Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: 2WaF2hmXFXAPDs8Iea9BF4yCvW0Wd5lLT0QlXQpyoMM=
Subject key identifier: 3B:DB:B0:4F:C9:AF:E3:1C:4D:F4:54:65:A8:77:85:13:17:DA:E4:8F
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 0197BAEAF65B4B74D2BA6B332C774FD635BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 06EE
Signing time: Sun 29 Jun 2025 09:00:50 +0000
Manifest this update: Sun 29 Jun 2025 09:00:50 +0000
Manifest next update: Mon 30 Jun 2025 09:00:50 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: miGe7W2s/62XqKI57bqZC6tgox33H3qNjSNv/WxWaU4=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:ea:f6:5b:4b:74:d2:ba:6b:33:2c:77:4f:d6:35:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Jun 29 09:00:50 2025 GMT
Not After : Jun 30 09:00:50 2025 GMT
Subject: CN=3bdbb04fc9afe31c4df45465a877851317dae48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:23:f9:ca:0b:09:6c:d7:3c:c1:05:35:3d:
f7:e9:a7:99:df:d1:91:82:22:b0:06:57:f4:5f:04:
52:d0:b6:8a:94:d5:42:8a:89:5d:56:65:b3:cf:42:
ca:f8:53:74:f2:d5:dd:32:99:37:a2:be:a5:fd:07:
cf:f6:e2:76:62:32:e2:67:57:4d:d8:9b:c3:dc:74:
db:1b:66:57:2f:36:59:3e:f2:88:18:66:0d:04:7a:
f1:c3:fc:26:8a:ff:b3:7a:ae:d6:7a:e4:ef:35:f4:
ed:d4:49:ae:f3:c1:fd:74:65:32:04:0c:0c:47:b0:
0a:ea:7f:25:8c:f1:db:59:9e:55:b4:f6:53:04:a6:
8a:c6:56:2a:6d:97:44:ad:88:48:ac:97:5d:aa:6d:
64:a3:32:38:e6:a2:82:a1:9c:eb:13:1e:72:22:f8:
ff:71:92:19:d7:0a:3d:74:76:47:2c:33:68:16:15:
61:78:53:48:b3:a4:f3:95:95:ec:6c:85:b4:1f:63:
31:d1:11:24:ae:58:7a:bf:22:d1:96:11:5f:96:54:
0d:25:a7:00:3a:b6:45:e3:0d:9e:3a:9d:06:3b:eb:
8f:a0:09:c4:2a:e8:cf:f0:f3:8e:c0:3a:a3:f2:46:
66:bc:a1:4d:42:79:6e:5d:3d:69:86:63:e3:e2:7f:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DB:B0:4F:C9:AF:E3:1C:4D:F4:54:65:A8:77:85:13:17:DA:E4:8F
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ad:16:29:1b:9f:6d:b5:d6:92:20:e9:7e:ce:bb:f4:dc:2a:
86:6d:34:af:c0:5c:23:c1:99:ba:1b:86:8c:5f:5a:c3:32:fe:
dd:f2:e9:e5:51:90:99:d5:99:db:73:0b:09:25:32:14:60:58:
a5:f4:ce:02:d9:cd:57:bf:52:84:a8:06:d8:e6:c0:1a:2d:94:
1c:18:f0:5b:4e:77:9f:62:7f:56:d3:7d:fe:e5:31:28:43:4a:
cf:d5:19:20:23:57:05:19:91:80:ef:7f:2d:93:2a:fc:c0:3a:
a9:16:44:ed:23:39:61:09:d3:8f:13:4c:00:e2:90:62:8e:82:
6d:57:b2:31:71:c3:61:cf:6f:d7:ff:1d:fe:f7:25:a8:6b:e8:
c5:ed:bc:31:b4:ed:c9:1e:e8:6a:db:85:7a:71:86:7c:4f:a8:
c6:cf:b6:54:0c:27:3d:27:1e:95:35:8c:b8:82:43:6e:ac:dd:
7a:a6:a7:47:b6:2c:f4:e1:89:9e:c4:d7:da:d0:07:48:0a:d1:
ad:5b:23:01:38:18:9a:dc:c7:db:43:58:cb:97:cc:de:00:4b:
d1:e2:83:ff:e7:1e:ed:e0:cb:ce:d9:d3:fc:d0:24:83:7a:95:
99:a3:07:54:d6:19:03:4d:3d:e6:b7:69:da:87:a8:b3:4c:53:
74:ad:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:38:32 2025 by rpki-client