpki-client