Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: HviLlI/q/HZWriJ91EA1ptvmqOHXJ4FyLMGDVnQgxeQ=
Subject key identifier: D2:E5:CA:49:E2:96:BF:19:0E:CA:CE:D5:EA:2E:B3:78:5A:C2:D8:56
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 0197B70EEBED5F6900213F08F80EDF66227D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0C42
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: z5JCwRq2rRqlQwh2tkBk+c46q8sI27krvcQF1AINdpE=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:eb:ed:5f:69:00:21:3f:08:f8:0e:df:66:22:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=d2e5ca49e296bf190ecaced5ea2eb3785ac2d856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:b5:a8:dc:fb:3f:e4:10:d4:a1:17:9f:1e:
c7:d2:27:56:26:fe:dd:ce:43:ab:a6:8b:82:96:4b:
28:38:fb:40:db:55:44:21:ac:43:b8:21:03:f5:7d:
ab:dd:9f:c7:3e:c3:05:42:3c:c3:75:84:2c:7b:fa:
5b:a8:be:da:fd:0c:93:de:9d:98:ec:8d:68:6f:ac:
2a:ac:1e:fd:60:23:30:4c:a3:ba:20:0a:fb:39:21:
3b:da:02:f1:7a:2f:22:13:28:23:61:14:8d:1a:1a:
cb:f6:77:d2:b7:87:c6:c2:42:4e:83:e6:60:3f:35:
e0:47:6d:b4:06:51:d6:c7:b8:18:7b:14:ef:dd:66:
9d:68:82:47:4c:3d:1c:0a:0c:34:a9:03:17:16:b5:
d6:7f:82:25:78:8b:09:15:c6:47:c4:16:d2:e2:4f:
fd:52:b8:18:f1:a8:66:8b:9a:ee:3b:67:49:c6:fb:
d8:60:fa:7f:bd:86:0b:8b:d2:54:19:c9:af:dd:78:
82:8c:2b:e7:f3:d5:93:93:d9:11:33:a6:5f:af:65:
cb:fb:24:54:5e:62:6b:47:70:1c:b3:86:94:6d:f2:
b0:e6:ad:67:ea:44:fe:40:ab:7d:54:b0:3f:31:2e:
60:03:3d:5a:06:4c:0d:6a:3d:2c:cc:46:f8:4b:ef:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E5:CA:49:E2:96:BF:19:0E:CA:CE:D5:EA:2E:B3:78:5A:C2:D8:56
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2b:59:a5:71:b2:c6:3d:84:25:ad:70:d3:a0:fa:5e:e7:cc:
db:89:52:f6:00:f7:93:9c:a9:54:9e:14:27:ee:20:a9:30:85:
e4:d1:50:b5:3f:e3:66:68:37:15:bb:7c:3d:26:05:aa:c8:49:
2e:e5:d2:63:be:91:c8:6c:9a:46:be:2c:08:be:41:b7:d0:cb:
2a:ea:e7:ad:38:c3:30:1b:26:41:62:5b:b8:94:0c:93:0c:d2:
43:04:3d:09:ea:d1:a4:82:a0:95:63:26:23:d3:a1:63:f7:65:
00:ae:e1:0a:6a:17:b4:35:18:c3:be:9f:ab:89:5c:5f:21:3b:
8f:53:79:f6:7e:55:b8:9c:54:3b:32:37:c5:6f:d7:eb:1e:1f:
94:c9:02:8c:22:b8:b7:e2:f8:49:4a:b1:e3:f3:dc:fa:22:86:
08:17:21:19:73:ec:03:fd:36:07:5b:cc:5f:43:de:e9:7c:4b:
4e:e0:4c:d8:20:98:79:33:41:b7:3a:1c:0f:04:37:02:07:f4:
aa:77:fa:39:13:b7:73:77:3c:2d:f5:fc:aa:c6:58:c0:00:af:
3d:e4:b1:d5:1d:08:b2:56:c6:54:d4:53:d1:ac:04:ce:86:04:
0f:e0:3c:81:5e:be:11:b2:48:02:2e:c2:ff:80:9d:13:f6:43:
f0:71:98:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:13 2025 by rpki-client