Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: 3+3NhPm+++ZCLc0SKeVJnSZDA/nVSFeQnA0saUf8vSc=
Subject key identifier: 17:34:63:D4:80:BA:65:EC:25:52:78:65:C2:13:24:AB:37:1E:5F:3E
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 01975EA6377E3B62F696D0F11CEBB3373E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 11:00:40 +0000
Manifest this update: Wed 11 Jun 2025 11:00:40 +0000
Manifest next update: Thu 12 Jun 2025 11:00:40 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: FuZl44bevrgb6hy7cbZG2tc4Ypmc+v1p6W/CJqot1WA=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a6:37:7e:3b:62:f6:96:d0:f1:1c:eb:b3:37:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Jun 11 11:00:40 2025 GMT
Not After : Jun 12 11:00:40 2025 GMT
Subject: CN=173463d480ba65ec25527865c21324ab371e5f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:31:21:35:5b:54:93:54:3c:48:cd:8a:83:
f9:8f:61:1b:a2:e5:ae:12:20:e0:11:29:a4:1e:7c:
65:00:e2:13:81:f5:51:ad:58:b3:92:a0:a0:4f:13:
25:db:ee:65:39:97:f7:5e:98:c8:fd:81:1a:5b:d7:
34:87:59:9f:fa:93:da:34:c8:58:43:0e:08:07:fa:
4a:4a:c1:d7:40:d4:94:4d:d3:80:92:0a:a6:4f:83:
2c:2c:27:da:7d:71:30:f0:57:e5:84:34:7b:04:64:
0e:ba:7e:57:91:f9:92:eb:0a:b7:06:42:50:0b:9b:
15:e8:98:9d:0f:2b:68:d3:40:a7:d5:30:1a:7c:a1:
6e:00:27:1f:3d:9f:78:77:32:f0:45:70:9c:fc:65:
50:b2:ee:70:65:83:12:4e:dd:ff:16:7c:14:19:43:
b4:6d:0d:d3:00:85:f6:6f:38:95:79:78:c3:f5:52:
0a:b4:e4:3d:cd:11:21:39:e9:b1:9e:4f:00:25:1f:
f2:f6:d0:a7:f7:eb:9c:ef:6a:96:1c:86:cf:a7:0a:
ea:b1:39:f6:fb:73:6e:62:0d:41:15:17:dc:76:82:
ab:dc:6b:71:7d:7f:38:67:b1:16:2d:44:a8:78:59:
64:f9:a5:01:a7:3d:2a:20:91:f9:17:bc:f5:60:af:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:63:D4:80:BA:65:EC:25:52:78:65:C2:13:24:AB:37:1E:5F:3E
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e3:26:a8:e8:a6:5f:4b:c1:7b:92:4d:83:db:6e:a8:04:8a:
a2:b5:42:52:96:11:6a:ba:99:3c:b7:8e:51:b1:4e:dc:70:cc:
cf:62:65:e2:c4:24:4b:f9:3e:c6:9c:22:3a:02:f0:2e:bf:dd:
fa:3f:77:e5:8b:e1:4f:f2:74:b8:d9:47:dd:f9:ef:c4:2c:a3:
c3:c4:7b:f1:f1:c8:09:2a:57:49:8a:8f:b4:ee:45:db:d5:f1:
e2:48:32:8e:bd:50:e9:c0:40:3b:8f:72:94:89:9b:d8:52:69:
16:7a:33:44:a8:44:a7:c4:1f:55:c6:87:7f:2c:04:14:63:91:
66:3d:49:d5:cd:23:11:5e:cd:75:40:25:4c:34:92:78:70:e7:
fd:85:6c:fb:3d:9b:e9:86:f9:52:5e:4f:c3:1e:68:1c:2e:3d:
96:a0:14:21:5b:c5:ee:24:f0:21:6f:04:ae:2f:e4:7c:c5:f9:
bc:8b:b3:12:c1:b0:1a:10:b2:36:b8:5b:55:19:38:a7:28:5a:
d3:59:8f:63:89:6c:a6:f4:70:4e:78:88:4b:7c:5e:87:fa:1c:
fa:49:b5:39:ef:50:8b:3d:27:71:c8:94:4b:0f:f6:ad:18:14:
ac:0e:9c:6b:97:52:a6:b2:ec:42:58:5b:56:ca:4e:15:17:67:
be:6f:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:26:51 2025 by rpki-client