Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: 5BYI0sR0lggw9y+bzFfxIqBPF9+czgqpYbVVVlTZFog=
Subject key identifier: 5A:02:5F:AF:96:5F:38:E8:78:56:B6:33:68:18:1F:13:3A:4D:42:85
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 0197B88FA69C3533956676E08076F03A03A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 01C9
Signing time: Sat 28 Jun 2025 22:01:51 +0000
Manifest this update: Sat 28 Jun 2025 22:01:51 +0000
Manifest next update: Sun 29 Jun 2025 22:01:51 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: nAJaWwblLXw47IDXMA/qzT/LXad33KrygrAt73b3RPo=)
2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:a6:9c:35:33:95:66:76:e0:80:76:f0:3a:03:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Jun 28 22:01:51 2025 GMT
Not After : Jun 29 22:01:51 2025 GMT
Subject: CN=5a025faf965f38e87856b63368181f133a4d4285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:d3:6f:de:50:58:f1:08:9e:22:8c:2f:3b:
f4:71:19:26:c4:0e:82:d8:f2:48:cc:d4:99:9f:c2:
97:e8:6d:97:ae:6e:59:e9:6f:71:89:4d:53:9a:b4:
28:bd:1b:bb:f1:5d:08:35:0b:35:eb:b4:23:39:3c:
73:05:97:c8:e0:43:1d:12:f1:2d:4b:2b:1f:9d:53:
06:34:9e:ec:4e:f2:66:1f:87:99:c6:10:1e:e4:2e:
60:61:49:9c:93:e2:7c:e6:7e:12:33:16:ee:48:97:
80:0f:b5:d1:6a:fb:9d:bd:db:de:5d:77:7d:c6:15:
7c:bd:04:c0:e4:4e:bc:c5:c2:95:d3:c4:77:6e:11:
a3:24:29:a4:b5:1e:70:7b:89:77:75:0c:67:ce:86:
23:6e:04:60:f4:8a:4b:f0:5a:77:1e:41:6e:12:51:
59:12:e0:19:bb:8b:3b:89:10:ff:d8:75:93:80:27:
09:95:97:d1:2f:87:d6:c1:66:1a:a0:96:ab:27:00:
13:d3:7c:6a:01:ea:ec:2f:f8:44:36:f1:2e:dd:b9:
51:47:51:8d:05:5e:ac:68:74:36:38:0f:d1:08:d8:
c6:a0:6c:91:d8:de:63:02:b1:b2:be:9f:26:5c:81:
b1:29:56:28:26:4f:87:b8:cd:fd:23:df:f6:ab:56:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:5F:AF:96:5F:38:E8:78:56:B6:33:68:18:1F:13:3A:4D:42:85
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c4:50:92:ba:5c:1f:56:0b:a4:8f:1d:a2:af:bf:36:a7:e3:
b3:f2:72:94:aa:9d:8c:41:a3:dc:65:d8:65:d3:0f:26:15:8d:
b2:a0:03:ce:f9:2e:3c:6e:ab:c5:81:a7:78:d6:cd:2a:8f:04:
91:6a:71:a0:f9:97:d0:99:54:89:1a:01:f1:ad:cd:1e:bf:72:
85:f0:2f:74:24:81:a9:db:4b:c2:59:f7:c9:e0:8d:ba:65:5d:
a4:55:1d:f7:5c:5d:ea:33:c2:71:de:f6:a3:8e:bd:a2:0c:93:
02:f6:23:1d:fe:e8:6f:5f:73:16:45:a6:41:eb:fa:5b:5b:bf:
4e:e3:f0:b6:99:4c:dd:b5:2a:4d:d9:70:0f:3d:dc:0e:94:f8:
63:e0:a2:db:6b:83:41:c4:e6:b6:5b:b9:35:26:e9:6e:92:e8:
a1:68:6c:64:e2:c3:83:89:f9:a5:6b:51:8f:8b:d8:5d:80:25:
b1:ad:34:fb:1e:8e:4a:ff:93:59:9e:1a:61:31:7d:6a:09:6e:
7b:3f:71:ff:73:e0:ab:4a:10:87:92:03:1d:b8:a1:06:ed:15:
0a:23:89:73:37:4f:f6:8d:4d:c0:f8:93:1d:fc:31:00:ef:e0:
49:cf:8f:a4:3e:72:46:f9:eb:e6:85:0e:b8:4f:76:61:7a:6d:
25:1a:69:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:20 2025 by rpki-client