Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: cK32LHVBQJzGTaDTs/UwfZq1jScW+pt6KcI6pqTEWRY=
Subject key identifier: 45:83:00:A1:AB:1E:D2:B5:C0:80:14:C4:D4:E9:57:A1:93:93:4F:AC
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 0197B96AB99B4E7AA9E50B12ECC5F2D27FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 1548
Signing time: Sun 29 Jun 2025 02:01:08 +0000
Manifest this update: Sun 29 Jun 2025 02:01:08 +0000
Manifest next update: Mon 30 Jun 2025 02:01:08 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: QcvEmM9QzlytemCfKU8Q2eWmFMlseWh87HW48+dglDo=)
2: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (hash: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:b9:9b:4e:7a:a9:e5:0b:12:ec:c5:f2:d2:7f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Jun 29 02:01:08 2025 GMT
Not After : Jun 30 02:01:08 2025 GMT
Subject: CN=458300a1ab1ed2b5c08014c4d4e957a193934fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:20:89:3f:af:46:03:3d:72:bf:00:f7:c2:
3b:e9:7c:a7:44:17:2b:47:68:26:d8:7c:37:f7:9e:
f6:e3:ce:3f:57:ff:24:5e:a7:2f:75:9d:4f:0c:4d:
8a:a4:a5:6b:0a:74:d3:6c:1b:c2:e0:bd:7c:fe:39:
a6:b6:0b:45:37:36:6b:24:0d:3b:59:21:a8:9e:74:
a0:68:60:91:1b:fc:b3:9f:3e:a3:a2:73:00:4c:5b:
d7:5e:6d:0c:d1:69:d0:49:83:8e:95:9b:b9:40:65:
e1:61:06:e1:a4:ba:a4:1b:35:8b:e3:10:09:74:29:
1a:26:31:79:54:25:fb:dc:28:53:b9:32:7c:2e:40:
3e:4b:37:1b:35:99:e6:dc:c0:bc:30:55:86:f5:24:
f4:79:fd:f8:49:0c:f1:88:e4:10:17:da:98:40:c2:
4d:2b:36:c4:fe:e8:98:a7:61:20:e5:d9:01:12:67:
1c:78:74:26:cf:86:2b:78:99:23:85:31:c7:8c:24:
bd:58:31:91:34:b1:89:fd:c5:c5:c0:c5:18:0a:18:
e8:e6:d5:28:6b:31:4d:05:7d:05:70:97:57:07:0c:
9e:89:d1:19:a8:5a:40:d0:1f:02:c3:10:02:f1:63:
3b:f7:56:7a:02:96:71:7c:41:77:72:1e:6b:18:e9:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:00:A1:AB:1E:D2:B5:C0:80:14:C4:D4:E9:57:A1:93:93:4F:AC
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0b:e7:9a:f9:d2:75:6d:99:8c:a4:86:fe:f5:d9:78:1e:1a:
62:15:18:ff:99:d4:d9:ab:bc:0e:29:9f:e4:82:e9:4f:90:84:
91:5f:10:47:a6:e9:9d:4b:86:bb:57:b8:fc:cd:65:de:65:cc:
86:eb:99:be:8a:75:99:aa:2f:4c:4d:0c:c9:b2:87:62:04:91:
0c:6b:b5:7c:13:e8:26:6c:72:9c:1f:e5:50:26:d1:5c:be:0b:
76:96:26:35:3c:39:00:da:c2:36:bd:06:88:44:17:a7:c9:f6:
dd:68:74:ae:28:ea:ba:d2:30:73:3f:91:e8:a5:59:d6:7d:21:
ec:b5:a9:75:18:77:eb:7a:b4:36:c1:a8:b9:0b:38:c7:a7:3a:
83:df:14:6d:17:94:49:30:90:6c:af:e3:2d:04:5d:9b:b8:05:
19:b6:f9:d5:7f:4e:04:3d:ba:81:c8:dc:1e:0a:7a:36:38:cd:
10:38:25:27:05:eb:22:e7:69:56:83:21:a9:cf:60:9b:6a:76:
95:21:f4:fd:4d:5b:a2:ea:f3:4a:db:e7:5c:89:9f:d8:65:e9:
a9:3d:f5:93:cb:01:fe:3d:df:3a:3d:7f:80:2b:6d:75:ae:76:
f6:70:3b:c7:50:95:39:59:84:ac:e3:e8:42:c7:a3:56:50:80:
78:52:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:43 2025 by rpki-client