Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: imxlT879KfIK93C0vjVRblWY81c6VV4fPO+PM7nrJYE=
Subject key identifier: 6E:5B:25:D6:98:2A:08:FB:A3:AC:2C:8A:AB:B7:F9:5B:C5:1C:3C:5B
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 019746D48C261F74888CEAC644142C937A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 0F4D
Signing time: Fri 06 Jun 2025 20:00:24 +0000
Manifest this update: Fri 06 Jun 2025 20:00:24 +0000
Manifest next update: Sat 07 Jun 2025 20:00:24 +0000
Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: BJlE5ZFVfwU8nwJt7USipBt5SO7zi0B2vF3p5QP12z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:8c:26:1f:74:88:8c:ea:c6:44:14:2c:93:7a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Jun 6 20:00:24 2025 GMT
Not After : Jun 7 20:00:24 2025 GMT
Subject: CN=6e5b25d6982a08fba3ac2c8aabb7f95bc51c3c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:c2:da:70:b8:ff:23:4e:56:50:3c:82:b2:
86:5f:a9:5c:9f:fa:4a:a9:8f:e4:a0:13:23:63:a4:
e1:78:b4:7d:18:23:4b:c8:4d:a9:fa:cd:33:1d:b3:
6b:f9:ef:d0:6b:26:da:8a:64:e4:58:f4:2b:d2:cc:
b4:ea:36:f4:ee:90:9c:88:38:0e:4c:b1:00:98:16:
20:ea:8d:77:26:a4:f7:ea:d1:e7:ed:da:34:5d:b2:
6c:e5:5a:aa:e0:8a:a6:9c:27:12:8d:d8:89:63:97:
d3:af:28:ca:be:15:27:7d:2c:91:4d:e9:8e:08:c7:
49:9a:9b:72:d6:c3:a7:fb:78:66:84:ca:bb:ed:b7:
fd:f2:05:57:fb:ba:18:c7:f9:5e:ca:43:89:a7:df:
b0:aa:f5:7e:b6:27:f6:d9:bb:bd:8b:91:f3:6a:72:
ba:60:a1:c3:25:8b:90:d0:c6:e1:15:ee:fb:02:ef:
24:3b:46:ec:f3:91:54:66:2b:58:d4:63:cb:8e:83:
ba:78:d3:d4:f4:23:c9:5c:4a:08:72:41:78:ec:18:
a3:af:4e:89:90:e7:92:58:cc:4e:8e:fe:a3:ce:9c:
0c:ad:df:dd:02:7a:07:1b:ba:5e:24:d2:ca:2a:3d:
3c:35:c3:0f:26:d7:a5:ff:6f:97:56:99:56:b6:08:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:25:D6:98:2A:08:FB:A3:AC:2C:8A:AB:B7:F9:5B:C5:1C:3C:5B
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fb:d3:f8:bf:e9:81:9a:ba:5c:11:c1:bc:7d:77:2c:94:d1:
be:22:0d:16:e2:86:de:8e:89:9c:79:00:04:ca:3f:90:47:cd:
73:bd:4a:29:8b:8e:3f:6f:70:b7:23:b7:11:66:9c:16:5e:78:
3c:4f:d5:a6:13:37:b7:ea:71:29:ea:30:e9:76:4c:4c:d0:cc:
04:46:84:bf:4a:c7:0d:75:80:7c:f3:7b:99:c4:51:ec:7b:63:
51:8a:e5:64:d1:7c:e8:a4:4e:40:27:54:10:f1:9d:a7:ac:ef:
e1:5e:5c:ee:41:02:57:f9:bf:06:98:dd:b1:97:09:75:8e:4c:
78:61:9e:10:5d:eb:52:c6:2a:94:6e:a3:38:92:0b:6b:cb:2a:
7a:c2:bd:ea:72:1b:67:2a:49:10:ae:53:15:90:cb:d6:4a:e8:
bc:9e:0f:84:75:0a:bf:1d:31:76:29:46:e8:82:47:ea:68:8a:
20:b3:1d:95:eb:c7:8d:c6:69:b4:82:f8:56:a2:87:d4:53:cd:
51:f0:1d:39:63:a9:20:63:2d:bc:66:79:78:d2:38:2a:02:7c:
7e:ed:88:9e:68:c5:ab:d7:f3:07:6b:4a:1a:3a:b3:9b:97:ce:
ba:02:ae:9e:f3:e0:57:76:7f:0c:60:cf:04:4b:07:37:89:ae:
bc:a4:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:37:16 2025 by rpki-client