Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: KzEgghfyEYP+YqAeJ5+l9kdvMwLqTXe2NTuXO2O3zA0=
Subject key identifier: D4:D0:FA:ED:83:C6:52:3A:57:67:B0:58:67:D0:24:23:66:09:51:76
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 0197B5FC5ABE79C212E101EBF639FFB585CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 02D2
Signing time: Sat 28 Jun 2025 10:01:43 +0000
Manifest this update: Sat 28 Jun 2025 10:01:43 +0000
Manifest next update: Sun 29 Jun 2025 10:01:43 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: Pad6LxF5GUml2Ycu0KShjH0lg1V9c42J5VRVMXRJhv4=)
2: GtnbuughA7lHebTG_DZyY-rxvp0.roa (hash: 0ytXaby9nsfJsM0kCLclgYx+EoqtC/Er8+W1ubhewEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:5a:be:79:c2:12:e1:01:eb:f6:39:ff:b5:85:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Jun 28 10:01:43 2025 GMT
Not After : Jun 29 10:01:43 2025 GMT
Subject: CN=d4d0faed83c6523a5767b05867d0242366095176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:48:ae:65:d8:07:ca:d8:e9:0d:ff:5f:3a:
bb:e2:e5:cc:0f:1f:2c:ec:0f:bd:80:f7:cd:e6:ec:
d4:73:4f:58:aa:5e:6a:46:4e:ad:68:25:f9:38:c3:
b0:e4:8c:56:04:8e:c9:fb:31:b3:b4:28:11:c2:a3:
cf:df:a7:cd:b7:e1:34:48:cd:4e:8d:f0:78:55:cd:
71:09:2a:ca:fb:0c:c3:b0:ee:22:3e:39:f7:30:5d:
94:49:b0:35:b5:5b:a3:85:f6:3e:2d:38:b9:40:6f:
2a:0d:de:81:0a:d1:eb:15:61:e1:6d:42:29:21:48:
db:5b:69:5d:99:f3:d4:02:66:ab:cd:02:8e:26:f4:
d8:f1:0c:33:6c:f6:a2:bc:8b:a3:3c:35:fb:f9:53:
7a:de:5c:b3:f9:44:e6:0c:4c:02:f0:6c:58:3f:20:
9e:55:3e:38:60:a3:c1:16:0f:06:1f:8e:8f:b3:42:
77:15:0d:6f:1b:d7:66:71:d9:02:58:15:cb:09:7d:
5b:53:99:86:bb:ce:12:04:97:cd:18:81:0b:9f:ce:
68:58:d1:18:63:42:74:93:f4:f6:b3:49:25:b1:ef:
49:1e:c6:3c:da:94:9c:25:81:21:66:5d:ca:9a:4a:
c8:40:b8:29:12:96:7b:d8:52:7d:99:fa:d5:5a:93:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D0:FA:ED:83:C6:52:3A:57:67:B0:58:67:D0:24:23:66:09:51:76
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:77:aa:24:8a:06:d0:00:ec:05:a9:26:97:7a:6f:9a:a6:44:
fb:b5:81:1f:84:72:9d:92:a7:81:f1:c9:ec:49:2a:e9:27:ac:
14:32:a2:40:f5:9d:dc:e6:a2:62:0a:e6:a6:d1:9f:b8:4f:b8:
b4:a2:1b:56:51:39:bc:ae:b3:64:df:12:88:69:24:13:bd:0a:
2a:33:fe:ff:16:89:41:f4:9f:27:5a:20:10:45:8f:ca:9d:eb:
26:93:34:bb:60:09:26:14:ed:ae:11:ec:df:6b:59:3d:f7:3f:
4f:08:73:2b:69:50:3b:6f:19:6c:69:2f:3e:b7:fa:28:db:08:
1b:18:13:fe:e3:06:77:68:e2:19:8f:b5:6f:31:9d:ff:93:ed:
00:06:8f:48:12:11:af:cc:9f:5d:f4:cd:e7:cb:ef:83:74:df:
ac:55:e0:77:80:08:e3:75:b3:9d:96:fa:8b:32:63:60:e7:62:
b4:1b:18:97:fb:66:99:d4:10:42:fb:f5:37:7f:57:40:f2:b9:
70:51:04:05:33:d0:4d:ed:ba:df:dd:83:db:87:00:d8:39:e1:
a2:78:fe:04:b5:b5:c1:e8:68:26:c1:6f:86:71:1d:a1:91:64:
f8:4b:a1:e5:de:ff:76:1f:f2:35:04:d5:a5:fc:45:f3:41:fb:
c2:18:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:43 2025 by rpki-client