Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: +YSYhzg4czbF0cUVLk3zLULlL4IYfuKvhi+c3Yhbe3E=
Subject key identifier: 30:FB:09:7C:AF:90:C0:E9:D2:61:69:62:21:A7:DC:2A:E1:41:01:7A
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 0197B77C857C9FBFAFD1011A9DBBB74EE7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 05E4
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: dNduZoFHbwYX6Jz89EcF/dLXtGGzZQmffL0Waaf4LoY=)
2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:85:7c:9f:bf:af:d1:01:1a:9d:bb:b7:4e:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=30fb097caf90c0e9d261696221a7dc2ae141017a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:37:3f:42:64:bf:6a:f0:11:2d:59:36:e3:
bd:49:f5:1a:36:67:55:6f:05:cc:09:7b:ad:bc:09:
69:be:7c:bf:02:df:30:cd:4a:fd:9e:ae:20:be:54:
d5:bd:8b:a6:bf:c2:03:e6:82:c5:81:3a:ed:a1:69:
f1:04:e0:86:16:bf:57:52:bc:76:c0:b4:34:6a:e0:
40:4b:97:d1:85:2c:bb:cf:4b:eb:8e:75:af:5e:b8:
0d:b9:f8:bd:16:70:92:07:a7:d8:9b:fc:1e:b6:bc:
8f:0c:44:5d:07:30:7e:03:fe:db:f6:e1:ca:00:db:
9c:88:f6:b9:ce:bd:23:9a:54:03:73:94:a3:33:c6:
85:4b:dc:d4:ec:6c:57:3d:44:fb:4e:c2:a8:f1:5d:
85:67:7a:52:a3:49:46:20:30:48:29:55:43:64:70:
9f:91:9e:e8:c2:6f:8d:f9:0f:54:eb:09:39:66:a5:
72:4b:da:32:e7:2b:40:48:c8:ce:3b:1c:81:87:ab:
56:55:e9:ae:e9:b7:20:a4:2f:55:bc:83:9e:b0:fe:
4f:a6:d9:56:0a:ed:9c:cf:1a:16:3b:f1:a4:72:63:
ed:bf:13:91:9e:fd:ac:29:7b:cd:1e:8e:b6:90:86:
5d:75:04:76:ce:fe:68:b2:aa:b7:18:b4:72:0d:1c:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FB:09:7C:AF:90:C0:E9:D2:61:69:62:21:A7:DC:2A:E1:41:01:7A
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6d:78:2d:3f:3d:4e:d2:31:0f:a1:53:4d:1d:c5:14:aa:f7:
e9:0c:03:c8:b1:27:6d:ab:e3:51:6b:94:16:c6:d1:7e:f2:5b:
6c:53:0a:da:60:5b:4c:0b:0c:10:3f:ea:c6:f9:41:3d:91:f3:
43:c6:7f:ad:71:2b:ea:de:55:f0:77:fc:a1:98:53:09:57:55:
64:be:a2:35:8c:b0:9c:76:7c:36:3a:e0:41:ae:ad:cd:77:ff:
eb:13:d7:ba:12:85:78:32:5e:95:2b:b9:b6:08:74:b7:55:0d:
e3:e3:da:7a:69:db:72:5d:d5:fc:2a:7a:de:c0:1d:e0:7c:f2:
94:c4:1f:38:c7:10:80:7f:9e:03:a1:9f:ef:fd:7d:6b:12:61:
c7:f4:d3:4c:c0:48:ec:fa:91:59:60:8b:87:48:0d:2a:39:13:
e8:42:e3:51:ed:29:84:59:f7:c4:d1:26:66:42:44:8a:26:8b:
b9:57:77:ff:9d:60:45:b1:b5:b7:12:f1:30:1e:ad:be:6d:dd:
c8:5b:3c:67:cb:b8:35:e2:75:57:a8:bf:cd:93:4f:1b:ea:4b:
f8:ad:95:19:a3:4a:22:6b:a3:8f:2a:2c:9f:dc:2d:a7:39:62:
6f:ac:f3:96:d0:b0:d2:f8:77:7c:a9:41:bc:9c:1f:ec:71:92:
8c:a6:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:47 2025 by rpki-client