Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: NxfQt0QetR/GNaB+2Zfs4fWQtiIAC3KVLvMwCSuT1Go=
Subject key identifier: 5F:12:E1:8F:0D:11:FF:F2:DA:02:34:E5:22:F3:D0:BD:4B:A3:29:20
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 0197B70EAE79BBE6F0A9AF1292441AFDBAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 064C
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: pmTSFUw+hHL9tRTu+v5/3I/6HOpdzkXFP5acUYiKBw0=)
2: ybOueXNsSJri02mQKQibbKcroL4.roa (hash: rsUCG/CXGaoh8At3iU9kgYgz39f7x4KapImvavgysk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ae:79:bb:e6:f0:a9:af:12:92:44:1a:fd:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=5f12e18f0d11fff2da0234e522f3d0bd4ba32920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:2b:f9:12:55:0c:6b:9b:8e:c7:15:94:91:
63:cd:ed:82:2d:24:cd:4a:ce:9f:e8:5c:44:24:a8:
eb:86:c7:c1:56:59:59:48:92:d8:d0:3a:15:d9:b8:
03:f0:08:99:c3:a9:38:e8:35:20:65:12:af:21:c5:
0b:47:c3:60:7f:a4:95:8d:6c:40:8b:69:a9:60:7d:
c1:39:c0:f2:78:83:f1:54:57:24:de:32:4d:47:3e:
83:fc:ef:91:35:ad:c5:ec:21:2e:1e:f3:dd:c5:70:
4d:ec:76:16:31:93:56:22:56:a7:76:d8:09:21:09:
a1:ad:ba:c4:79:c2:11:fa:4a:7a:33:8f:7e:2e:42:
22:8d:e0:7d:98:a7:0d:6c:00:63:66:0f:cc:f9:2c:
fb:29:02:d2:23:3f:27:d8:e6:39:fb:1e:e5:b1:36:
23:5d:e6:d2:02:cd:9e:cd:03:42:15:2a:72:bf:7a:
a0:61:3e:88:75:1d:ce:47:e5:ec:5f:cf:5f:98:10:
c2:4e:e5:48:58:a3:85:2d:81:d2:83:8f:6c:7a:d7:
e1:36:cb:2b:e7:5f:e8:0c:f4:d0:c3:71:cc:e2:a1:
48:6f:e5:8b:df:cc:62:8a:ef:f0:5b:fc:b1:02:c7:
0b:99:3b:95:cb:ea:e0:a6:f4:68:30:34:f1:15:6a:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:12:E1:8F:0D:11:FF:F2:DA:02:34:E5:22:F3:D0:BD:4B:A3:29:20
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4e:34:2d:01:5d:a2:cf:30:3c:6b:98:c4:45:ec:1f:4d:38:
e5:a2:ae:de:32:0b:86:50:1d:12:14:8a:39:60:02:1e:c0:41:
94:59:2d:3c:26:22:96:aa:77:0b:54:90:13:e4:d1:95:96:1e:
7b:54:fe:c7:a7:76:35:8b:1d:1a:9f:12:96:e8:38:22:ad:a7:
ff:c6:b6:c9:79:3c:53:b5:4a:c7:fd:b3:15:4c:b3:84:50:2b:
c4:ee:f4:90:3a:05:a3:c9:00:70:ea:ef:50:19:04:c4:9b:08:
b7:cc:8e:9e:9f:67:7d:e0:ef:c5:25:47:10:9a:f7:67:3f:7c:
bd:59:e6:47:29:39:55:db:83:e6:48:7f:91:fd:55:f8:ca:a2:
61:74:7d:9b:8d:f8:45:33:64:ab:ad:5c:49:86:aa:81:b6:9e:
79:b8:93:2d:b3:de:6c:81:a6:fc:af:48:bd:d8:97:33:fd:cf:
55:e2:8f:a1:ad:f8:c7:60:3e:57:be:c5:82:fa:bf:b9:85:62:
e7:8e:05:50:9c:e4:67:0e:94:5c:9d:e5:3b:5f:25:fc:5b:fa:
91:75:d5:44:6a:eb:85:c2:a2:d8:24:b0:95:93:80:81:3b:45:
9b:d4:5f:c9:1f:ec:a1:1d:98:97:9a:9e:26:dc:2c:43:e1:f2:
b3:e5:9f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:37 2025 by rpki-client