Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
File: 5v-BaTR_UwcrLRGtGNmiU8r--uc.mft (raw, json)
Hash identifier: OLqY3CSuRRf0WG57U+jkYJ00PcoHo4GT9k/tGJ2b1oE=
Subject key identifier: CE:82:92:41:18:4C:B4:3D:9D:2E:A8:4F:71:F5:CD:05:46:69:17:05
Authority key identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
Certificate issuer: /CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Certificate serial: 0197CE3BB820960B422916A8966F31C114B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
Manifest number: 0497
Signing time: Thu 03 Jul 2025 03:01:49 +0000
Manifest this update: Thu 03 Jul 2025 03:01:49 +0000
Manifest next update: Fri 04 Jul 2025 03:01:49 +0000
Files and hashes: 1: 5v-BaTR_UwcrLRGtGNmiU8r--uc.crl (hash: cVLHTdFjudNEl8lgNNBV5qz9TNv6mNNr0YuBA7jOkIU=)
2: wTQvHz6KrEBh22NnZfSVSbP_3L0.roa (hash: FPUhMtrstm1Ac2XI6rl3vCrIvxuS83fDR4A5ahN+U+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3b:b8:20:96:0b:42:29:16:a8:96:6f:31:c1:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Validity
Not Before: Jul 3 03:01:49 2025 GMT
Not After : Jul 4 03:01:49 2025 GMT
Subject: CN=ce829241184cb43d9d2ea84f71f5cd0546691705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:fc:36:5b:ad:51:25:e2:34:1a:08:2b:1b:
09:f3:d1:7f:fe:85:cb:b2:8b:67:6a:6b:9f:e0:0d:
b2:94:8a:b1:50:67:ac:57:3c:83:94:1e:42:64:f7:
5f:8f:71:e2:a9:75:51:f5:2c:53:80:86:48:8d:f4:
c0:ba:06:fb:0f:6f:72:9f:70:ba:68:9f:e8:67:eb:
5a:cb:24:3a:89:26:e6:cd:21:6e:91:ad:bf:c2:8d:
f5:4a:78:c3:eb:79:56:09:52:6e:48:9a:e0:0c:48:
bd:ce:c1:2a:0d:3d:72:0a:36:0a:47:4b:5e:42:09:
cb:b9:55:17:48:33:d9:0f:05:c5:0c:78:67:4f:ec:
8b:01:40:05:19:81:64:be:af:d2:ff:83:18:66:6d:
74:ac:ba:1d:ee:9c:e4:c6:a2:b5:97:62:59:f5:2c:
65:58:88:d7:3a:ab:9b:66:f9:4c:c1:24:10:f5:64:
26:e4:84:c3:c7:fb:4a:42:b8:27:6c:c2:9e:55:da:
47:07:3b:7f:44:c8:ae:bd:ae:9b:40:6a:bc:96:0f:
b9:bf:8c:0b:18:07:ea:c1:87:6e:50:41:0d:3d:f5:
91:55:7a:a9:b8:d7:5e:27:c2:87:c3:97:80:52:b0:
56:64:8a:04:b9:ce:5e:2e:e8:b2:60:b8:52:d4:3f:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:82:92:41:18:4C:B4:3D:9D:2E:A8:4F:71:F5:CD:05:46:69:17:05
X509v3 Authority Key Identifier:
keyid:E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8a:bd:4e:6d:45:e6:8f:45:79:a6:a4:ba:3b:c6:19:09:92:
6e:f8:1d:31:00:7c:13:dd:fc:5a:77:df:48:3e:a1:58:07:fd:
33:84:a3:6f:b7:53:a6:58:b4:7d:dd:7f:54:9e:97:ec:d3:f8:
93:f4:4f:44:f6:03:b8:4a:78:6a:27:14:23:25:06:37:1c:b5:
b3:2e:1d:d3:0d:b1:64:8a:68:9c:24:23:43:f1:3c:8e:8a:b5:
9f:13:44:75:74:93:2a:92:ff:59:b5:f8:d0:4c:af:bd:f8:5f:
ab:df:2b:29:88:e9:ed:69:89:7f:a5:e5:ba:13:71:67:f9:5f:
08:47:07:d1:6f:33:d4:bd:3f:ff:32:d4:88:38:1c:f5:05:9e:
27:de:72:e6:3e:31:96:7a:85:a5:0c:a5:45:0a:8a:85:6b:7d:
17:25:fb:70:ef:f7:89:73:70:55:06:99:d1:b3:a0:61:3b:9d:
1b:a8:42:f7:16:7e:c3:2d:7e:97:a8:cf:f0:a8:16:7c:01:d7:
cf:31:13:08:75:a6:a5:66:69:85:50:57:13:4e:a5:fd:b6:39:
9f:42:02:6b:97:06:c7:59:c0:7c:58:62:b7:fb:cc:0d:7a:4e:
55:88:5c:90:b0:70:e5:67:ca:2a:10:d6:ec:26:4c:67:5c:44:
c4:ce:e6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:47:45 2025 by rpki-client