Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: qRDjKkDAu19+EldLhbWK6f/ZYMzlcX6G/K/EGrT9soo=
Subject key identifier: 3D:4D:20:AC:57:5A:30:7F:71:31:54:65:C7:F5:8E:30:97:13:13:C3
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 0197B7EA2E6B3F9E45A533DED05BAD77C7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 19:01:07 +0000
Manifest this update: Sat 28 Jun 2025 19:01:07 +0000
Manifest next update: Sun 29 Jun 2025 19:01:07 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: luc2OH/evOnQ1UK+cHxsqZVHBbx1PyuwL/sE0bGXpgE=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2e:6b:3f:9e:45:a5:33:de:d0:5b:ad:77:c7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jun 28 19:01:07 2025 GMT
Not After : Jun 29 19:01:07 2025 GMT
Subject: CN=3d4d20ac575a307f71315465c7f58e30971313c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:21:51:35:c8:82:41:1d:02:6a:a0:30:b8:
30:7d:09:e2:00:80:15:2b:82:83:a0:ca:a1:6e:fe:
2f:be:c7:4a:cf:2b:03:00:a3:04:e5:01:2e:a6:5b:
0e:76:ee:24:5b:cc:0d:6e:13:99:a3:be:b7:e9:3d:
93:f6:b0:52:fe:bd:c6:c2:82:8e:1b:28:c8:01:15:
78:45:d5:d8:87:67:51:f8:ec:de:f6:f4:d9:63:2c:
ae:80:9d:7b:74:18:e9:ef:57:78:51:1c:18:62:f4:
f8:8d:58:1c:7e:2c:8e:fe:09:a7:9f:ab:fa:0c:36:
f8:88:16:19:f9:56:28:97:40:17:84:f0:25:21:4b:
d1:f4:78:e9:f6:43:f2:0f:81:4c:16:d8:4c:69:b4:
98:a4:86:22:52:3e:65:f2:bd:34:b9:7f:28:f5:6c:
76:75:42:e4:bb:46:3d:a6:a4:df:4a:f4:a7:53:45:
0b:f0:05:3b:bc:1f:75:82:cd:f4:db:a9:92:28:69:
3e:f4:84:ec:68:54:ad:91:c1:24:af:4d:f6:55:1d:
bc:88:23:47:96:55:c3:ce:8d:3f:e3:46:2c:2d:a1:
18:bc:48:74:c4:d8:f3:0a:2f:d2:f9:f9:05:52:5b:
7b:d8:96:28:66:39:58:c1:dc:be:af:79:69:db:e0:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4D:20:AC:57:5A:30:7F:71:31:54:65:C7:F5:8E:30:97:13:13:C3
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1d:9c:b2:aa:86:81:82:1e:75:44:5f:9b:42:64:65:34:b8:
28:01:5b:1c:4f:d5:ec:a3:34:60:79:7c:b6:12:dc:90:4d:36:
5e:88:ae:1d:9b:f2:00:a2:e5:36:90:85:9c:c1:67:97:c0:6c:
31:66:2a:5b:23:04:a5:e8:69:6a:6d:6b:cd:ff:10:c4:6a:e8:
f0:0f:16:65:23:16:a8:bd:bb:c3:50:6d:ab:7a:c0:9f:94:4c:
3c:27:4e:ca:97:25:d7:65:84:31:36:63:90:c3:7b:46:c0:ed:
95:99:4b:b0:75:d6:44:9a:c0:eb:5e:3b:28:5a:26:22:c7:81:
07:ca:9d:ca:1f:32:25:bc:fe:bd:8b:c9:bc:ac:4e:84:66:91:
6b:79:c1:2e:47:8f:21:3c:36:4f:78:2c:5a:bb:f1:18:62:05:
ee:ef:fc:59:aa:97:5f:0e:a0:75:8e:1d:c1:8a:c8:72:39:35:
83:53:fd:22:51:06:33:30:00:9a:44:c9:09:57:a3:33:27:44:
dd:f4:05:51:8b:f2:4c:c7:93:c6:ff:18:82:a4:c2:14:88:c6:
5b:05:b3:3c:7b:50:87:55:3b:ec:95:a2:fb:7f:e4:db:d0:20:
f9:bc:85:5a:52:f3:aa:da:28:36:5c:2d:63:68:06:29:50:64:
86:ff:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:33 2025 by rpki-client