Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File: 5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier: 4mfdM9TtgmDfxXRCuLX2cSGF+1WXm1qD0cA+8Gyfq5I=
Subject key identifier: 3A:B9:CF:7F:7B:4C:E9:4D:43:5A:A0:D9:89:2D:FC:7B:55:7B:10:D2
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial: 0197B632B574848D15DCB2EEF888714D656D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number: 039D
Signing time: Sat 28 Jun 2025 11:01:05 +0000
Manifest this update: Sat 28 Jun 2025 11:01:05 +0000
Manifest next update: Sun 29 Jun 2025 11:01:05 +0000
Files and hashes: 1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: BuzKoO5SEpq3LfD48nVtNqmfBRMrf1d9DxTtdiegWZY=)
2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b5:74:84:8d:15:dc:b2:ee:f8:88:71:4d:65:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Validity
Not Before: Jun 28 11:01:05 2025 GMT
Not After : Jun 29 11:01:05 2025 GMT
Subject: CN=3ab9cf7f7b4ce94d435aa0d9892dfc7b557b10d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:d7:c9:86:05:af:0d:55:ec:fa:0f:da:da:
24:bf:d0:17:7f:fc:9d:6b:10:71:52:2b:45:c1:5e:
05:60:38:0a:bb:be:e9:57:b4:ea:4b:60:55:ad:a1:
3e:b4:19:ce:bb:3c:46:b1:1a:a1:df:c1:ff:b8:a0:
33:e0:19:2c:1e:3e:80:73:10:a1:fd:65:ff:cc:29:
59:42:1d:8c:b8:da:eb:9d:5c:e0:d7:ae:15:ef:23:
d0:a0:2f:c1:c6:5e:c7:00:54:77:1d:94:10:e7:5b:
34:d2:47:b7:27:b1:09:16:e1:7a:ea:e2:a8:a7:54:
8b:cb:41:af:ef:24:c0:22:e1:e6:af:0e:54:5c:1b:
7f:23:43:cf:2b:f6:ab:63:be:94:96:bf:bf:ee:e0:
36:b9:c3:3b:9e:ad:d8:38:cd:31:a2:bb:19:30:61:
a1:a3:6b:8b:9d:c2:02:14:ee:c7:b3:b9:28:45:1d:
f2:b0:44:5d:ba:07:b1:40:59:61:ba:4a:5c:d5:61:
69:79:63:36:e4:14:7d:69:5e:ff:a3:26:47:68:b1:
ea:72:ed:04:79:6b:76:bf:84:eb:28:79:54:f0:a3:
09:94:83:0d:31:06:f8:c3:96:dd:f6:1f:3b:a5:89:
39:9c:68:2f:bd:70:0e:1f:62:8f:60:5e:ce:93:c1:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B9:CF:7F:7B:4C:E9:4D:43:5A:A0:D9:89:2D:FC:7B:55:7B:10:D2
X509v3 Authority Key Identifier:
keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:44:0d:f6:2e:0a:30:a4:f2:3c:81:bb:4c:3a:a3:9d:fb:1e:
57:bb:c2:f4:90:f3:c6:7c:8a:c7:1b:d9:06:ff:a1:e9:f5:65:
35:77:aa:a0:cc:7c:a4:c2:7d:0a:1b:a6:47:ad:c3:83:31:15:
47:2f:b0:54:25:a4:bb:e9:dc:97:4f:23:9b:9e:98:03:64:9f:
ce:a8:c7:82:b3:db:34:90:bf:18:12:ea:ef:6f:a8:4f:e2:04:
9c:a7:b6:1f:18:d7:46:53:72:a6:a0:de:aa:37:2f:c6:99:f3:
18:c8:7b:57:e9:40:03:ba:6b:8b:36:58:7f:5d:3d:d7:ff:20:
2e:c0:28:1d:49:8c:9d:3e:fd:b0:44:72:7b:03:51:1a:8b:ec:
bf:25:31:fa:73:af:54:57:b3:40:c5:27:89:c9:11:c3:0e:b3:
93:4b:7b:19:52:28:da:e1:62:6d:67:6b:f6:57:d0:ca:62:12:
31:03:45:f9:ce:2b:be:51:f1:01:3b:5b:68:27:27:0d:28:1c:
bc:f2:32:16:08:57:28:d4:15:f5:81:5c:d1:23:e8:2b:3c:22:
5d:76:fb:7b:85:c9:fe:90:75:a3:91:53:be:c9:05:27:ca:24:
7d:82:4c:1c:da:60:c7:6c:0c:a5:7d:0a:13:9a:68:89:45:34:
2b:e5:63:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:27 2025 by rpki-client