Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier: Ozzwa0ArEn9NHsAsa6ZB3ag99PJRxQcPsmiCVvZykPo=
Subject key identifier: 65:8C:72:E1:6A:26:19:EB:D5:3C:61:6E:9E:E1:DA:21:94:1A:87:63
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 0197B88EF2E1635E296B4E1099EFA1AFE2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number: 036A
Signing time: Sat 28 Jun 2025 22:01:05 +0000
Manifest this update: Sat 28 Jun 2025 22:01:05 +0000
Manifest next update: Sun 29 Jun 2025 22:01:05 +0000
Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: nhB3igDm1Dzq0SohzeI6UzdkiOvfAEBvL0T3pa8PTWk=)
2: IGFfOsfuRBLRoDQXZrvrXPV6GDg.roa (hash: GBdaIeCW55nvw4wNP3jzu/1bBBTCqNE/C3I0UV/65Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:f2:e1:63:5e:29:6b:4e:10:99:ef:a1:af:e2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: Jun 28 22:01:05 2025 GMT
Not After : Jun 29 22:01:05 2025 GMT
Subject: CN=658c72e16a2619ebd53c616e9ee1da21941a8763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:66:44:5f:ed:c7:65:e1:83:1d:14:0a:d2:
4d:34:89:fc:03:61:40:86:df:09:ea:84:89:85:14:
39:7a:25:43:c4:2f:b7:ae:16:8e:b8:ee:4c:8a:ca:
30:5f:53:72:45:32:6e:5a:f7:cd:bb:4b:9d:8f:04:
0a:c4:c9:c6:ad:ab:2c:45:8a:52:f6:b7:5d:4a:a6:
5b:18:d8:02:41:b0:c6:8a:45:ac:ca:db:95:0c:90:
bd:0f:51:be:b4:b7:cd:60:e6:d8:f4:1f:74:79:6c:
31:51:b4:17:8f:30:c5:7c:3c:9b:77:30:da:5b:6f:
8d:30:95:22:69:0d:64:30:eb:55:92:32:21:12:4e:
fc:bd:d1:01:5d:8d:17:00:63:fd:17:b9:74:37:c4:
df:5c:97:ca:8f:85:03:76:8e:25:b8:ea:77:b0:88:
61:65:8d:ee:91:8f:b2:05:77:1d:e4:a7:47:65:07:
44:d5:d2:30:05:53:f8:5a:87:20:a2:17:5c:90:13:
f4:f6:aa:0a:3b:26:7f:17:e0:96:3d:f4:7e:89:2d:
be:fe:0b:a5:78:39:84:d8:51:4f:db:25:0b:93:79:
e2:6a:ca:f4:9c:de:76:74:29:d4:53:9d:21:98:7d:
4b:12:a1:a4:c3:c1:02:cf:61:54:17:f4:20:9c:f7:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8C:72:E1:6A:26:19:EB:D5:3C:61:6E:9E:E1:DA:21:94:1A:87:63
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:12:05:26:67:67:02:e2:20:c5:e1:79:8e:fc:7e:1c:e0:38:
07:56:c6:9f:15:a4:a1:a3:8c:b7:40:5f:78:ed:0c:14:93:d1:
df:45:a7:06:76:33:0e:1f:2e:22:29:88:de:74:d3:e1:f3:2d:
85:4a:c2:2f:8a:3c:73:17:64:5e:28:d3:f3:03:6a:24:ef:fa:
21:cb:fa:00:e6:0b:6d:55:e4:8d:e3:6c:55:7b:d4:93:e4:9d:
75:58:09:7f:5e:2d:81:53:c8:f9:0a:e7:14:66:8d:d2:ad:7b:
4f:42:70:6d:3c:60:41:1b:d6:7f:7d:e5:dd:b2:e2:6a:0b:c7:
d6:1a:9e:db:10:86:39:6f:ce:f3:cc:40:d1:76:75:ca:dd:25:
bf:5d:70:50:f0:0c:d8:bb:fe:1f:73:bd:5f:06:ee:00:fb:a5:
fd:04:b8:05:78:38:8d:25:49:1f:48:3f:ce:f0:2a:e1:f9:ac:
b5:88:cf:6d:17:d0:64:b3:0b:c8:f0:03:cd:47:91:1b:f4:be:
58:5f:4b:04:a0:d4:cd:d7:01:76:71:b7:c5:de:6f:2d:81:53:
68:f0:9d:93:1d:b1:a5:57:31:04:64:02:16:73:c6:bc:46:17:
d3:04:5a:40:3a:b3:58:48:f2:a9:d8:11:87:fe:90:c5:49:31:
49:9a:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:29:54 2025 by rpki-client