Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
File: 5uitxyAU5Xp04wROsWbnYJaPI5U.mft (raw, json)
Hash identifier: AdlWOvxBztXullnQlQXe/3KtPqfUP5IEl4PMzZIWmyo=
Subject key identifier: DD:91:F3:E9:86:04:43:5C:2A:2A:E4:95:1E:86:3B:CD:4C:23:E1:3C
Authority key identifier: E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
Certificate issuer: /CN=e6e8adc72014e57a74e3044eb166e760968f2395
Certificate serial: 019754C73ED54F79AB8BE5FB8653E2FB9E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
Manifest number: 0B53
Signing time: Mon 09 Jun 2025 13:00:33 +0000
Manifest this update: Mon 09 Jun 2025 13:00:33 +0000
Manifest next update: Tue 10 Jun 2025 13:00:33 +0000
Files and hashes: 1: 5uitxyAU5Xp04wROsWbnYJaPI5U.crl (hash: Gjj5FpN7WReL78iENC9/KYJOGCf9jrmNzY6CljWeCVg=)
2: Vd7ep1V7ja8rYIgwKvFOtZq4gy0.roa (hash: qbkrw3ma+AsEEUvI47lqqCL8eAGk/ZsP3EmHAoTEO0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:3e:d5:4f:79:ab:8b:e5:fb:86:53:e2:fb:9e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e8adc72014e57a74e3044eb166e760968f2395
Validity
Not Before: Jun 9 13:00:33 2025 GMT
Not After : Jun 10 13:00:33 2025 GMT
Subject: CN=dd91f3e98604435c2a2ae4951e863bcd4c23e13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:be:73:48:1b:2f:0d:34:b1:43:9e:18:4d:
d8:9c:22:70:5e:df:24:71:cd:64:49:98:35:c0:af:
dd:3d:bc:84:07:6a:79:06:68:b5:08:ea:97:fc:33:
63:ab:ab:1e:75:fe:99:e6:f4:d7:fa:d1:34:68:0e:
8e:a6:67:f2:62:85:cd:91:09:94:b8:17:ca:bf:73:
32:5e:5f:68:a5:ee:2b:1c:6a:13:b8:13:a0:a1:6b:
fe:c2:7b:3a:e7:c5:a2:34:ec:fb:c5:40:da:2c:8f:
6e:6c:e1:e2:4a:7c:c2:32:47:ae:ef:d0:cb:1f:33:
72:c8:45:30:e6:12:cd:31:df:d1:dd:c1:73:63:4d:
1e:f2:ce:0e:db:c6:b6:ca:1a:82:1f:f8:9b:62:78:
b8:a1:c9:cf:81:dd:c8:f8:84:92:80:b9:9a:4c:20:
8d:47:78:b7:7d:a0:52:cf:84:88:12:c3:73:2a:37:
92:ed:b1:ed:86:cc:d5:72:65:c7:53:69:73:36:da:
30:9d:b3:78:6e:70:6d:53:5f:90:3e:47:40:f2:3f:
52:23:0c:56:c6:cf:20:57:a1:56:df:1c:bb:5e:af:
64:39:3a:c6:aa:16:6e:57:d2:fc:91:9d:e9:d2:49:
56:eb:f3:4e:97:b1:0d:dd:f3:ef:0b:80:f1:64:be:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:91:F3:E9:86:04:43:5C:2A:2A:E4:95:1E:86:3B:CD:4C:23:E1:3C
X509v3 Authority Key Identifier:
keyid:E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e0:f7:20:1e:52:58:fc:63:3f:c5:11:23:4c:54:3f:ad:bb:
10:05:af:f8:8d:5b:d5:c3:72:f5:53:d4:86:b7:33:d1:33:89:
59:f2:84:ef:64:bd:42:d3:3a:2a:a2:16:3a:38:b4:c9:8e:9b:
93:65:5a:cc:96:4d:d0:81:c0:20:8b:b5:11:58:c2:f9:dd:46:
e4:85:bc:fc:46:a5:08:9e:ba:63:84:00:b0:80:9c:94:02:40:
f0:4f:74:3e:35:14:2a:07:90:21:9e:6c:fc:2a:c4:4e:23:4b:
1b:0f:c4:1e:5a:e9:05:6c:e8:08:e3:0f:04:fd:45:eb:cf:d3:
cc:ae:93:d2:34:43:fb:a1:1f:9c:cf:19:a3:55:2c:eb:d0:7f:
19:7d:94:8d:68:e6:77:e1:83:60:f3:51:54:25:66:9f:98:33:
8a:33:1e:88:6a:df:e7:a6:84:91:ba:c6:53:a3:9b:35:17:31:
9b:5a:9f:e6:cd:11:82:18:91:c1:43:4b:dd:7a:29:78:67:48:
d6:06:bc:96:46:26:3a:48:c1:c7:ad:94:63:80:72:bb:ab:b3:
de:d0:e8:7e:e5:27:8a:2f:59:a8:e7:26:ef:f6:3d:58:47:20:
1d:49:9e:86:51:1b:4d:d1:d0:8b:5a:ea:ec:d4:7c:d7:51:1a:
2a:52:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:37:25 2025 by rpki-client