Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier: swU2d7y/eZiFTcmC1D/jOuGY9f4AKVIFIPe5VKrVrAQ=
Subject key identifier: E2:26:93:C3:78:06:6D:09:3F:E3:15:C8:B0:7B:ED:F9:8A:DF:E2:FD
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 01975F820863750830F55AC9A2332E9EB538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number: 0313
Signing time: Wed 11 Jun 2025 15:00:46 +0000
Manifest this update: Wed 11 Jun 2025 15:00:46 +0000
Manifest next update: Thu 12 Jun 2025 15:00:46 +0000
Files and hashes: 1: 3cGSK8NVA9eNtztBrAr51UavoEk.roa (hash: pMEP1TJfXu1V+w800yX1v0YDExi+6bPx0cct+Fh5aw4=)
2: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: i9dBkdiq+43SYtI9hTyn0TSxsZKr7BMIu/CwpeE5gkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:82:08:63:75:08:30:f5:5a:c9:a2:33:2e:9e:b5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: Jun 11 15:00:46 2025 GMT
Not After : Jun 12 15:00:46 2025 GMT
Subject: CN=e22693c378066d093fe315c8b07bedf98adfe2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:d6:05:99:00:56:92:e5:b6:bb:d4:eb:16:
bf:db:8f:c9:b7:a3:6a:e6:bd:e1:f2:22:12:e4:45:
28:ea:58:2a:35:58:7d:d3:80:b7:53:70:30:11:65:
66:6e:63:5b:58:20:f5:74:d2:fc:d4:f3:87:c1:bc:
61:6a:98:49:1c:14:19:86:2b:fb:5a:4d:af:73:2a:
45:4a:88:0d:5a:77:e0:98:f2:d7:09:dd:18:6c:6b:
fd:90:24:82:f8:ef:ae:9a:da:d4:4e:50:43:44:0b:
a9:bc:ab:8b:6c:07:1a:61:8a:dc:d9:88:ca:bc:c8:
39:02:15:e9:01:92:b3:75:80:dc:89:f5:6f:11:2d:
e0:39:3d:2d:9e:dc:92:9e:d2:0d:bf:7b:17:76:cd:
18:61:38:ce:43:81:c1:da:a4:7a:dc:a8:63:02:44:
71:f3:f3:7c:08:7d:7c:5b:68:ba:71:d0:6b:11:c5:
92:02:31:f3:0e:86:c9:f7:86:2f:9b:34:8d:48:e4:
a9:9d:5b:11:90:50:76:cb:c7:e6:ab:ea:51:96:8a:
fd:83:92:1e:64:a4:6e:63:e9:60:93:6e:c3:80:31:
f9:b3:d7:4d:68:16:b0:b7:d7:48:52:5b:d4:b0:e7:
c8:a4:ea:eb:9e:48:1c:44:7b:b9:f9:19:8d:42:dd:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:93:C3:78:06:6D:09:3F:E3:15:C8:B0:7B:ED:F9:8A:DF:E2:FD
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:83:14:26:be:c3:cd:f1:40:3a:8a:7b:b2:5e:68:5f:07:b6:
83:69:d1:d1:cc:a5:49:d9:7e:32:99:74:da:22:3c:19:af:14:
2c:46:a6:5f:f8:b5:6c:82:61:91:5d:59:58:e0:a8:91:c0:d7:
81:b2:71:f4:04:d0:db:6f:02:f4:07:c8:60:1c:df:43:6e:20:
81:90:3c:1f:62:41:42:a1:c5:71:c4:92:76:ef:dd:09:5d:5f:
d6:4e:66:91:30:47:eb:29:8a:42:43:36:d4:9d:30:3b:9c:8d:
af:36:d0:c6:03:f4:eb:05:5b:a5:72:c0:0b:dc:0f:79:46:54:
89:10:3b:4c:2a:71:49:76:78:7e:fc:fa:c2:fb:eb:d5:7d:78:
ef:a5:77:c5:1e:cc:a8:78:1e:90:d2:6f:8e:fe:a0:94:f8:a9:
df:c4:68:ea:ae:ff:86:9f:38:bb:fe:ec:18:42:5b:7a:81:e4:
38:4e:2b:3d:5f:29:8e:7e:ec:43:79:eb:6a:60:11:fb:08:45:
2a:52:2c:d1:a8:a7:be:ce:24:01:7c:31:1f:9f:56:a0:49:1a:
9b:00:ff:84:ec:74:02:ef:5a:b1:a4:a1:9d:b7:71:bb:e6:d1:
d6:ac:04:66:ee:11:ab:af:89:fd:92:60:f4:11:18:07:8c:41:
8f:cd:3b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:41:26 2025 by rpki-client