Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: 5gILkuro5GFRuvzKg8eyxlOjYUKqMwtILnjiy9mQlyo=
Subject key identifier: 2F:4C:09:23:DE:D7:B4:20:7C:B9:22:D6:74:8E:38:66:2B:02:DC:BD
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 0197B5FC4224BE942F3E305A896B9F5A503A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 1261
Signing time: Sat 28 Jun 2025 10:01:37 +0000
Manifest this update: Sat 28 Jun 2025 10:01:37 +0000
Manifest next update: Sun 29 Jun 2025 10:01:37 +0000
Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=)
2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: TuRZIBkkCvZxdhP7ywGnDpcLuBFFz6HEr01A5F0v6EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:42:24:be:94:2f:3e:30:5a:89:6b:9f:5a:50:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Jun 28 10:01:37 2025 GMT
Not After : Jun 29 10:01:37 2025 GMT
Subject: CN=2f4c0923ded7b4207cb922d6748e38662b02dcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:f7:08:30:5c:65:a2:04:14:99:e5:79:6a:
43:08:4d:9f:04:b7:15:3f:2b:21:29:fb:7f:19:ae:
58:b0:95:09:66:47:be:8f:30:86:a4:a4:0c:46:a1:
29:d4:5c:7f:bc:62:af:cb:0c:10:11:4e:12:0b:4d:
aa:bb:b7:b7:3a:b7:62:e2:92:31:59:33:07:5f:25:
89:7a:d4:ed:1b:2d:6a:fc:50:46:3a:51:33:05:ae:
0a:20:5d:92:4a:0b:3e:ea:b4:42:1f:4c:42:bd:90:
64:96:fe:87:ec:3c:fc:62:f9:ce:ad:19:53:54:4b:
7a:fa:4e:ae:c6:16:53:a7:96:d6:87:ae:e6:40:38:
12:8d:59:e2:93:9e:87:cb:f4:3f:e3:3c:fa:77:2d:
12:62:f0:d2:97:63:02:30:43:de:54:2d:24:6d:fb:
6e:d1:64:a3:dd:72:ce:ff:1b:e4:ec:03:4f:8b:63:
3b:dc:24:66:2e:9c:4d:5c:f8:7d:fb:e5:79:7a:b3:
bb:d4:6d:bb:bb:54:46:e9:6d:f3:13:7f:55:f8:c7:
f4:9e:2a:33:0c:08:08:7c:78:87:f7:a6:e5:42:89:
eb:66:77:74:68:4b:ff:9e:3c:64:52:08:e2:91:d8:
da:77:c4:cd:bb:7e:bc:11:16:a2:1e:f1:a2:4b:24:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4C:09:23:DE:D7:B4:20:7C:B9:22:D6:74:8E:38:66:2B:02:DC:BD
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:70:34:0b:6e:d2:cf:0f:24:05:37:1e:3b:51:9e:d7:d7:18:
9e:23:06:0b:e4:f5:ee:bc:a7:67:a0:0f:6d:b8:75:9a:f5:66:
a4:df:49:da:58:a0:46:82:c5:a2:39:c6:09:74:1d:2a:01:94:
48:dc:77:93:6c:d8:9c:ae:77:fb:9c:81:95:24:3d:c7:5a:3f:
71:6f:2b:ad:8e:eb:29:9f:15:c2:02:75:9d:0e:c7:e9:c6:e5:
51:3b:26:5b:ad:ed:15:25:be:cd:3a:75:ae:37:32:f4:ef:8a:
70:2e:82:91:f6:65:2a:c0:80:b5:e3:ac:ed:d4:f6:78:76:6a:
15:ea:df:21:7c:76:67:a3:cc:e3:6b:92:a2:7b:2d:8d:c1:42:
f6:55:46:be:a1:38:26:3b:6d:49:e7:ea:e3:e3:8e:c2:f5:3f:
b0:72:4f:fa:2b:16:8b:47:21:fa:6a:3d:75:a0:42:49:63:84:
fa:4e:21:81:2f:ed:12:22:88:8a:be:00:df:8f:b3:a4:61:64:
b5:6e:0b:2b:fa:73:d0:88:68:2a:6f:ad:7f:0e:f9:93:bd:9f:
dc:6d:b5:23:97:03:f7:96:d1:2f:e6:fe:9a:a8:6d:21:92:56:
e1:ac:e8:e2:01:eb:1f:63:e5:b3:6a:c2:1f:dc:c1:50:a9:4e:
de:fa:c5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:36 2025 by rpki-client