Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier: +EQiOuXhF/4tgNV8NASTobfemV4i/rOXLM1OTzhm/gU=
Subject key identifier: 1C:0B:18:2C:EA:E5:2A:8D:A5:4D:45:CF:BD:AF:84:D7:5E:16:7F:E8
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial: 0197B8213E6E3699149834F9CEA19D7C1097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number: 0446
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=)
2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: TaQDvU/5+VGu6OPYTmXxFJXCPWC0C2vO/607PaFOT7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3e:6e:36:99:14:98:34:f9:ce:a1:9d:7c:10:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=1c0b182ceae52a8da54d45cfbdaf84d75e167fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:68:5f:eb:4a:fe:dd:41:a8:de:6b:a9:9b:
fb:55:d1:4b:8e:86:f6:fc:ff:49:4a:16:69:1e:4e:
1f:f4:6b:ba:ae:78:ad:4c:1d:a5:b7:1e:fb:e7:b1:
12:ac:07:f7:53:34:5b:a1:69:48:5b:4f:ee:3a:e5:
5b:c2:a4:bf:b7:e3:b8:e4:58:9b:6e:7d:99:b5:45:
ea:47:83:69:42:27:5c:b9:7d:dd:88:45:90:a8:bb:
6b:94:44:ae:23:2a:59:69:53:a3:9f:1f:c0:24:ad:
02:7f:54:da:8f:55:72:e6:10:bb:8e:ea:40:29:71:
ba:0c:14:08:e5:6b:75:83:9f:e2:b5:44:b0:5a:e0:
7a:77:c1:8f:7e:dc:2c:3f:1c:67:3f:5e:b0:22:1a:
0c:f8:d5:52:98:9c:4f:d6:17:27:4f:ea:27:4c:f2:
2d:e8:77:7a:4e:8a:73:5c:fa:0f:b3:3f:54:ea:4e:
37:99:98:a1:02:18:92:e3:12:86:24:8b:08:7c:27:
63:1a:ce:ef:10:6d:3e:ef:20:66:64:42:87:c2:75:
39:a1:3c:d2:a8:ed:1c:6e:58:34:ab:d7:78:1a:b8:
4c:30:1e:43:51:58:bd:fd:3b:1e:c0:89:72:c8:8e:
24:79:62:fb:d2:ec:a9:69:14:ed:0f:dd:2f:28:b1:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0B:18:2C:EA:E5:2A:8D:A5:4D:45:CF:BD:AF:84:D7:5E:16:7F:E8
X509v3 Authority Key Identifier:
keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:41:d8:f1:a4:11:64:55:5f:09:bd:cc:77:bd:e3:93:69:73:
6e:aa:be:75:1d:09:c8:ac:dc:71:c2:66:2f:f0:ca:9f:f0:3f:
ce:99:1a:ec:8e:a4:89:41:e7:8c:c3:7c:b5:4b:e0:02:d1:f2:
a5:b4:ec:6a:d2:ab:1d:00:9d:87:84:57:cc:c8:72:4c:23:4d:
0f:36:1a:8d:c2:0f:68:46:06:e9:ce:87:e8:60:b0:76:99:48:
07:4e:cd:5a:b9:b9:e1:1d:03:7b:a8:68:33:d8:41:74:69:1c:
a3:2a:69:8a:84:c9:60:ba:52:91:bc:6d:9b:01:d8:d0:27:73:
60:b8:23:c1:68:a4:d2:63:ff:f8:3b:cf:20:c7:a7:ca:59:2b:
98:3b:2c:f8:66:4c:28:83:a6:63:9a:20:88:87:b5:a2:df:0b:
fb:99:c9:6d:7f:14:c9:83:60:59:f5:03:c9:0a:f7:b6:80:0e:
c9:1e:bd:d0:df:e3:b3:b7:06:10:11:0a:d6:c8:d6:06:1e:85:
17:cf:ee:62:19:fc:93:01:12:aa:21:27:4b:d7:f6:90:af:44:
91:e1:49:7d:5d:ae:8e:fe:9e:31:cf:e8:f5:85:52:f4:11:dd:
19:16:cb:b9:42:bf:a2:a7:7f:59:bf:3d:73:3a:60:c4:50:e9:
5a:b8:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:42 2025 by rpki-client