Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier: VgTbwy2p/3oN8w2gMeGAYBUTHW46AozKnY9hKR6mLYo=
Subject key identifier: C5:47:67:87:41:5C:52:DF:CC:41:0A:F8:B3:A1:DF:D7:4A:CC:7C:0C
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 0197B63295C24EB7A594DFDEDF7A0702EDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number: 08F7
Signing time: Sat 28 Jun 2025 11:00:57 +0000
Manifest this update: Sat 28 Jun 2025 11:00:57 +0000
Manifest next update: Sun 29 Jun 2025 11:00:57 +0000
Files and hashes: 1: 5SbPyjmIYXelitOmA1AVO3bhm0Q.roa (hash: 1XIxpyYBD9DDRIa0BTpbMKp2ZvPzaojB9NovyRazhxQ=)
2: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: Mn70JsMp5iUqVvoi/VmP7To3Dr7S7rmLjwbag/jexyM=)
3: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (hash: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:95:c2:4e:b7:a5:94:df:de:df:7a:07:02:ed:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: Jun 28 11:00:57 2025 GMT
Not After : Jun 29 11:00:57 2025 GMT
Subject: CN=c5476787415c52dfcc410af8b3a1dfd74acc7c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:ee:61:c7:cc:b4:ec:87:50:75:ef:3f:58:
5a:54:09:a5:48:09:3a:c1:41:fd:3a:6b:73:ae:4a:
01:98:16:70:2d:4a:1e:8f:c7:53:b7:47:32:17:aa:
85:61:7c:3f:6c:5d:b8:8f:e8:03:85:d7:37:ff:17:
8c:51:f3:e1:27:87:32:a3:9e:99:53:a6:4b:ab:94:
9a:06:84:d6:88:e7:58:4c:98:6f:be:00:71:07:fc:
f4:b5:e6:27:48:c3:9a:06:fb:12:de:c2:7d:5b:08:
69:97:63:a4:e9:bf:a1:af:ca:5d:3e:1f:33:7b:e2:
52:ed:a0:6d:e2:37:b1:42:04:5f:0d:90:94:f3:6b:
6b:c4:ac:1c:ca:50:91:d4:d0:ed:10:c9:5d:2e:90:
bc:85:93:e6:86:ee:c5:b3:92:c4:04:b4:0b:3f:c3:
79:e9:6c:dc:fe:24:52:ce:6c:f0:67:59:68:ca:8c:
1d:3d:3f:1d:bc:c5:79:e0:b4:e5:3c:5d:2e:60:d4:
23:35:e9:1d:3b:4f:b7:aa:c1:20:87:b5:c9:1f:f7:
f0:fd:33:23:d2:e6:a7:78:72:eb:d6:2a:e8:fd:f6:
29:07:18:a1:f9:fe:d2:ae:62:44:3e:ac:ca:14:f4:
b8:e5:0a:ac:01:86:6b:cd:22:79:c0:bb:e9:b7:28:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:47:67:87:41:5C:52:DF:CC:41:0A:F8:B3:A1:DF:D7:4A:CC:7C:0C
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:da:65:b7:17:82:57:7b:56:e5:8a:ae:c7:6e:d1:bc:8c:1c:
3a:84:d0:5b:15:98:d0:d4:ff:f7:61:70:07:0a:f6:3a:9d:ef:
2f:7c:00:89:92:56:5c:2d:21:7a:f5:b8:55:c6:d4:f2:bb:42:
23:ac:86:8f:9c:d6:df:50:89:4b:16:44:5a:86:8c:b2:2a:ac:
91:45:14:84:a5:60:d7:02:ec:b5:db:8b:d9:9e:31:bc:b6:87:
f2:4f:0e:e7:35:bb:da:93:9a:61:93:10:0b:81:b0:12:c6:13:
e1:66:af:22:8b:18:7d:a4:4a:a6:7b:0d:f0:e6:86:d6:86:33:
9d:41:6b:40:db:c1:a0:a7:ea:33:dd:f6:0e:08:03:32:13:bd:
64:80:b3:55:86:14:69:d8:38:60:5a:74:87:25:2b:e6:d2:3b:
38:cd:06:bd:61:f3:86:87:fe:ad:51:3a:7f:4a:76:6e:d8:f4:
cc:99:22:e4:29:5e:59:6a:ec:e7:36:b0:35:cf:cf:29:e0:c7:
c8:e5:db:aa:e1:a6:db:ac:5a:cd:2e:cd:9a:5b:a5:5d:d8:e6:
44:61:c1:f9:fe:87:46:b0:d8:b5:d4:30:d4:5e:9e:eb:3e:0c:
d1:53:25:a3:1d:a9:a4:fd:97:86:3c:9a:84:37:ab:dc:27:61:
40:0c:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:17 2025 by rpki-client