Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: N6vOdD3gw3hjofHUfkoHD+iQnJWCAC0WSBuNKxJklfo=
Subject key identifier: FC:57:54:33:06:59:56:06:FF:5D:BC:A2:80:60:16:10:CB:1E:A3:99
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 019747E7563164AB40AD54D7427C0CA51187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 029D
Signing time: Sat 07 Jun 2025 01:00:32 +0000
Manifest this update: Sat 07 Jun 2025 01:00:32 +0000
Manifest next update: Sun 08 Jun 2025 01:00:32 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: XUoCUTF2eOPZQuF9VWH78vf4BpGRQMOLgbHQ99BHRFg=)
2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:56:31:64:ab:40:ad:54:d7:42:7c:0c:a5:11:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Jun 7 01:00:32 2025 GMT
Not After : Jun 8 01:00:32 2025 GMT
Subject: CN=fc57543306595606ff5dbca280601610cb1ea399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:6f:32:fb:98:bb:42:1c:04:74:71:4d:94:
cd:26:c3:ef:12:98:04:e7:f7:a3:1e:47:fa:d4:72:
c6:f4:6b:b5:da:28:15:c4:80:16:c2:0e:b2:93:84:
33:4f:32:c2:5c:41:2c:40:7d:27:69:0e:f9:b1:bc:
89:68:f1:71:2e:35:ef:e0:65:a4:bd:8c:c6:8c:d2:
10:68:d5:77:d4:b9:68:9a:c8:71:45:67:91:db:3c:
0a:0c:11:11:07:bb:94:82:ce:68:59:c1:39:54:7e:
24:2e:a5:6e:56:31:78:a5:f9:37:95:bf:7e:e3:38:
85:f5:da:d0:0f:dd:e3:d6:33:0d:8b:06:26:06:1a:
1a:04:82:9a:07:1e:9e:f0:69:47:63:22:a8:cf:a4:
b2:8d:bc:f7:01:c5:f6:92:1d:8f:74:6d:cc:da:b1:
d9:5b:7d:c8:25:38:98:43:09:a4:8a:64:f7:04:15:
06:cb:8d:4d:74:2b:77:67:0d:af:16:dc:a1:37:db:
e5:28:6c:1d:69:d9:67:99:b1:8f:b8:ba:bf:90:d8:
1f:b1:bb:a4:7a:e7:b6:e6:98:a8:fc:34:b1:1d:77:
ee:3b:b7:c2:6b:25:0d:9a:2a:86:f6:da:9e:9c:f1:
00:9a:f4:8a:fa:05:e7:73:26:c6:cb:af:7b:22:43:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:54:33:06:59:56:06:FF:5D:BC:A2:80:60:16:10:CB:1E:A3:99
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:44:ef:8f:5d:80:63:2d:58:55:0f:20:51:72:fc:25:c4:f8:
75:61:d8:fa:34:fc:c8:c2:32:89:dc:d0:17:37:b8:fc:3a:a4:
92:e1:9c:14:21:25:66:56:13:af:28:cb:03:c8:af:8e:79:5d:
d9:51:09:21:03:aa:22:38:3b:fc:7b:1c:39:d8:37:23:8c:54:
26:fe:4c:52:9b:ad:30:b7:bb:12:35:09:74:1d:6a:2e:50:1c:
21:a6:3b:89:ad:0e:41:c1:97:b7:bf:0d:2c:02:c4:8e:16:b6:
b6:d4:2f:66:54:9f:d3:80:e8:8b:67:2a:23:1f:83:d8:7e:42:
92:74:3b:f8:87:16:71:bb:db:18:a8:ec:4e:2b:eb:a1:15:d2:
38:9d:6f:d6:bd:92:c5:d0:fe:8b:a6:6c:b2:6e:1e:9e:1c:1c:
21:9d:1f:7b:d8:32:b7:39:6f:4f:9a:97:31:7f:5c:32:9f:92:
5d:5a:a8:40:73:44:72:06:26:c4:57:95:74:24:fe:07:6f:96:
67:92:75:0f:22:b6:d4:ec:48:f0:39:e3:48:80:51:1e:ab:a4:
34:28:16:68:b6:41:da:04:eb:b0:de:23:fe:e8:b2:88:4d:69:
04:8a:b0:78:03:fc:c8:50:29:60:e7:4d:c8:5d:5a:b5:fc:55:
3c:e0:50:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:53 2025 by rpki-client