Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: PfNylGz1UvC7wlJrJu7AFTwNxnsLLon6F+G4hho4pWY=
Subject key identifier: D0:38:20:06:97:E2:9A:A8:FD:3B:91:39:DA:1C:1B:44:6E:50:BC:02
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 019748FA3E4C3A3FE8CCD1881EB8651D6603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 0CFD
Signing time: Sat 07 Jun 2025 06:00:48 +0000
Manifest this update: Sat 07 Jun 2025 06:00:48 +0000
Manifest next update: Sun 08 Jun 2025 06:00:48 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: 0gw4AXUyUYxEgmR8LcBcj9s4I083qskplWsrbkvF+is=)
2: vhYKMa2Z6sRh78styyEQC2ay13Y.roa (hash: q6ISR7QoOYSfixxm6mwluVodtW8Dzcm/t68jGp50cGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:3e:4c:3a:3f:e8:cc:d1:88:1e:b8:65:1d:66:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Jun 7 06:00:48 2025 GMT
Not After : Jun 8 06:00:48 2025 GMT
Subject: CN=d038200697e29aa8fd3b9139da1c1b446e50bc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:55:73:72:a4:62:8c:5c:e6:11:79:d9:ac:
10:56:43:dc:f8:ea:e8:93:7b:1d:e2:88:52:0e:2f:
d3:44:e6:b0:36:0d:68:5a:80:e9:44:3c:af:6a:05:
93:65:f7:06:30:74:5f:57:31:2f:44:d0:4d:3b:59:
77:8a:45:0b:b1:55:b9:4b:14:09:9c:07:ae:41:3a:
fe:5e:7d:be:ac:5f:d3:40:58:c2:ae:1f:59:a8:27:
c0:83:7e:89:e2:37:41:83:6c:80:2a:6b:6f:5c:86:
6e:69:d2:1b:fc:ea:bc:e7:09:7e:98:d0:a8:42:d1:
3e:7c:39:1c:3d:28:87:6b:42:02:d6:b2:a2:78:7b:
a6:82:14:8d:a3:a5:db:2c:bf:e9:73:31:92:f5:7c:
15:98:5a:66:92:36:a0:e4:c3:40:f1:27:d3:63:e3:
89:93:0b:2f:03:28:12:4c:14:a5:8a:f8:58:b1:ca:
05:66:e1:ba:b6:3f:a6:03:42:a6:09:bb:cb:38:51:
3c:a6:d3:13:35:ba:f2:4a:04:02:64:ab:ce:a5:8c:
36:9e:ad:5c:51:7d:d2:63:fb:4e:6a:96:63:fe:e0:
95:6c:85:36:d6:2b:2d:a7:cb:45:11:29:3d:78:81:
b6:20:ae:3a:f3:03:61:64:5a:c6:b5:0f:d9:76:98:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:20:06:97:E2:9A:A8:FD:3B:91:39:DA:1C:1B:44:6E:50:BC:02
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:46:fb:4c:73:2b:ea:68:41:9e:81:0f:df:e7:4b:fb:a4:a3:
f3:19:fd:68:3e:36:65:eb:db:04:ec:70:27:89:be:6f:6b:6d:
f0:24:12:58:fa:70:2c:0d:4b:77:d0:b4:f4:70:28:2e:df:15:
15:7f:bd:8e:c9:66:da:5f:4c:ff:27:bb:a0:e7:36:4d:32:36:
c1:46:ae:86:2a:b6:d9:96:aa:cf:35:c6:aa:90:2c:2e:54:9a:
ae:8f:6b:c9:ff:19:f1:2f:fa:2a:40:9b:2b:be:49:e6:b1:90:
de:68:cd:2a:40:2b:3e:f5:0d:d1:96:f7:b9:ed:14:e2:05:f2:
70:48:b0:7c:a3:c7:bc:3c:81:e1:d7:9e:a3:5b:82:80:eb:f3:
eb:41:c7:4d:f2:cf:9c:79:c4:ee:ca:66:bc:f6:43:5b:35:91:
37:4b:98:87:9b:d2:95:ff:4f:de:5f:94:90:d7:b9:46:93:be:
2c:1a:1a:07:b2:85:fd:7d:b4:6f:b6:24:12:42:6c:9e:65:69:
e8:4e:31:d1:3f:66:c4:19:2f:0a:35:54:ca:5b:c5:8a:0f:fe:
4d:d8:fa:b2:32:09:cc:88:de:6b:6c:ef:18:d0:d7:96:2a:06:
e6:44:f5:db:d7:dd:51:52:3e:a8:26:65:39:ae:1a:87:a2:1c:
b8:7d:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:31 2025 by rpki-client