Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File: 5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier: xc8unnONzb4dxrILhkTGKbwhk3+D+OKGUVgeGLrapJo=
Subject key identifier: B3:94:F9:0D:45:16:77:6A:1E:70:E3:A2:EB:F4:84:F1:53:6F:E5:F7
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 0197B820F38227EFF800A6FE2D1266005C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:00:56 +0000
Manifest this update: Sat 28 Jun 2025 20:00:56 +0000
Manifest next update: Sun 29 Jun 2025 20:00:56 +0000
Files and hashes: 1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: H5V+BX9rhtKdsRK7Pwo9WvgsaBcmY4Aj82bnoSLXE0I=)
2: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (hash: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f3:82:27:ef:f8:00:a6:fe:2d:12:66:00:5c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Jun 28 20:00:56 2025 GMT
Not After : Jun 29 20:00:56 2025 GMT
Subject: CN=b394f90d4516776a1e70e3a2ebf484f1536fe5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:1d:90:3a:f2:17:ab:1c:b8:56:a1:5c:05:
6c:ab:be:ed:7e:62:12:7c:96:b5:5e:cd:76:52:cb:
dd:f6:23:0f:b4:76:36:4b:9e:47:51:28:a6:2f:1b:
68:71:c6:d0:77:b1:c9:8f:23:da:71:1e:72:cc:4a:
5b:55:1a:eb:cc:2f:e2:9a:b2:44:8e:64:a3:33:60:
4d:10:7a:2d:6e:0c:69:55:9f:21:25:10:83:d5:98:
12:f8:af:42:e9:62:29:6d:78:e0:77:a4:d4:9b:8a:
9b:f0:67:18:cf:ac:92:28:6f:1a:5a:2a:6b:92:b2:
d8:21:7e:55:91:23:3e:ab:9a:34:53:fe:5c:a2:f9:
e5:3b:66:1a:9e:0e:9e:2e:ab:0e:ac:2a:e0:4d:16:
2d:f2:76:ce:2d:04:41:7b:08:a9:7c:49:16:68:48:
9e:e8:ae:d6:97:d1:b7:28:78:77:99:da:50:3a:ba:
87:ab:91:46:03:8c:c7:64:d2:f4:8e:09:86:0e:b7:
c7:66:7a:92:0a:e7:ac:ce:40:97:e3:01:7c:50:7b:
00:d4:74:e7:67:21:e5:2d:a0:29:84:fc:25:4b:ab:
4d:0a:9e:f8:ee:5f:1d:7a:f2:97:18:bf:81:07:83:
1e:e2:c9:b8:fd:dd:51:6c:9f:b8:eb:49:b5:1f:ee:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:F9:0D:45:16:77:6A:1E:70:E3:A2:EB:F4:84:F1:53:6F:E5:F7
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:27:06:eb:3b:16:85:0d:f6:19:a7:f2:40:47:a3:af:b4:9f:
4d:be:f6:7f:52:29:d2:c9:07:0c:bd:c3:81:05:15:31:a3:da:
b2:60:f2:e3:50:cf:50:d7:4d:c8:97:3f:f2:4c:06:9f:ce:f3:
e7:a7:fd:cb:8d:b5:60:df:35:f3:a6:c1:ad:6f:7c:76:77:c6:
c4:41:9d:53:30:66:19:a1:76:da:7b:c6:a8:e4:bd:e3:49:e4:
f4:f1:ec:b5:b3:df:fd:0a:d5:f6:fd:f4:de:a6:e0:ac:67:7c:
a7:a9:00:7d:b0:32:44:2c:8f:05:75:83:2f:8d:81:3f:df:41:
a6:58:14:2b:89:ef:6c:f6:c5:0e:73:ba:5a:ad:33:5d:66:d6:
d6:cd:66:e2:a4:a9:78:b9:28:95:57:f7:73:23:1c:f1:94:b5:
28:9e:dd:4f:b2:4e:70:01:d5:71:95:d0:52:81:b9:8e:82:ef:
9f:d5:e9:52:7b:a0:b2:65:bc:47:10:ee:11:b7:a7:83:db:61:
3d:de:a8:71:7c:be:2b:4e:10:a0:0b:e6:c9:57:80:4e:62:40:
87:5e:2a:46:17:6c:62:84:c5:f7:30:00:e6:08:b1:9f:ce:0d:
2d:5f:c9:e2:96:31:36:b0:ed:54:be:1b:e3:e5:a6:f7:e3:e6:
80:f5:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:11:41 2025 by rpki-client