Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: IW/NsKTyZA0Vr6DLqbNGcmJjQ33BgNJvOXOpFYB+I54=
Subject key identifier: 91:3A:66:42:53:7E:A8:64:0A:45:AC:32:9C:AF:BA:D9:76:C3:2B:0D
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 0197B7EA927D5B317CA3550343703C5E4F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 1344
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: 5PEsgNl2VU0HbYypTqpoo/vDqC8ZNPLdz5EKV00XSLA=)
2: VzSRXIJg549082TDLwuDhpZSHdM.roa (hash: A7LBmXbBqDdzugUEkji9OFm2eXNsHo+v5p497CjSCCA=)
3: gHDsE-M7Bds6BODdronU54n9Gb0.roa (hash: wZSAuVITgB+tf10qxZ+G6OSnVz70iDg6RypnL81jrkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:92:7d:5b:31:7c:a3:55:03:43:70:3c:5e:4f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=913a6642537ea8640a45ac329cafbad976c32b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:b8:7f:bc:49:9a:36:b4:07:27:cd:33:90:
b1:a1:62:45:61:79:9d:25:26:f9:b5:c8:6e:e0:c3:
19:32:c0:6a:eb:ac:af:6f:10:1a:49:25:86:48:fe:
66:11:aa:29:40:11:89:14:d9:1b:25:a9:17:d1:36:
e4:97:e8:32:73:d5:9c:ca:4b:3b:1b:28:28:bb:33:
b8:7f:62:5f:28:59:d4:95:11:8d:48:ce:84:77:28:
6f:b2:73:e1:38:27:6b:3f:25:76:06:af:e3:34:79:
3f:9a:6c:cf:dc:38:73:00:be:2c:fd:72:aa:d0:11:
de:81:03:f1:4f:bf:ec:e1:5e:37:2a:2e:e1:1d:fe:
ce:05:32:d6:45:8e:57:c1:44:a0:16:82:ba:2d:3f:
7c:fe:ce:f6:9c:7d:4c:9d:be:3b:41:c8:15:72:01:
d3:6b:5f:fd:73:3b:1b:b7:79:9c:a2:4c:cb:6a:92:
e6:69:a5:54:58:70:a5:db:c1:ac:29:46:21:e9:06:
76:4e:e4:49:25:63:3c:f0:42:fb:8c:d9:db:fe:2f:
10:80:43:81:c3:8d:cf:1b:2e:f2:27:26:de:cc:79:
2b:fb:73:e6:93:71:e1:ab:a4:3e:95:4c:a2:17:2a:
29:71:65:49:a9:90:9f:f3:9b:8c:ff:db:3a:d4:42:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3A:66:42:53:7E:A8:64:0A:45:AC:32:9C:AF:BA:D9:76:C3:2B:0D
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:dc:f6:90:1b:26:f0:41:2a:c8:67:cb:3c:c2:fb:33:97:2a:
29:da:6d:b3:0c:b9:25:3a:12:cf:0f:84:14:68:0a:2f:b2:8c:
60:3e:1d:89:0f:2f:98:ae:53:4e:8a:1e:e0:8b:aa:28:68:7d:
b3:a8:7e:8e:3c:76:68:54:bd:2c:29:7c:81:80:d4:67:20:cd:
9f:09:8e:e4:94:11:83:f0:7b:9c:3f:80:a6:aa:8e:ee:15:64:
3d:bc:76:b3:6e:86:92:82:1c:cb:15:35:58:67:01:f5:4f:5f:
0f:28:65:3c:58:24:d6:fb:2d:02:9f:2f:70:09:64:65:12:d5:
f8:5f:95:20:bb:38:26:66:ed:5a:de:3e:6d:90:60:f7:4a:33:
a3:12:13:40:d4:da:a4:f7:c3:74:ba:6c:e9:82:1b:90:4d:c8:
90:30:ae:70:f0:a0:8a:44:5b:ce:36:32:22:a7:09:c2:e6:e4:
dd:be:bd:fb:04:75:79:95:5e:3d:bf:9e:e4:22:03:6f:1a:1c:
93:64:70:8c:90:8b:81:07:49:72:19:84:4b:e2:0b:de:b7:8d:
65:5c:75:2c:e9:64:2f:83:e3:73:2f:3b:77:ae:d8:b0:1f:10:
1d:71:f1:b4:2a:3b:85:55:0c:4b:db:55:a7:77:4a:5d:00:39:
7c:41:b2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:08 2025 by rpki-client