Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier: BvyMObuX5+g/yTlawjSAyKL2T0bT1BfzMMSR06CHWyw=
Subject key identifier: 99:9A:DB:64:0A:D3:44:E8:66:BD:96:FF:0D:80:53:24:28:66:04:33
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial: 0197B6A0B32CD4297D334BB44A947876C934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number: 10F5
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=)
2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: kpIH7ysKJlWKgbIYygaC0PNQ53DjDqV8MW2JHv9OsAk=)
3: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b3:2c:d4:29:7d:33:4b:b4:4a:94:78:76:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=999adb640ad344e866bd96ff0d80532428660433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:d2:0e:f9:90:a4:c8:6d:ae:83:be:26:8e:
a5:dd:72:bd:9f:9f:38:f1:e8:9b:de:78:47:8d:eb:
74:b3:6f:12:fc:72:8b:78:36:2d:90:79:5b:30:52:
6b:80:5c:a3:b4:79:4c:c5:e9:eb:d8:7c:db:76:d4:
80:4a:3b:1a:cd:5f:ed:a6:79:d8:45:53:95:0b:88:
4d:27:27:69:97:10:f5:d4:42:6d:7d:f3:8b:4a:ac:
a4:54:20:9d:9d:b1:09:c3:8e:8f:ab:4b:ff:a1:51:
de:99:55:0f:80:c7:5e:9c:e6:ce:c5:6f:e9:34:14:
c0:bd:50:52:52:37:0e:0e:8f:9b:a7:17:cb:f0:fa:
46:4c:22:43:49:86:46:8f:b1:7f:50:fa:53:13:4a:
1a:0f:5b:82:ee:f0:da:85:6d:44:8b:85:bf:d4:4b:
ac:d2:88:94:45:39:a4:dd:7e:45:ef:cf:a3:93:43:
a1:6e:26:0b:74:4a:3a:a4:56:7e:ec:86:19:9c:c5:
e5:35:c3:09:cd:27:c9:53:e1:e2:e7:54:07:17:78:
5d:7c:15:99:36:d0:6d:e3:5f:40:90:21:a8:d1:4c:
bb:4d:75:eb:24:46:38:de:86:22:e3:f6:29:07:19:
44:54:a2:0f:8a:2f:20:16:6c:0c:60:ed:65:cf:f1:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9A:DB:64:0A:D3:44:E8:66:BD:96:FF:0D:80:53:24:28:66:04:33
X509v3 Authority Key Identifier:
keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:42:f8:c6:6a:62:17:41:8d:a6:01:1a:4c:89:f0:15:0b:f4:
b7:c8:38:6d:1b:c3:3e:37:98:b9:93:1d:9d:3e:84:ca:9e:40:
97:49:36:09:29:06:51:3c:c8:ab:0f:c0:74:68:3f:12:91:93:
70:20:69:4c:34:ee:e7:44:53:86:a7:2b:1e:b7:c9:2e:f3:77:
c0:33:79:ff:53:86:bb:26:49:32:c4:54:5c:52:22:bb:6e:23:
3a:ce:12:ee:fe:eb:32:c8:80:cc:0e:72:c3:2a:47:26:09:75:
22:ec:11:f0:79:52:9c:55:74:06:2e:63:cb:dd:5f:95:84:6c:
bb:22:76:8b:e7:3e:54:14:a7:18:10:ad:a1:78:91:c1:80:38:
79:5d:87:81:83:aa:27:5f:af:39:50:ae:2c:d9:0e:59:60:25:
80:50:ec:a3:a3:b1:39:fa:bd:e8:02:70:97:5f:b2:ee:45:86:
25:6d:c5:c7:55:cd:10:d7:4e:b3:bb:b1:8d:dd:24:1b:4d:1d:
72:43:3a:5a:0b:45:de:5a:12:7c:41:ab:42:6b:b2:2e:d8:c9:
f7:88:f7:9b:22:45:af:d6:7b:c7:d9:03:da:05:e9:c4:3c:ba:
ca:83:c2:a3:df:ac:f1:f2:ad:dd:1b:b1:8a:83:88:f1:96:a8:
f8:1c:08:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:20 2025 by rpki-client