Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: 3/wgP20TowodDh2pdR475ZJ4sWHwL/eBy/5fCDFOLcs=
Subject key identifier: FC:A4:6C:30:19:C3:8F:3D:5B:82:F6:DF:0C:2C:44:41:8E:B7:C8:8B
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 01974B5625A946A9D4A3E88069E076A259F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 0F7A
Signing time: Sat 07 Jun 2025 17:00:26 +0000
Manifest this update: Sat 07 Jun 2025 17:00:26 +0000
Manifest next update: Sun 08 Jun 2025 17:00:26 +0000
Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: VvN3lW2mpePQtAYhcpJwFFAFOm/Yppj3BCrYeId4VQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:25:a9:46:a9:d4:a3:e8:80:69:e0:76:a2:59:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Jun 7 17:00:26 2025 GMT
Not After : Jun 8 17:00:26 2025 GMT
Subject: CN=fca46c3019c38f3d5b82f6df0c2c44418eb7c88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:a2:e0:04:28:2c:05:04:d3:90:ab:b2:57:
43:e7:16:d0:d4:e7:d2:3f:2d:a2:03:d7:75:c1:2b:
76:92:37:a5:a7:62:f6:f0:e4:52:23:0d:27:82:5c:
c5:15:14:c2:72:b3:15:9f:c9:2e:a2:fc:10:dc:e8:
93:d5:95:dd:30:69:68:5c:ff:a9:bc:b5:a8:7c:a8:
20:31:17:9a:84:fb:eb:ee:b0:c7:3c:0a:b7:cd:4d:
77:34:e2:28:fe:9e:1c:9c:50:68:34:19:6c:81:ea:
c4:f9:24:07:18:14:1b:b5:18:f7:29:74:e3:bc:d0:
1e:31:b9:80:2a:dc:77:14:8a:7a:63:c9:f7:59:36:
cc:3e:00:7f:0d:e4:7d:61:20:6b:2f:fc:b1:a3:bc:
c5:74:cb:c7:c5:43:bb:c9:fa:3f:d8:ef:c2:46:9b:
4c:3f:91:d0:51:5b:00:34:c5:7c:a6:e0:1e:a3:ca:
d0:d1:d4:f8:df:0a:b2:ea:e4:1d:2e:3d:c0:60:83:
10:72:ad:f1:59:f0:5a:a6:06:62:4d:89:e9:ca:d3:
45:8b:bd:b9:0e:93:f1:ac:27:2d:d1:11:c9:07:f4:
62:d3:10:cd:07:43:92:ac:f5:9c:90:59:48:56:74:
a2:06:32:64:10:80:29:cb:e4:ee:c7:79:45:7d:9f:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:6C:30:19:C3:8F:3D:5B:82:F6:DF:0C:2C:44:41:8E:B7:C8:8B
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7d:d4:21:cc:58:de:7d:b9:7d:15:22:d4:a3:49:2a:53:a8:
1b:72:7a:a2:ef:9b:82:86:54:ab:14:01:78:b4:c9:28:03:f5:
3a:ed:9c:32:57:0f:12:6c:8b:3a:99:71:8e:cf:e6:a5:7f:ae:
61:b7:90:c5:12:8c:24:93:0a:cf:98:6f:9c:b7:31:a5:d6:e6:
dc:99:bc:b8:c7:90:87:a1:30:6b:90:f0:7a:bb:d4:dd:c0:06:
c4:29:8d:9d:c0:50:69:af:72:64:6b:89:d3:26:83:e2:92:3d:
da:20:98:38:c5:37:f2:4e:8b:ba:ab:5c:75:ea:ce:ad:e1:01:
6b:b8:eb:74:09:68:f4:46:c5:17:7a:5c:0f:61:a9:09:64:e3:
41:c1:69:96:99:4d:81:79:5a:8a:b7:d6:31:68:67:99:45:9f:
9b:7b:7b:c5:b8:55:0f:ee:c9:39:a1:24:cc:eb:e7:93:da:c6:
a3:c5:2b:3e:96:a1:ab:a2:ac:2d:b7:40:90:55:8e:06:b4:57:
7b:23:b6:12:53:28:86:8f:ce:17:af:95:9b:e2:36:b9:6f:1f:
47:7f:e8:49:2b:0e:d2:e8:9c:b4:f5:80:68:a7:3b:66:78:0a:
2f:be:8a:b9:06:ca:b2:7e:60:1d:f7:2b:0a:eb:cb:39:d4:e1:
c2:9d:50:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:04 2025 by rpki-client