Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
File: ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json)
Hash identifier: 6tHypIH+l3Mn9nAKFcjZIDko/zNXSLP9s6WKNRgPq7k=
Subject key identifier: AB:F5:12:77:19:84:0F:FF:9F:17:D2:2B:78:DA:9B:02:4E:E4:13:68
Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Certificate serial: 0197B7B3084355A662FE6B3E45FE4F8EB397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
Manifest number: 1248
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: hyVdDVgSRWd7GTj/k+lKKsww1p8yPG+TX5BfgTXSQ1k=)
2: VdtZIDR20QBsvLwRhmbNZAq9N1s.roa (hash: ne8PPRk8FY3v9PoVn0H4s7uRgTuomQzFJy3jouG0CbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:08:43:55:a6:62:fe:6b:3e:45:fe:4f:8e:b3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=abf5127719840fff9f17d22b78da9b024ee41368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:fe:51:08:eb:5a:ac:3c:c0:a8:ed:55:70:
a1:e2:9e:d6:e8:bc:b6:4b:0d:b6:60:31:bc:39:60:
5a:ba:cf:83:79:75:8c:76:d4:44:4f:79:f1:68:c1:
4e:da:80:7f:3f:00:f3:f8:49:ee:10:47:97:0c:d9:
ed:a5:3f:4d:cb:ae:7b:8b:51:45:5b:15:6d:5e:34:
d1:ae:13:86:03:de:e6:c5:a0:66:f6:ea:a0:e7:40:
23:0b:1a:ee:94:84:f6:e7:9d:4e:27:4f:c0:2c:60:
e1:06:bb:ba:3c:67:4b:8c:25:a9:03:f5:6a:63:52:
c9:b5:af:c4:6a:d3:48:13:f4:c0:c7:a8:55:0e:c6:
08:71:58:ff:53:cd:7e:d0:70:c9:87:e2:d0:53:7d:
95:36:43:4a:62:63:1e:73:91:a1:bb:5c:d1:e3:ff:
6f:97:9b:4d:75:47:8e:50:1d:57:7c:57:8e:9a:0a:
7b:84:88:72:65:70:e3:c8:e6:0a:00:57:f6:52:23:
6e:41:d9:40:78:19:1f:d1:05:bb:e2:20:18:3f:58:
42:e0:4e:45:b8:be:a9:07:57:6a:c6:0c:de:da:30:
74:22:0c:ab:e2:2e:b1:54:8c:b4:ca:bd:da:4b:69:
78:bd:6d:58:da:51:77:ea:e2:70:5c:af:4d:8a:73:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:12:77:19:84:0F:FF:9F:17:D2:2B:78:DA:9B:02:4E:E4:13:68
X509v3 Authority Key Identifier:
keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6b:1c:72:5d:c7:f2:29:5d:65:3a:ad:15:29:d8:5d:b0:0b:
6f:ea:ae:56:eb:19:e0:23:eb:b4:56:e8:30:ae:aa:1d:95:ad:
65:2d:a3:cc:35:97:70:56:4c:36:d2:93:6f:8c:f4:27:83:b4:
b6:31:1e:f9:54:48:10:27:84:25:8e:e3:db:cf:a3:ea:e2:6d:
37:31:b9:90:71:2c:1f:27:cd:6a:ad:a0:30:44:a1:9f:71:0a:
7d:81:ba:15:c2:d8:7e:b8:2d:59:1f:3e:05:f2:ea:4e:08:39:
49:3c:88:19:b7:21:3b:e8:7d:cd:25:49:8d:08:cc:6a:0a:ac:
3d:5d:98:57:21:2d:1b:99:16:ac:47:58:d7:94:ac:50:60:65:
c9:a4:43:55:93:00:52:be:ff:01:f5:09:85:43:14:1c:e2:0a:
6d:c9:2c:1b:ee:af:f6:6b:82:b9:f7:94:5f:8f:34:a5:4a:2c:
1f:64:4c:27:7a:2d:69:6b:d8:44:4c:83:ed:4e:80:2e:63:44:
a8:c5:78:fd:00:57:29:6a:8d:10:9b:3c:22:0d:e6:82:2e:79:
c4:9f:4c:f5:dd:b8:68:81:92:21:5b:7d:17:87:00:22:fe:90:
a4:9b:14:6b:d3:f5:5c:26:e2:d3:52:73:bf:62:3a:cf:c4:ef:
22:7e:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:56 2025 by rpki-client