Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: 4ubX3cTYAmqppmOys8AlDD4tWtklJxSzTUMY9RF//3k=
Subject key identifier: 59:AC:89:B9:38:38:0A:2B:11:04:DA:4F:84:50:54:7F:98:2D:86:9A
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 0197B6A054B0C8EC630A6C732D6BDE4EEDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:50 +0000
Manifest this update: Sat 28 Jun 2025 13:00:50 +0000
Manifest next update: Sun 29 Jun 2025 13:00:50 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: 8dYe0hdqTPdDvKQKK8TuTkGIWU3+/u2Uhc+YDAumwOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:54:b0:c8:ec:63:0a:6c:73:2d:6b:de:4e:ed:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jun 28 13:00:50 2025 GMT
Not After : Jun 29 13:00:50 2025 GMT
Subject: CN=59ac89b938380a2b1104da4f8450547f982d869a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:d9:5d:8b:75:fc:57:97:4b:73:99:1e:51:
c5:e7:db:9f:17:9a:52:e8:3a:b1:bd:9d:21:66:a5:
c0:e1:2c:a2:63:5b:2d:ee:8c:37:a7:cb:93:04:6f:
70:28:b0:76:aa:8b:55:5e:15:27:cb:81:d7:0b:e1:
14:70:2f:78:7e:ba:1d:c5:9a:c0:f8:43:82:90:c3:
5b:f0:66:0d:1c:31:e7:70:ce:ef:01:af:09:b4:45:
83:47:78:62:dc:79:b7:d9:00:ef:97:e8:f4:d1:dc:
84:b6:06:82:04:01:3f:04:fd:bb:16:f0:58:62:77:
1a:3c:5a:80:94:d1:cf:8e:73:09:70:67:2f:da:09:
6d:5c:60:ae:4e:ec:7e:68:7a:9d:b9:b0:a1:c7:27:
f5:9e:95:c6:3b:a6:97:07:42:96:97:20:2c:58:18:
99:6c:1c:c7:20:f4:e1:01:fd:16:99:4f:2e:ef:6c:
82:94:1e:a9:ac:d6:4c:f2:ef:8a:c9:ef:14:79:4c:
54:2e:7d:30:55:29:e9:02:01:db:ba:9f:9c:a8:fd:
1f:c4:4c:cf:60:03:54:40:3f:5a:6a:d8:72:ea:41:
91:38:93:f5:fa:bc:0b:5b:a7:0b:0c:21:65:43:f3:
4f:5c:58:b8:81:67:c5:d2:65:6f:cc:71:26:ce:be:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AC:89:B9:38:38:0A:2B:11:04:DA:4F:84:50:54:7F:98:2D:86:9A
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4c:a1:87:6b:a0:01:c4:13:41:0e:7a:f6:eb:2c:35:f1:53:
2a:5f:44:63:34:ab:f1:af:e3:82:f0:0b:20:f7:d5:c0:f3:07:
21:52:ce:11:a9:a9:2f:d0:4f:b9:a3:62:de:5a:5d:2b:1c:56:
3e:9a:ec:13:a4:e8:54:e7:8d:6e:85:7f:b6:70:08:0d:f0:d9:
b9:c3:a9:ac:19:b0:78:91:24:6d:0b:f0:17:83:d9:10:90:7c:
2c:21:37:dc:8e:9b:b3:21:13:02:3b:ba:f5:28:04:ec:7b:e1:
3a:cc:60:b0:31:bf:5d:12:a9:74:f9:81:23:e0:fb:ef:22:e4:
f4:a6:c5:88:a2:ac:5c:fa:aa:9f:23:9f:9a:61:d3:3c:73:e8:
b5:1b:60:c0:ad:14:51:a8:4f:7d:28:6c:59:fd:c9:44:23:39:
5d:32:c4:1b:15:ac:cf:14:3a:ff:b0:97:9f:1a:c5:3e:23:c4:
e1:e6:02:bf:5c:6b:7a:ad:78:ab:a5:0c:e9:31:49:0c:80:c3:
36:6c:aa:a8:f0:42:1c:9d:8b:e6:dd:b7:10:96:62:9c:3a:54:
23:d5:ec:ec:00:a5:b0:2b:29:1a:e5:69:f7:55:f7:7b:31:4e:
29:99:2b:5a:34:1e:d4:a7:b3:7c:f3:49:f8:d1:b9:bc:e9:1a:
35:7b:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:28 2025 by rpki-client