Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier: GLk3KOK39Fq/Dskbg4hmZKhGgIMM9h4/NMe+UIg/zUw=
Subject key identifier: 98:AA:D9:81:8C:21:F3:A0:89:6E:0A:55:54:6B:CF:5B:F0:17:53:59
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial: 0197B6A062F32AC0BB8E303EC6A9C60B178A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 13:00:53 +0000
Manifest this update: Sat 28 Jun 2025 13:00:53 +0000
Manifest next update: Sun 29 Jun 2025 13:00:53 +0000
Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: C61+iK/Q6J3MDt3tDMkR2OizMZupMP9tV2AgTDlkig8=)
2: cu8xrGCLqiGHp1db_MgiG0UxHW8.roa (hash: giP9e0QpRuK7Urrt2Hhvj2cOHwVCXlF67CRutRL96MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:62:f3:2a:c0:bb:8e:30:3e:c6:a9:c6:0b:17:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Validity
Not Before: Jun 28 13:00:53 2025 GMT
Not After : Jun 29 13:00:53 2025 GMT
Subject: CN=98aad9818c21f3a0896e0a55546bcf5bf0175359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:87:73:a9:d2:5f:cf:f7:26:bd:7d:c4:a3:
08:73:e8:93:61:03:8b:39:e4:c3:ef:44:cf:25:dd:
ff:53:83:6c:57:d3:67:62:33:28:81:05:ad:7d:4e:
e7:75:07:2c:52:46:c8:93:83:ff:ad:a5:22:f9:4a:
e2:43:e7:86:b0:bf:c9:f5:4a:81:cf:a4:cb:fa:65:
5b:0c:b1:78:fa:33:b0:d2:22:cd:c1:e0:65:81:93:
ca:a1:74:6c:26:17:ae:47:e2:dd:a3:41:c7:76:77:
06:31:fb:b8:02:c9:24:2d:0c:30:91:a5:83:5b:14:
a7:8c:f6:a7:95:ac:a8:11:60:94:ee:eb:60:bc:35:
c9:12:90:fd:bb:e4:f4:99:08:b8:67:8e:26:1c:bd:
cf:f7:34:8a:cb:f4:31:40:f5:98:c9:e4:d1:a2:28:
a6:07:d5:52:e3:92:d7:e0:e3:cf:4a:be:0b:69:27:
82:6b:c1:0a:dd:f2:81:19:fe:d4:d0:b3:88:e6:b8:
b0:2a:77:aa:e5:23:21:63:f9:eb:ff:e9:c1:30:71:
88:f2:93:07:9f:b5:5a:8b:be:f6:a4:10:1c:a4:e4:
c1:ed:fd:cb:d5:92:67:e0:c6:75:e2:4a:cd:ec:47:
2d:5f:ee:fa:9d:d5:51:66:18:4c:79:d8:87:1a:5e:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AA:D9:81:8C:21:F3:A0:89:6E:0A:55:54:6B:CF:5B:F0:17:53:59
X509v3 Authority Key Identifier:
keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f8:9a:ec:c9:0f:99:a5:9a:dd:ea:ff:71:ff:34:54:ed:53:
dc:cb:80:14:0e:01:66:5e:3d:ef:ee:ad:0a:cf:ad:0d:99:6f:
3a:a6:a3:65:ee:35:49:75:5b:d4:c9:be:63:d1:b6:e2:96:3b:
86:fc:f8:91:09:95:0a:44:70:ae:c4:24:c9:eb:24:81:52:36:
77:25:5e:fe:d3:bc:3d:e8:a0:cf:ba:1e:e3:fd:0d:e2:f4:88:
bb:85:25:d4:12:7e:cb:ca:25:a2:38:81:66:4b:07:1a:55:47:
a3:50:88:a1:81:fd:d5:ff:b7:8b:36:10:e7:eb:6a:e4:2d:66:
58:02:65:c4:2d:b2:3e:9c:78:01:6c:d0:ab:5d:30:06:46:e2:
37:ca:02:8c:6e:a7:61:93:01:14:14:7c:8c:36:47:e4:c0:42:
87:ad:e1:97:06:50:d7:83:55:7c:e8:03:a2:0a:c7:cc:5d:d6:
60:40:87:5f:2f:df:83:99:19:12:d0:8a:08:e6:e9:49:b0:99:
6e:ca:16:e0:8c:6c:46:11:5b:d5:da:3b:9c:5b:3a:78:c0:d0:
a3:83:c7:6e:79:1f:8c:c7:dc:1f:79:c5:4f:1d:02:fe:4f:0d:
09:8c:a4:e3:6d:b2:87:c7:1a:05:41:aa:b2:b2:67:41:dd:0c:
4d:1f:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:54 2025 by rpki-client