Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json)
Hash identifier: RsVHFss9CM4KrD+I3Rfs72EUEIYzumsunS330ZWmQRg=
Subject key identifier: 11:30:E5:1A:81:96:9C:86:06:FF:A5:EA:C8:C8:54:B5:FD:3A:69:A4
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial: 0197B6A111F19EB6726AA33D582314739640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
Manifest number: 0BA3
Signing time: Sat 28 Jun 2025 13:01:38 +0000
Manifest this update: Sat 28 Jun 2025 13:01:38 +0000
Manifest next update: Sun 29 Jun 2025 13:01:38 +0000
Files and hashes: 1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: 8Y8G31zZ/phChBorZSMHIsOSdQZWVk1wATl03eOF0y4=)
2: 6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa (hash: wbgE92t6bLMyfvwqmBJusUZf/7LqDlcOflMgewrcKFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:11:f1:9e:b6:72:6a:a3:3d:58:23:14:73:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Validity
Not Before: Jun 28 13:01:38 2025 GMT
Not After : Jun 29 13:01:38 2025 GMT
Subject: CN=1130e51a81969c8606ffa5eac8c854b5fd3a69a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:e0:2c:56:16:06:0f:3b:42:34:fe:7b:57:
d8:c2:e9:06:56:95:e3:8d:a9:55:14:67:9a:6c:61:
b8:83:fe:09:b1:85:e7:e2:1b:ac:ed:d6:4b:ce:88:
96:1d:af:ef:5a:1c:b8:23:c4:76:2c:db:65:d7:4f:
de:ef:07:0b:01:8c:b6:d9:7e:89:83:8d:23:29:b8:
9d:c7:98:5c:69:aa:df:67:1e:c5:ce:46:db:b6:d6:
8d:42:98:eb:e9:7b:51:b1:58:f7:02:14:eb:64:75:
25:45:9b:b9:18:da:31:2d:e5:b7:00:52:59:26:73:
3a:b3:3f:a5:90:99:57:95:d6:2c:63:40:5a:d5:df:
02:2e:a4:fc:96:18:1b:47:5b:9b:29:82:fc:3c:c6:
16:be:24:d8:13:a0:fc:2f:9d:32:98:1a:e5:13:dc:
2e:71:a2:da:0d:f6:4e:40:75:22:8e:d6:8e:9a:d2:
5e:90:b9:66:5d:4a:91:c1:e1:a6:c9:19:de:0e:db:
96:41:e2:4b:b5:73:23:19:f6:51:5a:c1:6a:57:f4:
08:cd:aa:d8:0f:3a:89:6f:db:99:ee:ab:82:a8:3a:
b8:1f:a9:d1:be:3b:68:4b:79:7e:8f:fc:7a:13:cf:
39:fa:71:46:37:b1:33:9c:eb:a4:08:25:e0:8a:58:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:30:E5:1A:81:96:9C:86:06:FF:A5:EA:C8:C8:54:B5:FD:3A:69:A4
X509v3 Authority Key Identifier:
keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3e:af:fb:2a:a5:41:2a:bc:d1:52:3a:93:fd:52:4f:14:7f:
ca:11:e6:65:6d:2c:41:cf:b1:56:80:e3:50:d6:e9:12:46:76:
1d:ef:c3:ad:e3:ba:1a:d4:0a:e8:65:25:55:16:e0:41:f5:60:
81:57:72:5f:05:13:0c:c6:d1:e4:f4:29:c7:90:6f:17:ff:5a:
c7:b3:24:d5:78:c9:c7:e4:36:5f:08:cc:2b:10:80:b3:4c:27:
67:21:af:2d:72:05:6f:43:34:90:ff:e5:91:11:ef:86:3b:fe:
02:67:89:d8:39:d0:c0:ba:ff:4c:2f:bf:ec:ec:25:e1:f3:4b:
02:84:84:72:ba:59:b7:0f:ba:93:5c:00:86:bd:5c:fd:37:a9:
8a:ee:47:49:c2:43:97:ee:f4:d4:5e:12:4e:e0:15:0f:3d:29:
a2:9f:5e:9a:75:c6:69:6f:85:56:cc:1c:64:42:d2:d5:d1:6b:
3d:4a:8d:6d:a4:37:20:be:ca:40:fa:46:8e:09:a4:aa:bf:d8:
39:8a:29:75:c7:9f:09:3b:de:2a:8e:aa:8b:26:7c:20:c3:8f:
64:74:b8:cb:ab:f5:6f:37:ed:ec:ea:08:89:ea:0b:5f:3f:1b:
1d:9b:1d:aa:6c:dd:af:5e:0f:48:9a:7d:86:df:a4:92:22:9f:
bf:f9:39:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:36 2025 by rpki-client