Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
File: 5FudrqoDQlXqMxFPWLiMHD48fK8.mft (raw, json)
Hash identifier: ABYYaLWKU4p14G+DK7G7anoGxDWcStb1KrAjzdAXBGc=
Subject key identifier: 95:BB:1C:6F:D4:7F:11:5C:F2:C0:D6:A6:25:09:48:23:33:4E:B5:20
Authority key identifier: E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
Certificate issuer: /CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Certificate serial: 01975E01911ECB6DC9D0914AC6E5B202F3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
Manifest number: 0CD2
Signing time: Wed 11 Jun 2025 08:00:50 +0000
Manifest this update: Wed 11 Jun 2025 08:00:50 +0000
Manifest next update: Thu 12 Jun 2025 08:00:50 +0000
Files and hashes: 1: 5FudrqoDQlXqMxFPWLiMHD48fK8.crl (hash: 8HXcGkdNxrY85rfKzCapRAdWTupDUR3063x+RGv52qg=)
2: GzZOn0FMwyF0PqvIWI6Nnb-Vd4g.roa (hash: 5J/Uh3Vu4lMEWtHw6mjugw4/PpXu0iZuwIZUgCw3aCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:91:1e:cb:6d:c9:d0:91:4a:c6:e5:b2:02:f3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Validity
Not Before: Jun 11 08:00:50 2025 GMT
Not After : Jun 12 08:00:50 2025 GMT
Subject: CN=95bb1c6fd47f115cf2c0d6a625094823334eb520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:bb:44:e3:26:1c:ea:7e:f0:c5:b3:3d:0f:
36:43:24:69:41:d2:52:17:cd:2c:21:90:dc:27:47:
76:e9:d9:ad:14:47:cc:ab:eb:26:02:56:bf:59:65:
01:f1:7c:1e:6f:b3:f1:fc:57:e7:aa:cf:32:22:50:
f1:6a:83:a3:3a:b0:52:d9:5c:09:69:55:b8:10:f2:
4b:41:97:84:13:ce:ff:45:d9:8e:c9:94:c9:df:5f:
c2:71:3c:83:94:e6:55:35:1d:4b:81:2c:3d:ec:8c:
7a:90:31:25:85:e6:ce:35:f3:f5:7b:b7:29:29:39:
77:47:ba:0e:17:ef:82:81:a8:7d:dd:00:f8:79:5e:
6a:fb:cf:a3:0b:00:d5:64:e7:14:66:2a:88:4b:50:
d1:72:6d:9f:f4:7f:e9:6f:28:22:1f:95:41:64:09:
70:da:ab:a3:bf:02:51:2c:ca:eb:14:e3:5c:b1:69:
ae:b0:54:7b:5d:43:23:c5:f6:1f:3a:1a:a2:ff:83:
e0:59:bc:ff:53:e8:60:e4:b7:c3:a0:3c:c3:ed:7e:
3d:d3:45:66:85:f3:b6:28:a6:04:10:10:c3:a8:46:
9c:c4:25:e3:0f:66:ea:9c:57:96:ab:8b:a9:cb:97:
2f:e3:6a:83:52:de:8c:dd:2d:9b:51:71:5a:62:bd:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BB:1C:6F:D4:7F:11:5C:F2:C0:D6:A6:25:09:48:23:33:4E:B5:20
X509v3 Authority Key Identifier:
keyid:E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7f:65:8d:69:fa:7c:6f:c3:de:31:25:42:29:0c:81:17:79:
6d:d3:19:da:19:16:88:d8:1c:82:0d:f9:92:8b:b8:e0:f7:ef:
b0:42:c1:60:aa:4a:ac:07:7e:b2:f9:5d:7e:a1:fd:2b:a6:a4:
2f:8c:37:18:64:34:8a:9a:17:48:e4:e1:cb:f8:bf:02:2d:78:
e3:7e:98:95:44:87:26:5e:8f:5c:f2:5f:6a:67:09:e3:b7:8d:
4d:37:1e:dd:cb:73:c9:f5:bd:88:f4:78:37:44:68:0c:a0:08:
0b:bf:06:86:e6:66:0a:e4:aa:de:bf:24:91:2a:94:31:5e:01:
ea:b1:72:ee:dd:72:3b:23:64:9b:b1:af:64:1b:fb:8c:6f:77:
e7:e3:cd:db:28:37:43:2a:28:c2:b6:07:7a:62:38:80:a7:aa:
03:a6:10:ea:23:f1:6a:18:28:a4:13:c9:91:e1:f2:54:3e:ea:
9a:73:ae:6d:a8:ba:32:e9:10:27:dd:33:23:cb:22:2f:14:7c:
f4:7c:23:fc:97:aa:b1:dc:2a:34:61:9a:13:81:fb:7b:33:0b:
3d:29:f2:5f:12:8d:cd:a1:8a:50:b6:a5:79:5d:0d:6f:52:09:
56:ac:40:95:4f:10:0a:84:b2:18:ae:ed:ea:ad:66:17:98:c8:
e6:66:be:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:05:44 2025 by rpki-client