Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: yUML8OIlbNB8M7ZycU2aqLb1epFPywZo9SwEwFq6Ybo=
Subject key identifier: B0:F7:E3:7C:A3:A3:83:6F:8E:54:FE:EC:31:30:E4:6D:E5:BE:37:1E
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 0197B745AB953025A4CA71FE5ECC55843FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 05E0
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: MKVWoK3wRPR_92nYPkQa4dZVFlU.roa (hash: CUusBr3IW9QaEzh3QeMtC6ZDvXcFkIcu309/jIeDme8=)
2: UVKqbvOHvCn6HoAzG1ux5mNYX9U.roa (hash: zS7iofsDKAb9AZxOa/q1sMs1Br0lasrnbRlbpqfAq5w=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: 8VdIuJEgivPby/hyDgTvTG6xzk1s4VKfAEQwoPAdvJs=)
4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ab:95:30:25:a4:ca:71:fe:5e:cc:55:84:3f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=b0f7e37ca3a3836f8e54feec3130e46de5be371e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:f7:b4:71:9e:b7:61:29:16:7d:d1:ef:e2:
14:31:9d:e6:bc:d8:33:cd:d7:19:1d:7d:d2:16:bd:
6c:f4:72:2e:d9:ee:d2:75:b3:c1:2f:1a:72:27:df:
9f:c4:53:b2:b9:6a:a8:2d:cf:be:46:e2:eb:7b:b9:
f8:b2:3e:01:59:12:14:c7:e6:a0:e4:22:24:e5:05:
66:58:ab:0c:7d:27:3f:05:c6:98:16:9d:91:67:9d:
fb:f6:81:12:7e:25:5e:47:a2:e2:84:26:fd:ea:3a:
57:dc:91:5b:41:aa:3b:4c:b7:57:bf:df:42:09:01:
cc:b4:c8:f3:2e:e3:a9:f4:df:99:af:70:a1:d4:d4:
52:37:83:4b:d6:a2:3d:fd:a1:32:ac:45:ec:64:b6:
88:a6:2d:2b:a2:9d:8a:40:f1:d7:2b:66:c5:f7:21:
bb:24:a5:cb:6c:1b:e7:97:19:a6:51:64:f7:b6:0c:
69:0a:7a:0c:28:00:6a:4a:9c:03:4e:7d:27:1b:c9:
4b:fb:e5:b6:63:cf:7e:64:3e:bb:dd:07:ab:68:9d:
cb:68:4b:8d:e6:2f:b6:ee:17:55:14:83:e6:8b:85:
76:8f:27:13:ca:92:e7:fd:51:74:61:7e:88:52:b4:
b8:60:8a:82:03:65:16:dc:4f:72:ff:27:f7:29:26:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F7:E3:7C:A3:A3:83:6F:8E:54:FE:EC:31:30:E4:6D:E5:BE:37:1E
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b9:35:52:49:e0:7b:5e:02:8c:a0:96:f8:f6:0a:c9:df:83:
30:2d:88:e0:22:04:df:95:64:81:f6:d5:e9:53:4c:81:15:f7:
b9:2f:09:3c:15:37:52:e7:3c:8e:66:cb:e9:f1:6f:4f:85:75:
a6:3a:fd:8f:ce:7e:a1:c5:a8:70:51:62:75:4d:45:12:13:5a:
c5:7b:ed:03:a6:5b:8a:6f:13:4a:c4:12:e3:c3:82:28:e9:fc:
f9:9f:d5:31:27:ae:8e:5c:2a:81:90:20:5b:6b:b2:63:47:f7:
46:0b:38:81:fa:f0:4b:94:b5:00:96:6d:ba:f6:0a:b0:dd:43:
de:1a:f1:e2:c1:4b:86:90:7d:91:6a:8e:f5:22:84:47:9f:3b:
73:45:dc:53:b9:3d:69:f9:0b:5c:d8:b2:63:bf:d5:d5:7a:fd:
67:3d:55:bd:76:10:d8:5e:39:9a:6b:61:03:65:44:51:b5:b2:
d7:a9:fe:b2:c8:85:55:f2:20:6c:7c:f8:f4:c2:4a:13:9e:7b:
0d:3c:b9:63:ae:9f:2c:21:0c:32:9e:9d:35:12:20:5e:46:c4:
11:49:62:32:07:be:76:e1:d7:79:dc:62:bb:36:17:8b:7c:cb:
28:c1:9a:89:de:86:88:c3:be:6b:6f:d3:ed:2e:17:d2:f2:ac:
5b:46:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:17 2025 by rpki-client