Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: VnPoQAmus/sRWBfpUFGAgjShLT3cn+LluIG7zBynzJY=
Subject key identifier: 16:2E:FB:54:2F:03:8F:77:52:BE:99:73:1D:BE:0C:95:5B:6D:7E:AC
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 0197B77C7541826B46FB707EBFC1AC9159E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 0662
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: fK81r7wqQ+3rf8F0F3NE2p/8PtzC1+SjpSaIUqaVWfU=)
2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=)
3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:75:41:82:6b:46:fb:70:7e:bf:c1:ac:91:59:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=162efb542f038f7752be99731dbe0c955b6d7eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:44:25:e3:30:2f:08:2a:c6:4d:29:94:ba:
eb:7c:63:33:e8:cf:68:ae:9f:3e:aa:a2:37:a6:a3:
0b:fe:90:ba:0d:04:75:1b:7f:de:99:42:49:c6:e4:
19:60:0b:8f:71:2c:f7:31:07:09:f0:aa:84:11:5b:
bc:57:4b:40:ab:ae:93:37:e5:03:dc:2e:09:a4:f0:
eb:ca:b4:66:98:b0:11:d8:af:3b:01:40:00:a3:08:
81:fc:03:0f:71:8e:6d:27:84:95:cd:08:16:c0:0a:
40:60:62:59:88:a2:03:c4:12:45:e3:bc:85:4b:b2:
e5:6d:1d:25:0e:92:e4:64:bb:68:bb:4e:6c:59:94:
ab:6a:ea:b8:06:0c:40:e8:67:d8:54:0e:8a:f4:a7:
22:37:dc:6f:e6:9a:a9:cf:01:b5:55:bb:22:04:21:
e6:87:8c:ed:80:ee:7a:b0:ee:25:d5:ae:91:ed:ca:
25:c4:a4:5d:b0:c0:d6:aa:4f:a8:d5:6e:27:34:f0:
cc:41:d3:32:1a:8e:59:8f:2f:dd:c7:c1:25:b3:61:
a7:55:65:cd:f7:04:33:98:ed:69:55:a6:e9:90:9d:
7e:8f:6c:cd:f3:e9:35:13:c7:0d:94:99:28:66:64:
21:d7:18:04:be:24:0b:96:61:11:28:75:87:bc:43:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2E:FB:54:2F:03:8F:77:52:BE:99:73:1D:BE:0C:95:5B:6D:7E:AC
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ae:6f:e3:b7:69:ec:95:ed:67:c1:b9:68:fa:a2:4a:c7:3d:
1b:e9:1d:c0:ca:df:98:c4:c4:a1:87:22:ae:20:a1:50:e9:2e:
d9:80:ed:cd:ff:a8:86:05:87:e5:57:36:a9:75:2c:94:71:b5:
02:33:17:55:7d:84:71:d5:51:6f:51:ea:00:4d:30:2d:16:e4:
15:0b:2a:8d:c9:b7:11:d3:d1:36:f7:e2:7a:3a:40:cc:91:d0:
94:44:81:af:ae:8d:9d:75:12:ea:46:ff:8d:9d:93:ba:f5:d4:
6f:5f:55:50:41:2d:6e:cc:1a:ae:2b:67:b5:50:db:0a:66:88:
aa:e9:0f:c7:90:ac:b3:ed:06:7b:63:90:03:d7:64:0b:52:20:
c9:89:43:2c:58:87:44:5a:a3:e0:c4:ce:af:f2:10:69:08:fb:
20:80:b5:cf:41:0b:96:4b:61:fa:ae:c8:d3:a8:9b:a6:f8:ce:
de:17:23:5d:8a:bd:af:1e:f6:e2:57:25:be:e8:d8:b4:1d:d2:
36:b0:e0:6b:e3:46:dd:b6:c7:72:e0:04:ab:64:44:1a:64:62:
d4:8c:f0:6a:27:8e:71:2e:b7:f4:ed:cf:77:43:55:f3:30:84:
6d:d8:f4:66:b7:a7:86:30:91:22:28:27:13:8c:90:81:41:41:
44:77:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:05 2025 by rpki-client