Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier: 5Y5D3oK5cMaWDmFJPV9GfyyMFQBIjtGpkIDgvCDOOBE=
Subject key identifier: 54:47:A4:4C:4D:2C:A3:0B:CA:28:A5:B8:35:48:76:DF:AA:B2:4B:68
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 0197B70EE984FE1E41BE34F0C42562857AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: dqhU9XFMNMBntIiniNRrMV8St3wtGbHA9/tUU8WbTdc=)
2: T32ivR4pPT16GdJvEk3qcae9a-0.roa (hash: Ar4IuLNK/JbYrWnO/0jZmTGQAGYJO2SXqHxbBEnLR+A=)
3: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (hash: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e9:84:fe:1e:41:be:34:f0:c4:25:62:85:7a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=5447a44c4d2ca30bca28a5b8354876dfaab24b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:09:14:a8:ca:67:bb:b2:2c:e2:96:00:aa:
37:78:56:7b:67:24:ba:1a:23:fb:c6:2a:c1:39:92:
33:ad:a8:ba:98:7f:51:89:53:90:25:9b:6d:c4:e0:
42:79:4f:e3:82:41:5a:63:4e:b3:38:b6:34:10:6c:
5b:f0:1b:43:a1:32:c8:8f:31:b9:17:0b:16:1c:a4:
e0:94:31:2d:09:6f:30:35:9b:30:be:da:9d:40:d5:
dc:82:7b:7e:86:8e:01:05:4a:df:d1:8e:38:7f:de:
57:fb:e1:e0:be:52:65:ac:24:f4:fe:9d:07:08:e1:
b9:1d:90:fa:b2:41:4e:08:54:30:9c:50:17:54:48:
6a:0f:f8:30:f0:10:92:eb:e6:84:6f:f9:f0:e0:a1:
97:d6:16:60:3b:9e:c7:00:03:44:67:3a:6d:0d:5c:
87:6d:33:67:53:e8:e0:96:b2:0f:9e:33:32:52:b9:
c7:d7:18:16:a0:3f:ac:fb:97:95:f8:65:6b:17:19:
08:77:bc:ce:df:7e:0f:73:58:d0:6f:93:b0:ac:c6:
e2:fd:ee:47:5e:2e:d9:1c:05:81:a1:2e:07:80:92:
93:dc:63:8a:eb:3b:ae:34:cc:64:7f:bd:55:54:21:
43:d5:29:49:7e:e2:97:b8:97:a8:02:a7:d4:24:76:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:A4:4C:4D:2C:A3:0B:CA:28:A5:B8:35:48:76:DF:AA:B2:4B:68
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:08:71:e1:70:af:7d:09:15:3e:a0:aa:ce:d5:9f:ac:ed:94:
86:67:3c:66:26:e7:fc:79:a2:eb:2c:e2:ca:eb:54:c0:9f:57:
99:ba:eb:39:a6:43:ec:fc:bc:5c:e4:1b:18:f8:ab:58:16:6c:
ef:07:19:20:cc:9d:7e:ac:92:fe:3e:12:c6:a0:0c:a6:dd:bd:
ed:a1:ab:5b:6d:e9:17:0c:dd:5b:58:07:a0:f2:69:fb:45:55:
9f:38:e3:f1:be:96:22:22:52:cf:2d:a5:f9:33:c7:9e:70:de:
62:b1:0f:04:b2:f7:89:c4:9a:f5:d5:03:d7:7e:60:03:3c:b6:
bf:37:bb:66:7d:2c:2b:53:2f:db:23:e9:a8:7f:98:27:52:47:
61:44:d2:2f:4c:7d:a3:18:20:ab:05:7a:2c:ad:13:7e:1e:58:
04:c5:f0:a5:40:6e:a6:a3:21:21:88:f6:8d:f0:b7:6a:bf:5c:
ba:55:9a:03:4a:f6:f2:5f:bc:a6:58:a8:1e:9c:6d:33:1c:58:
c1:84:9f:dd:fa:30:75:3a:db:6e:7a:93:55:4a:15:58:f3:0e:
89:63:7d:3e:60:02:d9:a6:d1:ae:57:2a:4c:c4:84:12:66:b4:
f8:c1:7a:24:ad:e7:ff:89:77:48:29:9e:31:8e:18:6d:60:92:
e7:2d:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:35 2025 by rpki-client