Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
File: 5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json)
Hash identifier: 5XZY550r7untcn8TWKiKdlOr3k7EnhJlu7fKw2CEGXc=
Subject key identifier: 08:4E:B3:45:FA:8A:12:3B:EF:38:09:6D:80:26:EA:F2:AA:C3:3B:49
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial: 0197C56F0CA2C2B6ED366033C873E9DB69D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
Manifest number: 08EE
Signing time: Tue 01 Jul 2025 10:01:18 +0000
Manifest this update: Tue 01 Jul 2025 10:01:18 +0000
Manifest next update: Wed 02 Jul 2025 10:01:18 +0000
Files and hashes: 1: 03YOknvLzuLtecipQHEM9oUgfnY.roa (hash: Y9pc0KjN0jtXN7PMd6pV/+HMwsV4kn+UyMORZ9TrI7A=)
2: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: AKbaq1vWCxS7C1KvCDFnScLoAhLZNumezgmrbsLmoNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:0c:a2:c2:b6:ed:36:60:33:c8:73:e9:db:69:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Validity
Not Before: Jul 1 10:01:18 2025 GMT
Not After : Jul 2 10:01:18 2025 GMT
Subject: CN=084eb345fa8a123bef38096d8026eaf2aac33b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:aa:45:ea:38:5f:68:f8:f2:87:0c:f6:0d:b0:
bd:c2:61:49:81:ce:5e:4b:b9:a7:5d:60:96:9a:5a:
64:3b:37:b7:86:7f:6d:d0:76:4f:32:d7:29:f8:80:
28:73:79:46:fa:d6:0d:20:f9:8e:18:ae:aa:23:01:
ec:ce:92:5a:42:8e:54:69:9d:e7:a1:0e:98:2b:3d:
4b:11:a0:6d:c6:fe:55:4e:c0:9d:04:68:a7:50:50:
5c:db:c3:47:f2:bb:67:73:b2:41:31:89:5c:52:29:
23:50:48:9a:0f:ca:6f:70:ae:5e:70:d5:68:62:57:
96:3c:c3:7e:b0:c5:66:99:c1:71:80:d6:8e:12:fe:
7c:fa:d0:10:07:90:3b:74:8d:1b:4b:bb:d7:f3:92:
a5:66:da:f2:c4:43:c0:b2:42:8e:5e:18:5a:17:90:
5c:1b:a7:bb:af:5c:df:7b:3e:9c:1c:da:3c:84:0a:
8c:45:5c:fd:6f:fa:9b:2f:61:41:44:de:a8:77:d0:
ef:a1:06:5a:82:28:c8:45:69:0d:7c:b1:20:29:37:
98:6e:92:d7:41:20:70:79:5e:ff:05:31:74:a8:0a:
8a:f1:64:70:b3:0f:3a:86:42:03:89:4f:40:55:64:
96:10:dc:df:a4:1b:17:25:2f:af:45:31:58:8e:b0:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4E:B3:45:FA:8A:12:3B:EF:38:09:6D:80:26:EA:F2:AA:C3:3B:49
X509v3 Authority Key Identifier:
keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b7:09:4a:51:72:09:54:3c:f9:0e:09:4c:69:e7:cc:f3:0c:
1b:19:c6:47:b3:e3:3d:ec:4c:51:7d:76:16:10:14:3d:7c:90:
d6:6a:25:ab:9c:25:63:5d:ce:5a:08:96:2f:e4:7c:73:ea:1e:
11:3a:b2:f6:29:64:53:cb:ee:ab:23:ca:05:96:a1:40:b9:2f:
e8:e0:a6:7d:79:bd:38:36:94:8d:93:25:e6:a7:eb:86:57:7f:
db:04:6a:be:b5:6e:c6:40:91:15:29:33:24:2c:ed:6a:ac:58:
0d:e0:1d:ea:62:a0:da:75:1b:77:45:d1:f0:e6:74:bc:b4:7b:
cf:cd:b9:59:ef:23:92:8d:7e:a5:05:0b:3c:c1:9f:10:1f:22:
cc:43:4d:32:ea:5c:53:00:39:eb:63:3e:da:ec:49:67:e4:e1:
8b:f1:13:6d:c3:08:70:ca:17:db:69:09:31:a0:5b:fb:fc:84:
77:14:c0:ea:2a:85:a4:3e:c1:c9:01:a5:be:cd:7b:c9:4f:d8:
83:d4:30:a0:57:2e:a1:9d:fc:f0:49:d9:b2:8d:5a:3f:c4:d8:
23:16:68:d0:f5:e4:21:3b:00:a4:30:8a:25:9c:6a:85:87:39:
84:a5:37:21:07:63:2e:25:2c:92:b5:68:6d:86:ab:b1:65:54:
55:54:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:05:38 2025 by rpki-client