Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
File: 5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json)
Hash identifier: 9wILrGQ3lwBe0CCnab/H5lzKy4zbD5Yf+6OkHVOVCFE=
Subject key identifier: E4:E9:E9:3A:A0:73:1F:24:8A:85:81:FD:C3:E3:B5:7F:F9:2C:C6:E8
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 01974EC5239849D014DC698495AF790C9886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
Manifest number: 0325
Signing time: Sun 08 Jun 2025 09:00:31 +0000
Manifest this update: Sun 08 Jun 2025 09:00:31 +0000
Manifest next update: Mon 09 Jun 2025 09:00:31 +0000
Files and hashes: 1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: ErL/qEb/H7xuLaHa3nzolDdaaphZtrikkLT/ADyZWIk=)
2: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (hash: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:23:98:49:d0:14:dc:69:84:95:af:79:0c:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: Jun 8 09:00:31 2025 GMT
Not After : Jun 9 09:00:31 2025 GMT
Subject: CN=e4e9e93aa0731f248a8581fdc3e3b57ff92cc6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:f3:93:a7:73:ab:12:83:79:04:d5:3b:19:
8f:78:bc:45:20:39:33:8d:b4:fa:97:4b:ec:81:0e:
bf:97:71:26:b3:0a:78:fb:db:a2:05:a9:ac:31:8c:
9d:d6:6a:b3:6d:49:dd:98:5a:63:40:0d:e6:68:d5:
40:ec:95:9c:14:d4:f8:66:ea:62:b7:5c:32:c8:eb:
12:4b:48:98:b9:ba:58:fa:c6:52:8a:f0:30:91:ab:
c6:67:4e:ae:92:d6:8d:d1:df:25:6b:9b:95:4b:27:
e2:a1:de:3b:46:27:83:ee:e6:39:b4:69:66:b0:60:
d5:9b:2e:1b:a2:7c:a7:33:55:ab:b6:e8:e3:42:88:
74:e3:7b:22:fb:89:b4:8e:11:2c:ce:ef:d7:83:b4:
63:c2:d6:1b:40:4b:2c:d4:eb:67:90:23:64:a6:e6:
0f:57:d6:bb:81:fd:2a:76:64:a7:10:8d:b9:ef:77:
48:27:51:e7:a7:31:cb:5b:7e:f8:55:69:da:25:ca:
eb:7b:68:4c:82:d5:ad:a3:76:41:39:d6:48:07:10:
10:f1:dc:ca:ca:2a:16:e5:48:dd:15:43:94:2f:51:
c2:60:b8:e2:29:d3:2a:79:05:86:ff:a2:ee:49:07:
61:18:a7:09:e8:3d:72:2b:7c:1f:7c:35:89:1b:92:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E9:E9:3A:A0:73:1F:24:8A:85:81:FD:C3:E3:B5:7F:F9:2C:C6:E8
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c0:c5:c4:88:d4:68:e3:fb:49:c8:e4:d4:77:4d:45:5d:70:
79:36:19:cc:0f:f5:cd:50:9c:a1:e2:b9:ff:57:cb:f3:7c:cd:
f4:d1:fe:e6:b0:64:b1:35:db:4a:32:13:5d:f8:21:a5:d6:7c:
ba:f6:c4:c8:e2:8a:c6:7a:c7:c5:3b:e4:32:11:2e:0b:71:6a:
e7:aa:ab:75:2c:d7:27:65:c9:b8:7f:41:35:b7:2a:37:a3:69:
ba:7f:e3:4e:8d:30:c2:9e:0b:fb:9e:8a:03:f0:17:a2:01:92:
bc:6d:b0:c2:b9:15:28:c8:ce:92:40:94:26:c2:1d:36:bb:35:
cc:1c:b8:6a:f9:2d:a4:a1:de:53:ab:03:60:94:94:a4:12:30:
43:e8:4e:24:d9:14:61:5c:a6:68:8e:21:f0:89:6d:80:34:3d:
f3:71:98:7f:72:b5:d7:0a:7a:a2:40:a2:2f:ec:0a:a8:ec:7c:
41:17:30:f2:e4:6d:29:0d:62:2d:c4:a1:6e:9c:be:8d:36:aa:
c1:49:fc:d2:38:0e:10:4b:41:81:c7:7a:c6:f2:ce:0e:be:16:
71:f9:77:0a:e5:a8:e3:d8:f4:cb:2d:7c:0e:b6:e1:8b:e0:af:
c5:e0:bc:1e:79:14:81:6d:04:33:68:95:bd:17:dc:f3:e7:0f:
64:be:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:47:54 2025 by rpki-client