Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier: LmKVZu4chVV8+CW+5bGz4PgNxZx3gQvQSgbDe+YxTdU=
Subject key identifier: BA:30:99:0A:9D:B8:E6:81:41:9F:44:8C:58:0B:B1:0F:F0:6B:AF:B2
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 0197B70F04ADA142E4A99722F105613B3948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number: 0EB8
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: 0RZPruEGTKhoR1hKNPIRExdYXzg.roa (hash: Ylgp4cjK+Zluy/09si0hlIXpapeYNCr3ajFNEzNms3k=)
2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: XwwXexikZHXaHVwGUWt+ZDsi0nUcZTng6S5HJ0qfJkQ=)
3: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (hash: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=)
4: VwQVaP5PIxPzgzQslxsV-wlq09Y.roa (hash: WHonlIhX4uSQGOOrCo26yMPlgaauP4nxJI/ozD4levU=)
5: XdxSdG11uJFuStkGGDZEuqDpedA.roa (hash: cY0Wtfs/4ERYCWgjaGMffb7og7Xm7Edv+oFQtm2dqsY=)
6: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (hash: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=)
7: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (hash: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:04:ad:a1:42:e4:a9:97:22:f1:05:61:3b:39:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=ba30990a9db8e681419f448c580bb10ff06bafb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:bc:c4:dd:1d:57:90:ae:6e:3c:ae:1d:6c:
fb:3d:23:40:00:6e:2e:a4:6e:cc:f9:a6:0c:3c:e8:
8e:65:27:2b:cc:9a:fb:6b:aa:64:72:9a:ea:9d:33:
09:2b:44:12:ae:08:f8:60:58:dc:4a:07:bc:68:20:
da:63:f5:db:3f:ff:1d:44:71:bf:21:c8:56:ef:ae:
7d:a2:05:6f:1b:13:05:52:e2:f3:1b:56:09:71:67:
81:dc:99:f8:56:d0:19:eb:3e:ef:87:c9:9b:3f:c1:
de:6a:21:a8:bd:54:84:ef:60:f2:73:13:fb:0d:fb:
b0:19:b4:dc:91:51:03:68:7e:7b:39:99:ad:41:ca:
8e:01:aa:3b:81:4b:2c:0c:7f:99:0b:bd:dc:c0:b3:
da:6b:83:8b:b4:24:f0:95:6a:d7:6f:bb:a6:c9:ff:
14:91:a6:70:75:65:e5:c1:b6:06:bb:d7:1a:d1:e5:
37:77:58:8a:45:2f:b1:ca:d6:e3:8d:a8:e4:da:a0:
18:2b:3d:d2:d5:8e:46:27:b7:c6:15:be:c8:f2:a0:
c4:cf:51:5e:dc:2d:59:72:cf:63:e9:0b:5d:5b:d8:
99:9f:31:25:c1:28:42:82:33:f4:7b:9d:bb:7a:af:
61:86:9a:df:a5:73:e1:89:1c:a9:5e:31:a7:36:c8:
c9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:30:99:0A:9D:B8:E6:81:41:9F:44:8C:58:0B:B1:0F:F0:6B:AF:B2
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:44:97:d1:bd:59:57:21:68:c5:35:8c:12:43:36:29:39:34:
fb:bd:88:e4:f5:f4:5e:51:b0:ba:92:6e:98:b1:1f:9c:25:a0:
b5:8e:3b:08:1c:4e:75:f0:74:5f:f9:bd:5e:55:76:c9:38:06:
db:d1:1c:a9:03:39:6b:27:55:76:62:17:80:a8:93:a2:64:ac:
58:f9:3a:b9:60:ad:24:0e:5c:4c:d6:34:19:7d:06:42:36:2f:
b3:f4:8d:80:50:00:dc:8d:78:0e:78:a9:32:e4:83:05:f6:af:
14:28:d5:74:18:be:a8:dc:44:ca:ab:73:ab:4d:ba:7e:ca:87:
7a:15:d1:78:e3:8b:8d:ed:0e:6a:41:ad:15:c3:35:eb:3f:e7:
7a:0a:87:32:51:33:25:3d:c8:51:f7:84:17:f9:6b:cf:70:e5:
5d:19:ff:c4:34:87:15:79:0d:91:74:17:46:6e:9c:48:2a:a4:
63:27:ef:6c:11:c7:74:96:71:37:30:4d:11:74:bd:c3:d8:04:
f4:b0:b7:d9:a5:74:54:2a:ab:ca:52:0b:cf:21:50:b4:34:51:
20:af:b2:fc:9b:37:17:11:bb:53:0c:fe:06:f0:e9:18:1c:a3:
55:48:4f:61:4f:90:22:da:37:af:e5:4c:a4:6d:ca:38:f5:7b:
e1:53:2b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:17 2025 by rpki-client