Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json)
Hash identifier: r9fTbZlc2j53nSr77fxEAqpT7q3/wdNQqyhHKn0oC94=
Subject key identifier: E2:BD:0B:53:96:78:69:7A:79:FC:79:3E:8F:E1:B5:9C:D7:D1:4D:76
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial: 0197B7B364F4F20420F1A0829E516953CFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
Manifest number: 0D54
Signing time: Sat 28 Jun 2025 18:01:16 +0000
Manifest this update: Sat 28 Jun 2025 18:01:16 +0000
Manifest next update: Sun 29 Jun 2025 18:01:16 +0000
Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: BocUB5Qg7TPnt9LloK/DieMt8IN84YgZHhNlTaF8Xec=)
2: TeyiHHpQzPXntQ9zcodgsnssabQ.roa (hash: 99RzEV6KxbBUQmEGjwYOg/0KALhFJ98CPqecVaZd8t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:64:f4:f2:04:20:f1:a0:82:9e:51:69:53:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e505d93497f19d2563066b409200969711f28c67
Validity
Not Before: Jun 28 18:01:16 2025 GMT
Not After : Jun 29 18:01:16 2025 GMT
Subject: CN=e2bd0b539678697a79fc793e8fe1b59cd7d14d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:16:e0:0e:6a:4b:31:fc:26:b3:6e:64:90:
fb:11:67:41:c3:68:e4:cb:c8:94:b7:3c:b6:51:e4:
d1:35:9b:9c:ee:28:7d:31:1a:34:d9:55:74:fe:d5:
f0:75:23:9e:d8:2c:ab:3a:10:34:f1:8e:43:44:11:
2e:6d:86:72:f0:8e:4a:0c:82:58:4c:60:de:5f:56:
a8:04:a3:a1:db:8c:f2:27:3b:2f:bf:50:49:41:ae:
c4:83:b8:a3:8e:18:ae:b1:83:b6:b4:70:d2:6b:cc:
d0:ff:ab:e6:30:68:b2:cb:15:b6:e2:a3:8e:ae:87:
5d:3c:8d:a3:9d:a5:70:0b:16:69:a2:90:6d:52:e9:
67:02:48:c4:24:35:1b:2c:e9:32:6b:b4:99:e6:05:
8c:c1:fd:92:b6:02:42:e1:37:35:8c:c9:20:5c:5a:
ea:74:7c:e7:1a:45:49:48:8a:8c:13:1a:20:9b:90:
1d:ee:39:ca:8a:81:32:26:d2:9d:c0:f3:61:69:f0:
f9:d6:9e:44:f0:ec:ec:2f:bf:19:d5:b7:fa:7b:b7:
34:d5:fd:a3:f6:23:8e:c4:4b:7c:96:9f:3d:2c:82:
f4:62:82:da:ac:cb:fd:47:7e:3a:fb:40:1f:c8:b1:
c2:d7:88:36:a8:d5:0c:65:e8:3c:e8:07:47:cb:ee:
13:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BD:0B:53:96:78:69:7A:79:FC:79:3E:8F:E1:B5:9C:D7:D1:4D:76
X509v3 Authority Key Identifier:
keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b1:f9:af:bb:e6:1a:e2:dc:bb:ce:fe:3e:42:1e:53:d0:f7:
9a:fc:c4:02:f1:e8:b8:ad:8d:5f:95:00:1a:53:ce:70:db:60:
c1:5b:72:02:2c:fe:33:72:da:3d:33:f6:05:3b:0c:ca:29:78:
d7:41:c6:50:85:fc:03:1a:1e:1c:3f:d4:13:d9:6f:28:a6:24:
7d:40:61:34:2c:b3:0d:11:f5:22:1d:57:95:91:a4:96:3f:e3:
78:e4:a1:48:23:16:ee:01:07:ff:66:7d:bf:f2:67:f7:5b:4c:
41:f2:6e:71:47:75:11:a8:7d:29:5f:07:36:87:70:b1:c0:cd:
60:b1:b4:c9:48:37:2e:4f:63:ea:26:4d:25:e2:2a:7b:24:4d:
9a:08:98:40:e6:c9:9f:07:85:79:36:0a:a5:de:10:fe:28:18:
6e:e7:58:9a:39:c0:03:99:8e:7e:50:4b:e3:19:fe:b3:51:b9:
99:fd:d7:99:87:34:9a:6f:c5:96:c8:fb:f6:30:d6:d7:6d:58:
20:df:a9:21:1d:f8:80:1e:94:c3:78:df:ac:4d:6e:9a:c4:5b:
30:e9:24:5f:01:f8:89:ae:06:ad:bb:92:44:fd:db:f8:6f:f6:
ac:57:27:da:e9:1a:77:34:a4:b6:30:8f:1d:4f:9b:b1:a5:48:
c7:43:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:12 2025 by rpki-client