Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File: 5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier: dFJO3AdQMeSPNxV0C2G+TZTC7A026e9cWEWM0pJWgKA=
Subject key identifier: 2A:B2:0A:B7:21:BD:00:35:D7:FD:83:CE:6C:A9:68:95:F0:2C:17:F2
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial: 0197481E833C08BC6FF829460130CCE941A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number: 0364
Signing time: Sat 07 Jun 2025 02:00:48 +0000
Manifest this update: Sat 07 Jun 2025 02:00:48 +0000
Manifest next update: Sun 08 Jun 2025 02:00:48 +0000
Files and hashes: 1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: nPMj9iOFystIt4A+1/BLpvAsNg/KZ/ma22KfgWJjHG0=)
2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:83:3c:08:bc:6f:f8:29:46:01:30:cc:e9:41:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Validity
Not Before: Jun 7 02:00:48 2025 GMT
Not After : Jun 8 02:00:48 2025 GMT
Subject: CN=2ab20ab721bd0035d7fd83ce6ca96895f02c17f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:ed:14:ab:58:3c:73:97:83:8a:6c:ff:f4:
ef:89:b5:d7:2d:9a:b3:a3:dc:6e:93:79:20:8c:1c:
c5:65:19:ca:95:41:d6:1f:c3:38:c6:54:51:4c:49:
36:d4:04:f6:e5:83:73:09:12:6e:5b:80:1e:ac:4a:
e0:34:b1:c5:29:11:fd:ac:3a:1b:cb:07:c2:43:f8:
49:75:fe:e9:f2:3b:ce:05:91:3f:0b:ef:05:1c:36:
dd:37:21:a6:6a:73:ea:4c:71:27:a3:18:4b:5e:59:
f3:69:a0:d7:6c:cd:89:65:32:7e:7e:fa:8f:59:d5:
2d:0a:34:51:2e:19:e9:9f:3f:31:f0:2a:21:39:25:
0c:5f:0a:98:33:fb:b9:1a:32:0b:39:3e:79:e4:9d:
f3:2b:4a:6e:e5:81:be:fa:8f:1b:0a:b5:ef:eb:be:
f8:cf:16:e9:0d:66:64:60:2e:d2:a8:a7:c7:d7:39:
d4:1e:a4:a4:37:d3:f9:b9:01:c3:a0:77:2d:44:0b:
63:cc:6d:48:4a:5b:a5:fc:2d:b1:82:17:dd:39:5f:
10:0e:30:ce:5d:8f:ad:83:85:5f:6c:51:16:ad:4c:
45:5a:32:ef:26:1d:8d:2d:4a:8e:b6:74:cd:2d:b9:
31:29:b4:57:0e:02:90:c1:0c:bd:5e:2a:4f:b5:96:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B2:0A:B7:21:BD:00:35:D7:FD:83:CE:6C:A9:68:95:F0:2C:17:F2
X509v3 Authority Key Identifier:
keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:70:74:1f:f8:68:c7:b7:d7:c0:9c:2c:27:77:d5:a6:8d:59:
4b:95:21:a6:43:bf:18:b2:f7:6c:7f:3b:98:51:16:24:1d:f5:
85:3f:d3:3f:2e:b2:fb:be:b9:4c:91:9b:55:8d:ad:05:29:0b:
05:7a:ce:f5:87:5c:45:66:73:05:68:c4:c5:f2:b4:9e:a6:16:
df:17:4b:82:34:f5:ed:d6:89:1d:c0:7e:8a:4f:f7:6d:ae:3f:
39:ec:4f:20:15:19:f7:2b:45:4b:61:76:cb:2c:c0:1d:b7:5a:
8d:7f:d6:77:c9:b9:a2:ed:e8:66:97:b1:24:0d:7b:e6:1f:37:
29:e9:b0:72:5e:50:98:c6:59:41:b9:fe:1a:f4:14:56:b4:06:
34:7c:39:30:a9:d9:b8:52:82:22:ce:28:90:22:0c:ed:3a:34:
47:90:04:41:16:fc:17:e4:88:2d:91:ef:a6:b4:5c:3e:9c:65:
0f:70:1f:eb:d7:c4:a2:e3:64:62:18:25:f6:80:73:80:78:de:
d5:c4:ce:0d:70:bb:27:30:fb:8b:89:fc:fc:d2:05:d7:a3:f7:
86:91:fc:ab:3b:ed:16:6a:25:13:c3:7c:62:75:8a:c5:e4:f3:
bc:0b:5e:6e:33:fa:9e:55:b4:7c:6f:a9:5a:8c:b9:95:10:73:
fc:27:e1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:41:06 2025 by rpki-client