Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
File: 5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json)
Hash identifier: F/6EnJCjlCZmCR4nNUIvJwzoD2lnvD9mQPcm6jaSgcA=
Subject key identifier: F1:69:89:81:78:2C:F0:94:58:58:EF:1D:51:B8:97:D7:3E:D7:12:B6
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Certificate issuer: /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial: 0197B6D770D5755F41D2DFC5293DBFFFBD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 14:01:01 +0000
Manifest this update: Sat 28 Jun 2025 14:01:01 +0000
Manifest next update: Sun 29 Jun 2025 14:01:01 +0000
Files and hashes: 1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: runvv5QaoGf0BuFQqnWtLQopgw69F0jRPxvTKWCvF+c=)
2: 8aYlnDZg4v75vC6LNHm5OghRmm0.roa (hash: ST2fwGD3DZOiSeI3vgn+uSP6XW7Dy6QYeIzwYCfP/n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:70:d5:75:5f:41:d2:df:c5:29:3d:bf:ff:bd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
Validity
Not Before: Jun 28 14:01:01 2025 GMT
Not After : Jun 29 14:01:01 2025 GMT
Subject: CN=f1698981782cf0945858ef1d51b897d73ed712b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:5e:d2:a3:e4:41:11:be:9e:cc:bd:e1:63:
55:b6:22:8e:1c:29:70:d1:ff:4d:54:c8:c5:f1:af:
fb:1f:e1:b0:b0:27:da:59:8a:4a:cc:43:d2:ec:0c:
91:ec:34:4a:27:f3:a8:f4:82:87:63:df:07:d5:60:
fe:b6:0a:ea:28:7d:cf:3b:06:b2:54:e7:af:a9:e5:
82:b0:77:81:03:cc:af:54:29:22:84:9a:13:0f:e9:
b8:79:ff:46:f2:dc:a3:45:a4:f9:4b:0e:c8:d8:b6:
75:e0:74:ba:f7:c7:25:e5:dd:ee:f7:0c:51:aa:d4:
ab:a8:4e:e1:f6:1c:df:ad:d2:3a:86:59:73:cd:a5:
12:1f:3a:8a:c6:20:a3:97:34:9c:0d:fc:28:16:6f:
4c:dd:70:6b:62:c0:7b:9b:a4:50:ae:aa:51:04:1e:
dd:e8:71:d0:8c:91:34:5e:9e:2f:c2:8e:1f:fe:ed:
8f:9a:2b:b8:4c:53:68:88:76:05:c7:d7:90:b2:41:
ff:74:26:72:a4:b8:69:aa:68:28:8d:5c:de:e0:33:
04:d8:f3:2a:5b:79:5d:a8:eb:74:a5:12:af:f9:5b:
47:80:ab:74:20:f7:ec:b5:3d:a4:d9:57:71:e2:09:
f9:5b:8f:f5:8d:7b:0d:3a:4c:62:35:af:00:d2:b0:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:69:89:81:78:2C:F0:94:58:58:EF:1D:51:B8:97:D7:3E:D7:12:B6
X509v3 Authority Key Identifier:
keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c9:0e:dd:9e:5f:2a:62:d9:ee:8f:77:f7:9d:45:35:b6:bb:
a1:bb:cb:fd:54:42:54:30:c7:94:71:d3:c0:29:df:39:d3:ce:
80:6f:d4:dd:0c:eb:2f:8a:62:20:cd:a7:8b:be:05:b0:81:e2:
93:f3:f3:47:13:9c:72:4a:7e:22:cf:00:f1:89:c0:c2:11:2a:
22:1a:af:6c:8b:db:ef:fb:63:67:14:73:98:b2:f5:09:7a:27:
66:ff:8c:a8:03:8a:b5:38:02:c8:0d:b9:22:aa:bc:63:95:34:
6f:4f:97:a3:a2:05:b8:f3:8d:68:6c:8d:a0:2a:b3:c1:c5:aa:
30:49:04:1d:34:28:2a:88:13:58:a3:02:78:f9:b3:ac:66:d3:
d9:14:bb:6e:af:b1:8a:1e:78:ef:51:da:e2:e6:2d:02:70:bb:
7c:2f:18:82:97:ea:df:a3:0b:25:94:b9:27:d7:eb:89:af:9e:
5e:f8:89:de:f1:c5:e2:93:bd:9e:84:d6:15:9e:02:0d:69:05:
87:a9:85:1f:22:8b:bf:79:59:08:e4:5a:83:5e:4a:a7:57:84:
7c:df:1c:d0:ff:ef:13:79:e2:73:9c:c1:e6:a3:06:09:36:87:
11:9f:99:7b:e4:a7:50:83:6c:14:f6:7c:3f:44:36:15:c5:43:
81:8c:d4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:54 2025 by rpki-client