Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier: 9C/8j+yI87v3+c1omSG243CA/FL6ix+5GHniFkzQBq4=
Subject key identifier: EE:A9:45:9B:FB:98:A9:63:76:E4:E8:1B:13:35:1F:34:7C:AB:88:88
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer: /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial: 0197B7EA3B968EEB9242292916294DBB6146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number: 6B
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: LNrVTqd2WcNfxgj1U2Q9PQuDfsFxZI6I3hIaigwf3HU=)
2: NM7UvKaTOGBhqz3Waw4Aop_d3I8.roa (hash: CuECrw6IivHOvgLxpf0LZMc5frIWOtpPKmC4FcLgXSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3b:96:8e:eb:92:42:29:29:16:29:4d:bb:61:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=eea9459bfb98a96376e4e81b13351f347cab8888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:98:17:be:c1:db:dc:92:d6:49:30:0b:b9:f3:
71:b9:a6:39:c9:59:a0:83:ee:b5:d2:c6:1a:f3:f4:
01:86:64:da:f0:81:9c:63:6e:d2:26:69:3d:56:2a:
fe:40:58:a1:e3:ad:36:6b:99:fe:4d:60:85:3b:c8:
03:55:5f:18:77:9c:c2:65:44:77:c9:0f:a9:8a:54:
49:2d:c4:68:f6:0c:ec:d8:ee:56:92:d9:d3:a0:8b:
19:82:c5:03:cf:00:88:ab:ad:74:bb:62:40:7d:d2:
c6:80:a4:44:58:3e:49:ef:cc:4a:61:3a:2b:70:6f:
39:fd:d2:1a:46:0d:c9:35:5b:a3:2e:0e:46:36:20:
ea:ea:d9:cc:10:38:3f:6f:a3:9c:b8:01:c6:27:a7:
2a:5e:80:a4:24:b6:a1:30:13:2a:e9:a2:9e:7e:98:
54:40:10:90:3c:64:42:ae:b9:72:c8:b2:8b:2f:2e:
59:c6:30:19:16:9a:8b:b9:a9:41:d3:58:54:b1:9e:
af:4f:c1:9b:00:80:12:a2:05:95:8e:c3:39:68:0e:
b3:96:aa:32:f5:cb:f4:21:36:45:33:46:b2:66:3a:
7c:58:8e:7a:9d:e9:7b:9a:4e:79:d0:8f:a8:b2:45:
02:da:79:95:31:41:e8:43:da:03:e3:92:d2:3e:f2:
c9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A9:45:9B:FB:98:A9:63:76:E4:E8:1B:13:35:1F:34:7C:AB:88:88
X509v3 Authority Key Identifier:
keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cd:9c:ee:18:c9:51:5a:4d:3f:98:2d:7f:c2:a8:65:d0:b6:
23:b7:07:c7:5c:af:71:67:e2:24:4a:0c:69:47:22:77:7f:8a:
d9:a4:02:5b:05:f0:92:76:92:c9:b5:be:28:0a:8c:79:3a:79:
93:a5:09:34:6b:de:04:43:08:b9:3f:e8:a7:e0:ea:d6:6f:f8:
48:33:49:81:a0:07:7d:80:95:73:91:71:e1:84:b7:32:45:f4:
fd:aa:ab:14:5a:9c:3c:eb:5c:28:d5:ef:79:b2:e8:2f:16:03:
0f:ff:0d:0e:b6:05:d6:c3:36:28:e0:80:44:08:7d:b2:53:59:
4b:9a:ad:3b:ed:e4:fc:75:0f:7e:86:84:3b:65:98:d2:9e:bf:
37:62:c2:92:d5:01:ea:f4:c4:d3:78:dd:ee:29:09:96:28:54:
1e:75:cf:6d:e7:2b:fe:61:87:02:3f:4f:99:50:8c:56:3c:c2:
93:96:c8:9e:34:0e:42:d2:1d:03:c1:75:d6:d9:e8:dd:2b:38:
a5:fb:82:b1:d1:d2:e4:91:77:0a:2f:1e:24:4a:4e:3a:eb:ff:
48:2d:95:93:89:c5:77:6d:71:dd:ef:23:77:a8:ff:1e:f6:b1:
9d:05:cf:2d:d2:4d:bd:f4:3c:b3:ec:9d:c2:94:0f:9d:17:e9:
23:56:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:46 2025 by rpki-client