Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: 9kZPp10uGYkkXC1Dkect5aSzrljxyp8/GnDJPU/0/II=
Subject key identifier: 35:C5:09:07:9E:91:81:01:41:8E:E8:01:52:15:BD:DE:6C:AE:C6:59
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 0197B6A1137F5AAE397EC5DD348A1DE0371C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 10B2
Signing time: Sat 28 Jun 2025 13:01:38 +0000
Manifest this update: Sat 28 Jun 2025 13:01:38 +0000
Manifest next update: Sun 29 Jun 2025 13:01:38 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: 5AtcWTmVbEhqBYZnnE6AnBA4z0v2Sg/vP6TCuvbFCpc=)
2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:13:7f:5a:ae:39:7e:c5:dd:34:8a:1d:e0:37:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: Jun 28 13:01:38 2025 GMT
Not After : Jun 29 13:01:38 2025 GMT
Subject: CN=35c509079e918101418ee8015215bdde6caec659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:f2:8b:92:94:35:db:60:ee:82:6c:24:bd:
26:58:6d:3b:e6:e6:51:ac:d2:ae:63:2a:75:e3:74:
04:98:06:69:1a:c5:48:2b:ab:3a:d0:ca:26:49:b1:
7e:6c:47:72:a0:4a:1a:66:05:05:46:f8:cc:da:aa:
55:d0:36:53:4b:66:58:09:ef:27:42:8a:a9:61:4f:
31:a9:d4:0e:90:78:48:e6:ea:5f:20:36:36:6a:c3:
b7:7b:9c:80:ca:b8:26:7f:d8:13:a2:9d:d1:b5:34:
4c:39:30:f9:a5:84:16:6c:5d:83:af:b5:06:48:21:
f4:50:39:fa:36:88:d8:1a:0a:a8:f5:68:2f:d0:0e:
31:4c:05:45:97:69:70:c0:bd:42:12:4f:4e:9d:56:
6d:d3:c3:9e:0c:b6:bf:1d:c2:42:ed:84:a7:a6:a1:
39:6c:34:5d:75:29:00:42:6a:d3:ec:46:be:6d:ca:
ba:61:e1:e5:3a:1c:14:99:0f:81:1a:c7:b7:ab:e3:
75:8d:11:3d:ac:fe:54:ed:4b:cd:7c:d5:00:77:e7:
8c:2d:65:b9:f9:ae:9c:75:6f:11:07:09:66:16:ff:
d4:bb:fc:dd:91:7a:0f:d2:e4:e1:97:67:1d:b0:43:
bf:e6:89:d8:83:13:6d:43:86:63:ca:af:c9:bd:f5:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C5:09:07:9E:91:81:01:41:8E:E8:01:52:15:BD:DE:6C:AE:C6:59
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4a:e5:1e:92:f9:a8:f2:1f:22:f0:c2:5a:58:d8:7f:8e:12:
16:62:e5:42:6a:ff:de:bc:c3:09:f1:ca:9a:21:2c:c2:8c:a6:
29:9e:46:d6:fe:41:b2:a1:e7:cb:37:1d:37:c9:ab:46:91:68:
57:6d:e5:9e:82:24:08:0c:0e:fd:70:ee:74:6a:47:9c:1b:29:
3a:b3:6e:6b:24:f2:47:76:53:93:42:78:e2:34:16:d1:ed:de:
d1:42:31:be:70:73:b8:47:6d:ec:67:1e:78:e9:fd:17:b6:26:
e5:65:ff:ec:bf:ea:22:6c:a8:ec:22:74:8c:f9:a5:17:fc:cd:
9c:dc:c2:97:dc:59:fe:c2:f0:2a:d7:f0:fb:31:f0:29:4a:9a:
57:52:d1:fc:2c:c0:be:f9:f8:46:d8:76:76:d1:ce:58:f1:cd:
d1:6f:26:56:06:f0:3f:da:f9:df:57:08:3b:df:c3:a1:af:c0:
1f:a5:34:19:3d:3e:62:12:ec:83:dd:38:30:f9:bd:fe:2a:c8:
49:38:ef:05:91:c8:c7:d8:4a:4b:86:fd:05:08:df:d7:45:04:
43:fc:39:ba:ae:7f:6e:a1:f2:79:4a:de:13:cc:e3:d4:05:6d:
3f:93:ba:49:8a:06:d8:c0:a0:c9:4b:af:dd:92:bc:38:dc:d5:
6b:60:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:51 2025 by rpki-client