Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: pgIf4siY69NTgeXKPmxx4KVK+YAMQSkLKQKxcsR48pg=
Subject key identifier: 81:F9:19:97:79:E9:D7:F2:79:A2:42:C2:E8:4E:06:47:03:7B:44:74
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 0197B7B2EDC6C068810BBDBAFD801ABF848A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 0299
Signing time: Sat 28 Jun 2025 18:00:46 +0000
Manifest this update: Sat 28 Jun 2025 18:00:46 +0000
Manifest next update: Sun 29 Jun 2025 18:00:46 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: Owq29AqXXna3YTOTFOX7YxOGPnTYoOZFuLpsZvOU4e8=)
2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ed:c6:c0:68:81:0b:bd:ba:fd:80:1a:bf:84:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Jun 28 18:00:46 2025 GMT
Not After : Jun 29 18:00:46 2025 GMT
Subject: CN=81f9199779e9d7f279a242c2e84e0647037b4474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:17:72:43:00:ac:6a:75:68:e0:3e:0f:53:
ef:4d:6d:ff:55:41:d1:b0:83:07:2a:b2:57:98:3e:
b9:f2:9d:99:f4:e9:76:3d:c4:46:2e:2f:2f:15:2a:
5d:65:b2:e6:c3:57:a5:0c:28:b3:6d:3e:18:58:99:
a5:8b:6a:10:f6:5a:14:e2:86:64:ad:57:f7:18:71:
08:4b:78:99:4e:07:52:98:55:40:82:7a:c8:fc:36:
da:a2:c7:ba:ef:c2:01:f3:ce:20:e8:d9:e8:c7:a7:
ae:b5:17:fd:97:72:c7:5f:cf:52:33:c3:04:3e:b5:
02:60:cf:63:a4:c7:92:ee:73:03:0f:89:4e:c2:9b:
33:9c:10:b0:8b:10:ae:99:3d:96:8f:db:77:d8:a5:
28:82:7d:42:94:40:96:11:11:f3:40:6a:68:a0:3d:
77:f0:ba:cc:79:e3:e0:ff:34:0f:ea:f8:59:6d:98:
08:06:22:eb:7a:b0:9c:1a:cb:f3:90:c7:ca:b1:7b:
0c:b2:22:15:fa:6a:24:83:89:b8:af:d3:9d:2f:27:
0a:32:6b:ff:a5:b5:30:c8:74:ca:8a:5e:c5:77:4f:
7d:eb:9b:fd:d9:14:1b:76:c5:79:5e:af:c3:26:c1:
af:b2:67:dd:40:b3:a8:2f:bc:10:29:3f:f9:9f:9c:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:19:97:79:E9:D7:F2:79:A2:42:C2:E8:4E:06:47:03:7B:44:74
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:95:9d:ae:33:1e:7a:f8:39:e5:5f:f0:63:78:ee:26:01:b7:
fb:79:fb:05:7f:bc:ba:57:c5:f0:ed:9f:5c:7f:f8:ed:78:2a:
4c:91:36:bd:1a:7d:0c:ab:fb:b8:fe:49:d6:81:06:db:a6:b5:
54:84:aa:e0:fa:62:ee:a8:8a:49:e0:0f:eb:29:27:58:65:b9:
0f:23:dd:38:d2:05:d0:4a:37:18:1e:fa:a0:63:07:e5:19:de:
66:65:c7:4e:2c:f7:66:9c:ef:36:46:85:ae:34:a4:cf:e5:48:
36:66:9e:2a:62:c5:1f:54:15:57:60:61:aa:88:2e:66:93:67:
f9:5e:ab:09:a5:15:28:35:2f:75:8a:b7:3d:e6:d6:95:44:00:
1e:4e:47:53:fc:27:7d:d3:43:f6:5b:f4:a1:78:78:28:22:4f:
12:87:f9:bb:7b:58:59:e3:8e:a6:32:cf:60:9a:d5:12:d4:6b:
10:16:16:39:11:bf:91:1d:41:a1:7e:35:7e:1c:86:39:07:8d:
69:bb:27:2d:e5:d4:bd:c1:53:9c:08:fc:5b:9b:02:da:33:ca:
8d:1b:ac:e1:2f:7c:3e:04:ae:b9:f4:66:fc:68:7f:37:d5:1c:
7f:fc:f5:27:be:f5:b5:59:d3:8f:28:3f:75:b1:59:76:5b:7b:
5c:fe:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:34 2025 by rpki-client