Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: J7KT7jH3YCMz3AvBDxxxgtt8HHpLrqOzAsrxjHz2Jmg=
Subject key identifier: 69:55:4C:84:09:8E:DD:64:99:4C:B9:A2:1B:45:D1:63:23:4F:44:1C
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 0197B70EF468E4FA733A50DD45AFBDDCCD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0D17
Signing time: Sat 28 Jun 2025 15:01:39 +0000
Manifest this update: Sat 28 Jun 2025 15:01:39 +0000
Manifest next update: Sun 29 Jun 2025 15:01:39 +0000
Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: KwTk1O5eavXHoQwibWkpdww5IqXNPhu41KrgpZcYYSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f4:68:e4:fa:73:3a:50:dd:45:af:bd:dc:cd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Jun 28 15:01:39 2025 GMT
Not After : Jun 29 15:01:39 2025 GMT
Subject: CN=69554c84098edd64994cb9a21b45d163234f441c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:58:09:e7:e6:8b:51:e1:c9:bc:a3:2e:82:
69:8a:17:1f:28:72:39:89:dc:ba:84:63:a8:3d:62:
22:db:50:13:c4:83:94:1a:23:01:94:05:cc:89:f0:
3f:6d:5f:f1:34:96:52:ac:1c:cd:5f:88:9d:92:e5:
41:7b:a3:58:91:2c:64:36:de:93:99:a7:65:e1:6c:
6a:d1:62:ab:7a:9b:3e:9e:09:84:f3:9c:00:2c:4f:
52:d0:a2:99:55:52:d2:21:37:3f:f2:dc:ff:38:9c:
f6:cc:55:71:eb:49:23:ae:05:33:1d:90:82:52:ed:
5b:32:08:23:97:19:a9:01:6f:83:33:38:71:e9:17:
3b:74:44:ce:a9:81:75:6c:da:89:32:6c:01:b6:65:
ec:0e:d0:80:f5:db:00:5c:96:8b:dc:76:9c:ae:51:
6a:3c:4b:af:05:f3:35:a9:d6:f1:ff:80:79:6c:b4:
df:46:9b:89:86:cc:91:04:9e:78:00:cf:ca:05:1a:
f0:e1:17:0f:b7:51:24:ad:43:46:3e:a9:3c:3c:5d:
88:6c:2a:a9:e2:7f:76:21:52:bc:bf:6a:b7:9a:cb:
bc:fe:9b:c7:1f:fc:db:95:37:7e:e7:54:54:9e:cf:
a6:f4:6f:cb:a3:7d:fc:55:b3:79:08:93:e9:ef:bb:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:55:4C:84:09:8E:DD:64:99:4C:B9:A2:1B:45:D1:63:23:4F:44:1C
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1a:c0:e4:06:3a:80:16:28:48:0e:3c:63:02:34:ea:0f:d4:
2b:01:6c:33:6f:3c:58:5e:06:be:35:00:5d:6b:63:77:9a:cc:
89:e4:e8:b6:30:a7:0a:8c:95:4d:e4:0f:66:82:1f:88:c3:9d:
d0:3c:17:cc:19:8f:50:1e:6e:cb:d1:cc:06:0e:35:67:fa:27:
6a:a4:e5:7f:e8:b4:7f:b4:73:06:7c:fd:35:43:6a:36:c5:3e:
dd:95:2c:6c:03:ec:cf:32:8e:06:fa:f4:c0:eb:50:23:8c:93:
17:78:90:1e:a4:2e:e1:b4:df:42:e9:e0:ab:8a:e5:c2:42:76:
1e:e6:ef:aa:e5:2d:42:06:eb:a8:70:c4:82:74:f1:9b:51:d8:
09:23:59:97:a7:af:e8:36:e7:bb:99:cd:93:6a:fc:9f:83:7a:
56:45:90:e0:04:99:8e:bc:6b:eb:81:63:56:cd:82:ee:ad:5c:
5c:2b:1d:c9:c7:ea:83:4f:80:b1:ac:a2:be:1b:12:c6:2a:6d:
5b:66:0d:68:d6:aa:2c:3c:87:9c:4e:fc:03:fa:44:ed:4c:32:
7f:10:d2:70:14:0d:b0:3c:e2:a4:54:e1:e1:87:86:90:ee:d2:
ce:5f:a6:99:6e:6c:35:67:9b:79:16:d1:4b:d1:cd:2e:23:34:
2e:71:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:29 2025 by rpki-client