Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: zaN3fYOaEi3nQu3f66yVVnaiUchVIZB1zgZzjdtr26w=
Subject key identifier: C5:D0:54:6E:87:B5:8E:E7:98:1E:5C:0F:2D:51:66:1C:F1:01:2D:D1
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 0197387437C4A3878522363107FC61681D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 05E5
Signing time: Wed 04 Jun 2025 01:00:29 +0000
Manifest this update: Wed 04 Jun 2025 01:00:29 +0000
Manifest next update: Thu 05 Jun 2025 01:00:29 +0000
Files and hashes: 1: 0FvyRdwuNrCgMP49Gm05_Jf24wo.roa (hash: VrNtxHJD5r4AAcIekiYzDFEjX0OLNvQVaPqP96ejauo=)
2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=)
3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: bXIlP6YgDsgHEgSKPEzI+sdm2Vc57nulRu2R279o6hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:74:37:c4:a3:87:85:22:36:31:07:fc:61:68:1d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Jun 4 01:00:29 2025 GMT
Not After : Jun 5 01:00:29 2025 GMT
Subject: CN=c5d0546e87b58ee7981e5c0f2d51661cf1012dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:ee:c4:fe:c7:6d:5f:d6:0c:d6:b2:0e:c0:
25:40:ee:f8:0c:b8:b0:5b:fe:1a:ce:72:a9:6d:37:
5c:eb:b7:44:75:ca:9e:e7:a7:23:d5:6d:2f:96:80:
5d:e4:92:f4:b0:0d:59:a9:6f:63:5e:8a:b6:89:0a:
23:02:0d:cd:53:99:d2:22:80:16:fa:d9:9f:21:c2:
87:65:af:dd:91:1f:1a:c3:60:b8:7e:8c:95:34:13:
48:b0:c4:56:62:3e:1f:dc:5f:cc:84:fa:a3:e6:e9:
17:9b:8a:49:4a:97:be:e6:3e:87:ee:36:fa:7f:be:
3f:09:61:5c:34:7d:20:b1:bb:9b:2e:29:5b:25:96:
16:4c:e3:49:13:76:df:61:af:0a:84:53:b3:dd:ff:
2b:87:48:f9:60:be:7b:9f:29:f8:fd:77:e7:f1:39:
1a:39:9b:20:83:bd:5e:57:0e:69:e8:85:3a:d9:8c:
86:03:a9:55:cf:ee:98:b6:60:a6:d8:94:38:f6:1f:
98:0a:0d:9c:d4:b9:1b:cd:46:54:e9:0e:4b:4f:2e:
05:f5:a3:3c:52:da:bf:73:db:fb:45:09:be:26:a1:
b7:67:18:ce:ef:f2:83:52:18:0b:e8:3a:bf:fb:af:
fc:be:b5:47:7b:b4:2a:96:26:c8:9d:5f:2a:97:c2:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D0:54:6E:87:B5:8E:E7:98:1E:5C:0F:2D:51:66:1C:F1:01:2D:D1
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9f:71:55:0f:dd:55:ba:01:64:b3:76:3f:f7:d2:66:50:63:
1b:1a:07:e0:7c:ae:80:6b:83:92:3f:22:93:24:1b:38:f6:1c:
ae:e0:ce:ec:d1:e8:e9:4e:ff:b5:84:49:9f:ce:6d:a9:1b:fa:
17:3b:1c:86:74:49:de:c0:43:6a:59:2d:ad:91:a0:97:61:d4:
7c:7b:1a:5b:d3:03:db:b3:ce:a2:27:79:f1:a4:15:cd:7b:52:
c3:83:2f:d7:83:5b:3b:4a:a0:01:f5:5e:19:59:b7:6a:dd:e3:
f6:70:9e:af:34:05:1e:46:c2:32:9c:ff:21:95:5b:83:ad:4b:
bf:bd:b9:15:61:8b:1c:99:b0:39:59:cb:6a:1b:97:dc:b3:f0:
0d:07:d2:aa:69:b4:9d:38:e4:84:3a:61:a6:09:20:4e:6b:a9:
5d:76:69:02:64:59:10:cd:fb:3b:1d:f6:8b:73:f9:8f:c0:9e:
62:16:37:a5:c8:54:fc:e0:ae:0f:55:46:af:23:e6:9d:55:28:
cb:17:37:6f:b5:cf:fa:8f:b7:34:ea:e0:4a:4b:2a:5d:25:eb:
cf:01:8e:06:37:eb:82:4a:e6:74:1a:96:80:0f:f6:74:cf:d3:
2a:b8:e5:02:3c:3d:1b:76:af:45:2a:02:f5:7c:76:42:5b:7a:
58:0a:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:36:13 2025 by rpki-client