Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier: zIMN6Or/sfPYlKok5rJirQ6UChh6+nwsAAIjegcXQZY=
Subject key identifier: 1C:DD:0D:95:CC:A9:5D:24:86:AB:03:0E:1C:80:BA:65:33:95:6F:1D
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial: 019748F9E5C2F73487AE5CE88640790C6933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number: 09E8
Signing time: Sat 07 Jun 2025 06:00:26 +0000
Manifest this update: Sat 07 Jun 2025 06:00:26 +0000
Manifest next update: Sun 08 Jun 2025 06:00:26 +0000
Files and hashes: 1: QyIQhrwBc_E0RzmwfCK0p-xEPL8.roa (hash: KU05TYN4aOywUPeCIgZViB5uKUpefnNLinujip3r7Ws=)
2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: X7ayFFrrd2/DF629JZGKkmNE7BZ9ehuMd9W+bdhp4Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e5:c2:f7:34:87:ae:5c:e8:86:40:79:0c:69:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Validity
Not Before: Jun 7 06:00:26 2025 GMT
Not After : Jun 8 06:00:26 2025 GMT
Subject: CN=1cdd0d95cca95d2486ab030e1c80ba6533956f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:9c:61:d1:d9:6a:2d:11:0e:9d:d3:e6:7c:
a8:70:07:41:7f:e5:6f:25:2f:f0:2a:d1:14:5b:b9:
87:36:9a:e7:6e:e5:ad:ed:e7:07:15:cd:2f:a6:5c:
ca:00:ca:52:60:53:ba:ef:a6:68:ed:88:1a:1a:18:
54:32:79:ea:f8:1c:ef:4e:09:3c:d1:62:35:10:5d:
12:73:1d:ca:27:ce:27:ac:37:78:8d:c7:8c:e7:a1:
8c:b7:88:b8:b2:8e:99:8b:cd:c7:f0:24:35:d1:3c:
b9:15:0d:21:39:b3:bc:98:5d:2f:13:ee:46:82:4e:
5c:2d:70:24:54:7a:40:75:c9:dd:cc:65:06:5b:83:
c3:fc:58:70:5d:28:8a:df:71:4e:51:97:f2:88:b2:
72:d8:e9:10:b6:98:41:c5:21:8b:7e:7c:d8:08:27:
b8:15:9c:f0:d6:e2:2b:76:4c:6d:fe:62:d9:f0:d4:
cc:41:2e:fd:66:ee:8e:a0:34:b5:45:e6:09:de:11:
c6:de:0c:a4:bb:c0:be:24:0c:fd:9e:52:5b:1b:74:
2d:1c:c0:25:cb:3b:48:7b:9c:7f:9d:72:a2:89:ff:
ad:7f:9d:95:d2:99:3a:8b:94:58:6a:18:04:8d:da:
3c:54:d7:61:71:2a:94:e1:72:0a:0e:e7:e3:08:26:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:0D:95:CC:A9:5D:24:86:AB:03:0E:1C:80:BA:65:33:95:6F:1D
X509v3 Authority Key Identifier:
keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e5:ec:09:46:f0:2f:e5:4b:9e:db:e5:9f:78:14:4e:5b:b0:
b0:3b:c2:b5:40:e0:fa:40:20:70:04:d1:ba:8a:a2:b5:3b:ed:
97:8b:26:d2:67:f2:54:00:be:ba:3d:21:ee:3b:d1:a1:5d:f5:
d3:3b:78:8d:ed:af:7d:b5:3b:73:61:93:40:49:3c:05:75:10:
1a:26:e9:26:0c:3b:8b:d2:69:45:13:d4:d9:38:d7:f0:51:c7:
1a:36:77:65:56:38:48:7c:00:dd:34:c0:49:58:a3:2b:b6:c2:
de:3f:c8:df:03:d7:7f:b6:0a:93:9e:4e:cd:38:07:97:63:8c:
9d:d1:9e:ed:31:98:c5:41:68:c8:cb:4b:7e:a6:5c:5b:26:26:
19:24:08:dc:f4:67:27:b5:52:92:2b:5c:51:95:6a:6e:95:35:
fb:4a:2d:81:bf:8e:f3:64:4e:45:c7:04:22:68:8a:65:ce:b6:
1f:e8:66:5b:d6:b8:b1:21:74:ad:7f:84:6e:75:4f:b0:46:c5:
c3:9e:64:1f:11:20:51:a4:0b:6c:bf:b2:73:c3:1f:14:5d:e0:
8e:1a:72:4c:c5:86:9d:1e:f3:2f:92:ca:ed:1a:41:c1:79:e9:
41:32:32:25:4a:07:6f:f8:c9:28:a0:63:62:54:a5:76:14:68:
39:3d:79:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:30:38 2025 by rpki-client