Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: USUa5g6GL2/YMBRFrMTlzC3rTL7zyPI/GXP5KonUIXU=
Subject key identifier: 5A:6E:80:5C:01:F5:2F:52:9F:64:9D:98:73:42:C0:D9:29:DF:D2:0C
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019745F8F9FB62594E2228F46955CA167006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0B29
Signing time: Fri 06 Jun 2025 16:00:34 +0000
Manifest this update: Fri 06 Jun 2025 16:00:34 +0000
Manifest next update: Sat 07 Jun 2025 16:00:34 +0000
Files and hashes: 1: 2HsIGyT4rIJuu6UrqRcR2fc9b3I.roa (hash: hUQqgn+fKEmkw/9ErWQL/8TgPXVZMyjAW7UPwj4OttA=)
2: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: 2mvFpg0hiSKjV4vezxJRlUKR7feKbxhD2lDIxQJmK/o=)
3: dz5PrO-ksQipuN7JJpM04omvh6c.roa (hash: 81uIRfVVY3c1peJ8bScAsHXQKW9arfKTdSaUvSixwrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:f9:fb:62:59:4e:22:28:f4:69:55:ca:16:70:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Jun 6 16:00:34 2025 GMT
Not After : Jun 7 16:00:34 2025 GMT
Subject: CN=5a6e805c01f52f529f649d987342c0d929dfd20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:c5:20:cf:31:fc:83:17:12:f3:a9:d7:47:
44:f6:a6:53:49:ea:07:26:87:1d:4d:0a:06:91:99:
04:6b:9c:8f:f8:86:ce:7f:bf:c4:59:54:22:b4:f9:
0c:9f:c1:76:ad:c0:f7:71:70:6e:f2:99:5e:7f:f7:
84:fc:84:76:37:89:ad:83:ef:e7:bf:84:c6:42:9b:
da:6f:7a:ff:c1:a6:27:fa:9c:83:55:5c:af:9f:7d:
03:49:f9:d8:47:b1:41:c2:d5:2d:3b:f7:f7:3a:08:
d8:f0:c0:ed:66:f4:0c:3f:48:09:77:22:a5:cc:20:
9f:8c:67:5a:a7:ef:12:aa:3f:77:06:21:cc:1d:dc:
3c:23:69:52:22:96:c7:24:7d:5a:e2:a0:ef:82:b0:
53:92:55:07:55:f8:ab:44:5b:9a:0d:3e:d9:fe:b0:
57:96:14:16:e3:fd:c3:3f:90:8c:78:8a:7a:0b:bd:
d9:f4:81:ba:d4:10:e1:48:a6:fe:72:6e:cd:0b:f6:
df:7b:5d:ad:08:c9:17:78:97:fe:9f:46:8f:09:a6:
69:2b:10:6f:08:be:1f:fa:c9:ff:25:30:e0:4a:0a:
52:d5:26:ba:86:a9:8c:01:8c:18:3c:9d:63:ad:e5:
d4:08:d6:50:bd:1e:2b:20:a7:bc:e3:c1:55:e1:7a:
cc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6E:80:5C:01:F5:2F:52:9F:64:9D:98:73:42:C0:D9:29:DF:D2:0C
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4d:83:2c:7f:53:48:b0:8a:31:d0:fc:fe:4a:f1:77:04:61:
11:1e:77:51:18:2a:83:ed:b1:4e:89:be:bb:58:e6:23:6b:16:
cd:96:78:d8:b4:06:4f:8d:41:fd:11:24:87:df:0b:f7:be:00:
76:93:ac:3b:87:c5:4b:ef:7b:40:f1:c5:61:56:a6:07:b1:5e:
8a:89:ea:23:7f:e9:3e:bb:47:93:39:cf:d1:b4:92:cb:1d:7a:
24:4b:da:69:a8:b9:27:6a:13:d3:62:15:c2:61:8d:7b:10:6e:
c7:a8:36:c1:5a:1a:f3:34:24:49:5c:4d:54:78:3b:97:2b:08:
a1:89:41:7e:03:b2:4e:cf:d2:dc:3b:39:07:d7:ee:4d:fa:f0:
0b:96:d4:16:5d:b1:96:89:c9:da:b1:38:5b:93:03:40:f7:d0:
90:d5:7e:66:09:be:44:fe:c3:23:0e:76:b7:e5:73:50:23:3f:
e6:8c:99:e2:cb:02:df:ce:bb:c1:e6:7a:7c:22:fa:6e:e7:79:
65:d7:0e:05:93:90:10:47:4d:3a:86:28:70:61:33:4b:35:20:
67:1e:18:fb:18:f4:bf:78:31:14:95:0c:9d:23:fb:e1:60:3a:
7a:59:25:69:2f:79:61:13:a8:b3:09:19:aa:70:79:c3:17:fc:
ff:a4:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:11 2025 by rpki-client