Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: UM0YtRZ8/B2/QOSlhjRuZVcvEF/rxrWScATI64KuCFE=
Subject key identifier: F1:F8:90:A2:12:C2:7D:7F:0A:97:A8:48:25:15:D9:46:F1:E1:40:94
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 0197B890547802A79BACAAF78AFC555904F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:02:35 +0000
Manifest this update: Sat 28 Jun 2025 22:02:35 +0000
Manifest next update: Sun 29 Jun 2025 22:02:35 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: aP69cDDMCgjt5BOZHNAr3TIs36V68Zj1CjD3yf03sqo=)
2: MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa (hash: kL1zPGLwfZE8020kfHibTnemsjFNFBdHlurHXKEnCxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:54:78:02:a7:9b:ac:aa:f7:8a:fc:55:59:04:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Jun 28 22:02:35 2025 GMT
Not After : Jun 29 22:02:35 2025 GMT
Subject: CN=f1f890a212c27d7f0a97a8482515d946f1e14094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:c3:23:79:08:b9:96:dc:78:99:58:90:b9:
dd:d9:90:af:8e:62:5f:15:65:18:00:82:5f:e3:f7:
83:31:1b:26:7e:fb:e5:d2:2c:98:02:dc:5f:95:b9:
64:a3:40:98:3e:92:91:70:41:ec:53:9a:64:3d:13:
f8:2a:2d:f2:43:12:c3:4b:c2:58:6c:9c:55:58:06:
b9:a8:aa:12:42:a7:58:22:17:fd:98:6c:d5:99:00:
33:f7:ac:bb:ec:51:ca:67:55:43:8a:c3:1d:b5:40:
b4:72:88:cc:55:a4:b2:b1:73:b1:2a:14:10:e3:f4:
4e:0a:fe:1d:9a:8b:1e:1c:3d:18:7b:5e:d2:c7:51:
b1:8d:1a:bd:4c:52:16:d2:9b:34:1d:d3:07:14:7e:
aa:04:25:b8:e3:14:57:ba:1b:13:1b:30:58:56:db:
48:e2:b4:39:e8:d7:fe:18:ea:d5:1d:04:32:52:26:
26:e3:ea:c4:41:91:9f:ce:a6:f8:f0:1b:50:72:ec:
9e:c7:7a:88:d9:b3:ec:e5:11:d5:88:18:aa:7d:08:
00:7f:99:84:68:52:c2:d3:81:70:c6:00:45:34:9b:
6f:5f:06:19:75:e5:04:54:4f:a9:71:44:15:f7:2e:
c4:57:ef:91:32:0a:23:1b:02:e6:1d:0c:a6:b0:7c:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:90:A2:12:C2:7D:7F:0A:97:A8:48:25:15:D9:46:F1:E1:40:94
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:38:7a:ba:95:56:a6:07:99:46:c4:71:20:49:b5:20:bd:02:
04:87:ff:93:ef:81:5d:47:05:a5:8f:f1:33:85:4c:e5:c7:12:
c0:98:a9:3a:ee:04:04:51:02:54:33:78:e0:70:95:89:fd:95:
43:26:1f:3a:3c:38:36:64:34:5f:94:76:bc:de:bb:67:9d:2f:
c2:e0:ad:c1:6b:e0:d8:cb:8a:78:27:34:93:fa:53:95:eb:7d:
14:9b:a4:fa:83:f7:7f:18:90:8d:4d:be:ec:a6:72:33:ac:4b:
a2:fe:d7:06:56:1c:31:9f:55:32:cd:b4:92:ce:9d:cd:12:5c:
fc:be:a7:80:91:86:d0:d5:ca:13:4f:e0:b6:c8:4e:fd:b6:e3:
0f:20:9b:72:c7:67:f6:6e:02:ae:97:e5:63:1e:1d:f7:02:80:
c5:3a:13:e0:ce:37:98:70:17:18:c3:62:5b:43:85:65:fe:31:
87:6a:6c:ea:25:9d:d7:40:68:3c:0a:aa:6c:d3:d1:6c:ad:1b:
54:5a:b6:bf:4c:c0:89:bb:19:22:cd:45:17:d9:fe:13:21:2d:
b1:24:e6:94:49:eb:7e:64:22:be:6f:2d:71:c0:48:60:74:19:
b3:e0:fd:f2:43:4f:4e:99:dc:7e:06:49:9e:5a:20:91:ff:78:
e4:57:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:01 2025 by rpki-client