Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: xP+DaSK3/5zE5JIQ8kvGLMnWoDLRjDCVIP04R8OTKP8=
Subject key identifier: 9A:D7:55:6B:35:4F:E1:34:9E:D8:9D:C9:B1:8B:99:FE:25:53:89:BC
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 01976D3E751A705CB74F28B09C01123C322F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 07:01:39 +0000
Manifest this update: Sat 14 Jun 2025 07:01:39 +0000
Manifest next update: Sun 15 Jun 2025 07:01:39 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: u+qEs+JX/B080NjRuhX30RY+hopvqM0fqJgnoQxceBs=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:75:1a:70:5c:b7:4f:28:b0:9c:01:12:3c:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Jun 14 07:01:39 2025 GMT
Not After : Jun 15 07:01:39 2025 GMT
Subject: CN=9ad7556b354fe1349ed89dc9b18b99fe255389bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:e6:05:8a:0d:ac:38:2c:d1:89:9e:ab:9a:
b6:2f:92:5b:fe:1f:e6:7e:1b:2c:0a:27:a3:1e:f0:
36:8f:91:7d:7b:33:36:ec:50:af:63:40:b3:32:51:
63:dd:3d:31:3f:32:40:7c:eb:2c:78:cf:29:ce:54:
56:a4:ca:67:4f:d0:a3:f5:d7:30:67:a9:9d:30:25:
68:8c:6e:62:12:27:ff:ce:89:44:09:10:be:0a:ef:
a3:25:4d:c6:e2:89:26:50:8f:ac:f7:c3:c9:d1:51:
40:d0:85:8a:4f:eb:19:f4:6f:4d:8c:76:77:e3:a8:
e9:4c:ae:bf:83:35:e6:88:45:e2:46:0b:da:14:96:
72:bb:c2:8c:e4:46:31:b7:59:b9:2d:eb:e6:51:7e:
5c:c0:c2:26:11:5c:76:c1:ad:1c:0b:b6:2e:85:6d:
42:57:d1:a2:ca:77:c6:97:10:6a:2d:55:1b:91:27:
da:92:d6:ce:eb:33:21:f6:0a:5b:b1:eb:e7:c4:89:
4f:dc:a6:30:c0:dc:8f:43:56:75:79:69:87:18:05:
45:d4:8a:99:03:91:e9:62:c3:cd:77:64:33:ee:4d:
5a:34:fb:04:6e:2f:f7:06:01:fa:cd:48:62:a4:08:
43:b6:a6:f7:18:70:9c:af:6f:4d:95:ab:59:19:ac:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D7:55:6B:35:4F:E1:34:9E:D8:9D:C9:B1:8B:99:FE:25:53:89:BC
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:07:59:65:20:da:85:0b:52:2a:fe:5b:3f:59:5d:fc:34:24:
ee:66:2d:9d:51:87:78:05:2b:e2:57:1e:c1:4c:2a:a4:57:91:
07:51:ed:f1:71:7e:88:31:a2:62:47:17:a2:21:7f:15:38:8b:
f3:d8:b5:39:aa:11:eb:e5:4b:56:b2:b7:39:1b:b6:e1:b2:87:
78:e9:e0:a4:0b:8a:da:eb:5d:fa:39:13:95:2f:84:42:4c:12:
12:9c:0a:66:37:cf:4d:1b:64:0c:a8:3d:e2:d0:ce:08:6f:c2:
2e:be:4e:3a:bb:be:dc:27:68:1d:e3:79:24:ac:fb:03:12:d3:
44:b9:ea:b2:79:59:7e:99:70:9a:54:44:e0:0a:27:93:bb:f6:
6f:86:b3:cc:ba:0c:e1:d4:e6:db:17:a7:27:1f:6f:9d:9c:f3:
78:c4:66:e2:7e:fc:c1:9f:0d:a1:25:39:5a:98:14:ec:eb:23:
0f:28:92:0a:74:56:32:98:2d:d1:ff:fa:1f:61:1e:1c:89:d7:
2a:72:29:f1:0a:b7:d3:2e:b5:78:ce:76:33:a1:88:ca:e7:fc:
1f:79:6c:dc:3c:51:38:65:55:8b:67:91:66:23:22:c4:c0:b7:
df:b3:9f:8d:31:50:da:1e:65:0b:ad:14:c3:58:91:52:78:8c:
e8:5c:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 16:23:49 2025 by rpki-client