Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: 4iVTdRa8AYYmCKC0Amt5KbZaVj5m543BcWBC8p054l8=
Subject key identifier: A4:14:C7:CF:F8:CB:E0:CF:8D:C6:B9:A7:B4:1E:AC:8A:FD:8F:31:9D
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 0197B6D7BB317F39A8AA8BE868E6623AA32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 13E1
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: SYbQWvdUQJO301kwVm+zA0TBSxq/9yn0Vpm92fJZn44=)
2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:bb:31:7f:39:a8:aa:8b:e8:68:e6:62:3a:a3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=a414c7cff8cbe0cf8dc6b9a7b41eac8afd8f319d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:81:c3:1a:f8:bc:c9:0a:2f:8e:3c:99:dc:
5f:46:63:ec:cf:9c:65:5a:9e:b1:93:44:57:c6:e4:
2b:90:28:fc:1c:20:c3:73:8b:f5:e2:28:4e:30:56:
04:66:fe:06:7d:ac:d1:96:b0:9b:3a:fa:4c:db:d2:
66:3a:75:dc:d9:7d:7a:7d:35:81:83:cb:6c:11:28:
57:1c:77:c3:1d:65:9e:9c:c5:ad:ba:79:5a:76:7a:
b7:b8:64:8a:69:a5:63:ba:75:8b:ca:e8:7f:c7:9b:
87:9e:22:71:be:1c:e7:ec:02:a8:63:99:0e:c3:d2:
01:74:36:cd:88:45:d6:33:40:44:c4:f8:6d:ba:8b:
13:94:b8:3d:b0:e4:71:b7:3a:38:07:14:3b:d4:98:
50:35:2b:ec:cf:a9:17:e0:f8:f9:e6:73:ca:db:30:
5e:69:73:64:24:12:38:f5:89:4b:0b:11:01:1e:0b:
21:84:2c:69:ce:e6:96:56:91:28:28:10:29:4c:78:
d1:0b:34:44:88:80:5b:48:1c:ee:1f:a5:cf:ed:c7:
6e:2d:43:35:2b:73:00:93:b4:2f:69:69:1e:9a:32:
cb:ce:ac:26:e8:8e:67:81:2b:c3:84:8b:74:a2:67:
2a:a0:42:b7:fc:d1:ce:8e:dd:d1:a3:34:4b:b9:4a:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:14:C7:CF:F8:CB:E0:CF:8D:C6:B9:A7:B4:1E:AC:8A:FD:8F:31:9D
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d1:7a:23:9b:42:77:e7:c7:8b:20:14:5e:9d:2d:e0:b4:00:
0e:22:95:d1:7c:1d:34:93:af:e9:01:88:ac:09:e0:3c:21:2b:
42:f9:c0:7c:01:78:ed:58:eb:92:bc:6e:0e:48:89:64:8d:c8:
bb:2c:ff:7f:6e:d4:44:33:6c:73:45:d8:88:67:95:01:fa:76:
5b:58:ff:63:68:e2:99:da:72:c4:06:d4:a0:22:ff:bd:5b:a3:
84:a3:cf:78:18:cf:20:2a:7c:98:ad:f6:49:98:33:40:88:f8:
fa:7b:e4:f0:8c:9c:86:86:2f:31:7d:9e:2a:c8:d4:92:3f:42:
c3:50:5c:fa:97:d5:b5:c8:c4:3f:4c:b1:1e:16:d2:8b:da:d6:
36:c0:ab:50:c5:75:49:7d:ab:8a:34:ee:46:7d:00:d8:57:61:
0e:27:f5:a1:22:8c:eb:97:c3:eb:6f:ab:85:fb:c9:da:77:c1:
41:d9:34:41:2b:78:a1:08:96:08:d7:19:c4:55:47:5c:a4:a8:
af:e1:c0:e0:84:3e:e3:58:74:bc:cd:bd:9e:35:f8:55:42:01:
22:57:97:83:a1:d5:e7:5b:68:ec:88:0f:80:3a:53:82:86:3c:
bf:39:1a:aa:4d:6c:f7:94:30:9b:50:07:a4:c0:01:b9:53:cf:
5c:af:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:00 2025 by rpki-client