Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: YKmvi7yQk4kwGKJ+icxpGdpVoqDwjs7yeJuQpj12jYU=
Subject key identifier: F8:B6:BD:37:27:78:D1:13:7E:B5:00:0F:7C:3F:6D:3B:D7:03:EA:A2
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 0197B70F32F96A404DE72E25AC851C0E944F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 1251
Signing time: Sat 28 Jun 2025 15:01:55 +0000
Manifest this update: Sat 28 Jun 2025 15:01:55 +0000
Manifest next update: Sun 29 Jun 2025 15:01:55 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: LS2BehpOT6p7GE0yq4JQHXVpg3Ba8r7Awy6g7rn8ma4=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: yV2QuoCYFVjM2-OTmFDea8Z9hyw.roa (hash: Fm6HaS57Sk5HrIHo3AJdE4/OrtFAnjdqKcrhGRoXq3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:32:f9:6a:40:4d:e7:2e:25:ac:85:1c:0e:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Jun 28 15:01:55 2025 GMT
Not After : Jun 29 15:01:55 2025 GMT
Subject: CN=f8b6bd372778d1137eb5000f7c3f6d3bd703eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cf:ec:7e:3c:0a:63:d6:16:d2:9f:d5:a0:a5:
17:a2:76:1c:c8:6c:87:30:11:e0:fe:8d:9f:c2:69:
b5:3c:fd:78:de:23:67:bb:a1:e9:45:a0:1d:9d:f7:
80:24:26:18:b2:5b:41:75:f2:f2:a1:00:17:df:c9:
01:a1:0c:64:5a:02:98:be:b0:64:54:9b:85:27:18:
fe:5d:1d:cb:5c:49:bb:86:d9:1d:3a:cb:94:59:b1:
aa:d2:3e:52:38:c0:56:fb:0e:fe:4c:b4:3f:e6:39:
bd:33:b6:c5:e1:7b:b0:ed:a6:1f:0d:86:d2:87:07:
c8:f4:4d:94:18:5a:23:1a:00:3d:fe:d9:19:21:06:
7f:23:7e:80:44:64:6e:2c:64:31:3c:db:09:0a:ab:
ea:89:9e:aa:50:5c:b1:95:c1:74:35:b1:f4:fa:40:
47:7c:5a:b1:ce:b1:7e:21:51:00:60:18:5e:86:10:
4f:69:b5:f9:be:cc:dd:25:18:a8:72:79:d1:fd:96:
47:e6:0e:b1:d4:5f:13:bd:ac:2f:ae:97:a5:6a:b7:
29:61:ca:2a:cb:cc:0b:4b:50:87:c5:7a:49:9e:0f:
d2:0e:9c:37:d2:b2:73:8e:86:14:87:60:79:bc:c5:
dd:33:0e:45:ab:60:9b:92:b6:6c:1f:6f:65:da:29:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B6:BD:37:27:78:D1:13:7E:B5:00:0F:7C:3F:6D:3B:D7:03:EA:A2
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:00:46:49:96:6c:e7:b2:8a:f9:9f:f3:66:93:f6:93:b4:89:
f4:b4:ce:b8:0b:d6:7e:5d:9d:de:4f:8e:40:d5:7c:e6:6c:95:
31:68:14:d7:f8:e4:54:de:e9:15:43:5e:43:ba:b3:f5:f0:76:
6f:58:cf:62:b5:b9:b3:6b:e7:1e:c3:97:09:7b:97:f8:7f:ad:
7a:74:89:3a:b1:3e:c5:a3:c7:07:c6:ac:71:e6:da:ed:8c:4f:
b8:fd:47:6e:2c:c2:2c:5e:c0:79:0e:3a:0a:45:21:f1:14:64:
98:8a:b7:f5:d9:a0:e2:50:92:82:c6:94:18:84:b1:4e:fc:a3:
5c:95:24:c3:f4:61:05:92:4c:e4:bd:7b:c4:03:8c:43:3d:ee:
42:ae:a2:e0:f6:b5:69:77:9b:05:b1:5b:d9:b1:49:df:5f:1a:
48:42:e4:ba:f8:fd:4f:47:ff:35:6e:0d:5b:96:71:06:b3:9f:
69:9e:99:f0:7b:12:51:f1:e6:25:58:41:c2:d9:c0:0e:03:15:
03:b1:f4:73:7d:4c:25:5d:e6:db:ce:40:b0:09:ed:79:a0:92:
4b:a2:b3:1b:34:e5:28:e5:a3:30:15:59:d6:4c:69:e4:d0:d8:
6c:db:88:e6:86:2b:aa:ed:d1:25:6e:94:06:28:bc:36:1d:e2:
94:a1:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:42 2025 by rpki-client