Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier: UD4L7ufw7ckvRoTmGxA2L7A5y9SCL+aTDEfB56NERsA=
Subject key identifier: DC:16:52:C3:4D:DB:9F:D9:0A:86:9C:80:F3:84:AF:81:1B:70:84:26
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 01975BA537A0D8DB5B6440144BA2ABB78637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number: 0311
Signing time: Tue 10 Jun 2025 21:00:43 +0000
Manifest this update: Tue 10 Jun 2025 21:00:43 +0000
Manifest next update: Wed 11 Jun 2025 21:00:43 +0000
Files and hashes: 1: 3cGSK8NVA9eNtztBrAr51UavoEk.roa (hash: pMEP1TJfXu1V+w800yX1v0YDExi+6bPx0cct+Fh5aw4=)
2: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: 9ui0nVuAbeeGI9od8J54AKpbR43D5NsffrBF/2LLnm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a5:37:a0:d8:db:5b:64:40:14:4b:a2:ab:b7:86:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: Jun 10 21:00:43 2025 GMT
Not After : Jun 11 21:00:43 2025 GMT
Subject: CN=dc1652c34ddb9fd90a869c80f384af811b708426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:d3:66:ca:b0:85:ec:c8:14:6a:50:27:46:
f3:c9:0c:7f:5e:32:bc:13:c9:e5:41:df:a0:98:c7:
7e:79:39:c0:08:e9:50:01:bf:8f:b9:b2:64:5c:7a:
9b:4a:73:f8:2d:02:c9:b7:34:61:2d:66:28:fc:b4:
0e:2a:d4:9c:0a:78:82:43:79:1e:e6:bf:5a:83:70:
48:ae:8e:ad:5b:ba:3b:e6:63:c9:c4:43:f5:5a:92:
6a:b4:17:4d:86:6a:19:29:72:e0:4b:06:7c:32:93:
16:00:8f:61:f4:e8:28:01:12:03:74:22:ff:4d:4c:
d0:71:bf:c4:d5:9f:f3:ef:a0:3b:74:19:93:86:fe:
18:e3:50:c1:fd:99:25:7c:c8:03:3e:06:23:aa:ba:
ab:e6:35:70:84:91:e8:12:5d:33:eb:b9:4d:d8:2c:
27:0f:ef:61:b5:5c:e1:f2:6b:16:d9:94:7a:2f:e3:
aa:97:0a:69:86:8b:99:52:4a:92:ab:1c:6b:39:ea:
60:7c:a1:7b:cf:68:8a:b9:f9:c4:a2:75:98:67:61:
12:74:58:5d:52:6d:6a:e7:ae:40:40:d1:84:f9:c1:
ab:3b:b4:02:40:26:3f:fa:90:2f:fb:15:95:73:39:
b8:30:2f:e8:6a:09:0c:a3:16:dd:4d:9a:74:44:2f:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:52:C3:4D:DB:9F:D9:0A:86:9C:80:F3:84:AF:81:1B:70:84:26
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:16:bd:74:4c:b0:22:6e:55:87:32:69:b4:c2:d7:3e:1a:ea:
2a:2b:12:43:a0:36:65:46:62:72:92:86:0b:4b:d6:b5:dc:0e:
a8:3d:78:9e:4c:c3:48:6c:d2:80:55:5f:e3:9c:d4:92:4c:c5:
cc:0a:6e:9c:4a:fb:77:fa:85:b5:b6:be:20:5a:c4:7d:b3:bc:
9c:0d:b7:c0:82:4b:d4:2e:85:39:15:f7:2a:f7:f9:44:c7:ac:
ac:f8:58:dd:43:64:41:87:e9:f7:a0:07:7c:b6:22:f6:99:31:
8d:d5:10:77:7a:2e:9c:a0:39:25:f3:d8:71:ab:72:c8:8c:3c:
98:c0:24:6f:87:2c:23:d3:4d:49:74:24:bd:16:69:b4:14:4f:
07:05:10:a5:30:20:99:f9:2b:b0:03:09:3d:76:13:dc:14:bb:
e0:8a:99:d4:b8:c1:29:b2:36:ac:ef:3f:49:8e:86:60:46:90:
d5:73:03:60:1d:da:a9:ba:70:69:c7:56:35:ff:0d:5b:31:39:
31:b1:40:f3:84:a8:90:9c:3c:ee:e0:7f:ef:84:44:3b:6f:5b:
88:de:31:3a:49:c5:82:18:57:17:41:b5:8e:33:02:03:9e:ce:
a9:67:b3:76:69:26:84:06:48:46:10:0b:c1:78:96:02:3e:2e:
3a:2c:51:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:35:27 2025 by rpki-client