Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File: 5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier: yMNEAKUdyAMUCiDjdw/1ImM+h5zuhxxFP6+jYglqc5s=
Subject key identifier: BA:5C:80:4E:15:09:55:71:4B:09:4B:47:B0:8F:04:02:12:E6:78:80
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 0197B7B30E8E853056F1348FA90FA11C81AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number: 133E
Signing time: Sat 28 Jun 2025 18:00:54 +0000
Manifest this update: Sat 28 Jun 2025 18:00:54 +0000
Manifest next update: Sun 29 Jun 2025 18:00:54 +0000
Files and hashes: 1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: Bu++BYC4zjGgOzgNV1+tCZCAC1/FRgwca7B8jduWlT0=)
2: c7QJZpcKw5JtI5FMoVTzm0WUSCk.roa (hash: eFh5B28aZqPEyGFrbmBU9Qj8kztn04oOd68LadOBOHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0e:8e:85:30:56:f1:34:8f:a9:0f:a1:1c:81:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Jun 28 18:00:54 2025 GMT
Not After : Jun 29 18:00:54 2025 GMT
Subject: CN=ba5c804e150955714b094b47b08f040212e67880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:00:ee:14:96:ec:57:ac:64:f8:aa:35:83:
e2:12:7b:50:83:e9:dc:45:22:8f:98:ca:ae:0f:26:
58:50:1f:7f:e0:5c:fd:55:e0:d5:54:f3:af:31:6a:
8a:12:ec:d5:bf:17:b7:22:c4:e9:2d:3d:ab:fc:0f:
29:42:fe:71:f5:47:01:fc:d3:a0:7a:16:d5:71:82:
7d:87:b4:a4:ca:46:c6:03:28:ba:e0:a5:82:24:e2:
d3:aa:48:ed:f3:96:28:52:c4:4b:37:07:8a:ac:c1:
97:ad:45:ba:86:93:f7:8f:f8:48:30:e5:1d:7b:21:
b1:47:27:b0:68:a5:bb:84:dc:29:d4:42:ed:7e:ef:
c6:0b:81:23:3f:0d:65:38:d0:8a:97:8a:57:5d:cf:
77:b5:ee:e3:5e:9a:ca:d4:20:90:54:4c:9e:c6:2e:
7f:6c:14:7d:03:4b:a1:2e:c7:91:ba:dc:c1:b5:e0:
e1:1d:76:e0:05:36:f0:39:26:0f:f1:9d:6c:ad:35:
9f:02:da:88:25:08:90:77:6f:1a:3b:fd:68:84:aa:
25:09:34:50:d7:85:9b:43:7b:5f:fc:4b:c8:03:e6:
14:48:ad:95:90:ac:ab:23:51:42:e4:e2:6a:e8:16:
80:8f:e7:8b:46:c2:14:88:03:70:80:db:e3:bd:55:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5C:80:4E:15:09:55:71:4B:09:4B:47:B0:8F:04:02:12:E6:78:80
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8a:d5:0a:9f:87:d0:f0:dd:25:3d:87:b6:f8:73:60:46:e1:
91:e8:b5:95:2b:0b:71:24:d5:02:8c:31:45:7a:55:ce:e3:92:
ed:b6:84:f7:31:3a:21:ea:cc:38:a0:e2:63:1d:77:a0:8d:bb:
be:b3:35:3c:9d:d9:1a:70:7c:61:b2:fc:a4:44:b0:05:44:18:
dc:d5:18:0b:56:a5:b0:e5:78:b6:59:e4:2c:77:2f:be:cd:22:
c6:e6:fc:66:8f:44:9f:b2:cd:22:c7:b3:e9:e1:79:b2:52:69:
b6:46:cc:b0:6d:f3:41:12:aa:e1:12:2c:7f:1f:3e:9e:90:44:
93:5a:95:1d:93:b1:74:25:f5:89:65:1e:0b:1f:77:57:72:b0:
cc:ae:a8:b0:9b:08:c4:1e:6e:ad:a0:41:3d:8e:c4:ce:33:aa:
c2:9d:38:06:d7:34:c2:ab:14:e2:79:ba:10:63:84:08:b7:3e:
16:7e:b5:39:4d:b0:10:88:32:11:fd:45:ad:1e:33:62:d0:25:
f6:5d:fb:59:89:ef:54:1b:3e:31:31:9a:fb:59:48:87:d6:9f:
90:ec:74:95:0e:b4:36:00:02:13:a7:81:54:98:f6:21:87:e9:
b0:a4:1b:17:e8:03:e8:17:74:ff:df:71:17:9b:5c:70:c4:e1:
8a:30:fa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:25 2025 by rpki-client