Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier: QjWMct6TgJn9RkspkjHuY8pz9zNZ8bN8K7P/W0kPwcM=
Subject key identifier: 1C:0E:77:85:2B:79:E4:C9:0D:B7:AF:A9:05:77:8E:69:EF:CB:FA:0F
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer: /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial: 0197B70EBF1C0A065BD23493103F9D70F0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number: 01CA
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: NNiciSeKWbS8rQhPFDYpkqi8H/LVdsRU4NcQhwWruDY=)
2: s5YaS3VA0T52xJ5l5rFauUbFgwE.roa (hash: JV1GN+4WYVJ18P7z6Hwge46vI+gFA8OZrJth5Bdr90Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bf:1c:0a:06:5b:d2:34:93:10:3f:9d:70:f0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=1c0e77852b79e4c90db7afa905778e69efcbfa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:ff:c2:11:66:0a:28:d8:78:ff:cb:77:fa:
f8:42:a1:9f:03:00:fe:6a:ef:67:ff:47:eb:b0:fb:
4b:db:9f:50:68:0b:2d:db:42:09:9d:2a:8d:a8:f9:
82:cc:39:08:38:17:7b:1d:e6:d8:0d:ab:b9:aa:1f:
61:0d:39:d5:41:dc:39:6a:f9:b6:f3:51:f8:17:9d:
66:0e:a3:27:10:97:bc:af:ab:f1:2a:50:2d:2d:3b:
d5:c6:b8:47:ae:3d:9f:b6:9b:74:09:b7:00:63:1b:
85:f6:b3:5c:58:32:64:ec:cd:22:49:ff:78:c1:73:
15:a0:a5:b6:99:ba:2c:72:89:e5:e7:f3:e4:1f:76:
60:c6:a0:7e:94:ee:23:bc:3b:7f:59:e6:e2:21:0d:
06:26:1d:07:e6:b1:f2:fb:bf:4b:a3:99:52:39:86:
bf:78:c7:f9:d2:bf:99:46:7d:f4:e5:98:90:f4:e1:
e8:b5:e7:8d:55:f2:84:56:e4:ad:9a:98:8e:07:9c:
73:ee:6f:b5:d5:d0:6b:c7:22:69:4f:3f:a8:cf:08:
fc:66:76:99:16:33:76:b1:d8:1d:d7:f0:c6:44:21:
c6:85:f3:e8:7f:e6:0e:dd:fe:c7:48:7f:e9:be:e3:
cc:3f:12:44:a0:46:06:f3:37:c8:d4:b3:7f:f8:ac:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0E:77:85:2B:79:E4:C9:0D:B7:AF:A9:05:77:8E:69:EF:CB:FA:0F
X509v3 Authority Key Identifier:
keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:57:9d:66:57:a6:76:a4:9d:53:79:87:64:bd:9c:04:b5:52:
d5:2f:8c:cc:b4:be:40:87:34:89:4a:86:9b:5d:2f:a7:3f:3f:
ef:4a:bd:2b:63:cd:57:8e:92:cd:2e:c0:b1:f6:c1:25:54:b3:
fb:a8:c3:2f:ff:21:63:b4:fe:11:04:8c:a8:ce:9e:7c:5b:09:
97:e3:b3:9d:2b:82:0c:3e:31:82:a3:92:60:c6:da:51:de:8c:
c7:1b:41:19:16:62:d8:31:2b:69:dc:9b:fe:8a:7b:24:fd:e5:
08:16:0f:27:05:99:8b:0c:28:35:34:83:a6:30:16:f6:3b:3e:
2e:cf:5b:01:83:63:d3:53:33:63:ea:30:86:1c:af:2c:47:e2:
af:26:1a:08:16:b8:b0:18:5b:9a:2a:e5:9f:e3:e0:7a:26:33:
62:a9:dc:21:8a:33:c5:41:69:60:f9:26:07:0e:7f:43:2d:0c:
30:66:ea:7f:2a:d4:0a:5d:93:0e:8a:bd:3b:13:a0:9b:e8:ca:
0c:fe:c3:2c:0d:95:7d:1e:d4:c9:2a:6d:87:3b:d1:52:ec:51:
f6:0d:c4:ac:26:42:f7:49:52:7e:f2:f9:4a:a5:41:79:94:77:
20:7e:02:e3:01:7c:91:27:f7:ec:fd:44:1f:1f:18:73:0c:78:
5f:76:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:30 2025 by rpki-client