Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier: oy/cYNuziL1qXT0fY6OsEkONBNlYUUmpMjS4aAG1PrE=
Subject key identifier: 58:6A:AA:FE:AE:4D:62:5E:99:C4:AC:BB:24:A8:8B:BA:04:35:10:64
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 0197481E4CE0E00AE0E161EBE272BBC33A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number: 08BE
Signing time: Sat 07 Jun 2025 02:00:34 +0000
Manifest this update: Sat 07 Jun 2025 02:00:34 +0000
Manifest next update: Sun 08 Jun 2025 02:00:34 +0000
Files and hashes: 1: 5SbPyjmIYXelitOmA1AVO3bhm0Q.roa (hash: 1XIxpyYBD9DDRIa0BTpbMKp2ZvPzaojB9NovyRazhxQ=)
2: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: 47teCYtAgzLRtR7SMdJmMJXD3f/U5/4JR54LqrtFAd0=)
3: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (hash: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:4c:e0:e0:0a:e0:e1:61:eb:e2:72:bb:c3:3a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: Jun 7 02:00:34 2025 GMT
Not After : Jun 8 02:00:34 2025 GMT
Subject: CN=586aaafeae4d625e99c4acbb24a88bba04351064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:1d:e9:ad:1d:5c:60:c6:c1:90:6f:dd:1f:
46:c9:13:d3:98:f9:e1:0a:ee:2c:f2:b9:c5:57:68:
d5:36:ad:87:63:c2:ad:e9:6d:83:28:6c:a3:ba:d1:
15:f2:c6:81:c2:54:05:57:d2:ad:db:ee:78:9b:03:
d4:82:2a:51:d4:dd:5c:23:07:3f:32:a5:b5:9a:60:
ba:66:85:63:ba:15:f3:3b:05:97:98:c9:d9:39:37:
dd:b8:e6:7d:14:29:ec:e0:b2:b0:a8:bc:96:52:ce:
68:ab:68:d8:3b:8c:b6:20:9c:10:71:7a:3c:65:2f:
b5:b5:17:a5:e1:35:05:e3:89:8c:13:ab:2f:07:a6:
01:19:38:3d:7d:fc:cb:3d:9a:aa:f7:da:d9:99:5f:
4c:d1:fd:5b:7c:36:6a:c3:65:76:89:8f:81:aa:6d:
91:04:e7:13:8b:ef:da:1f:4b:10:88:ea:38:03:cf:
09:3e:5f:54:e0:65:6a:02:cb:95:b3:89:68:28:56:
64:9f:0d:a1:75:85:67:06:47:48:35:cd:13:0b:e4:
b3:dd:1c:ee:7f:c1:6d:5c:43:13:ab:5d:4e:38:b5:
15:02:ef:77:c1:09:df:cf:e4:05:bd:ad:05:a7:1c:
1f:10:47:8b:34:cf:28:3a:46:b3:5f:be:f8:a6:8f:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6A:AA:FE:AE:4D:62:5E:99:C4:AC:BB:24:A8:8B:BA:04:35:10:64
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:96:4b:7f:56:bf:d0:a7:10:8d:06:f0:a8:b6:a8:81:54:e8:
d0:7a:bf:d0:da:16:aa:c8:dc:4f:7c:7d:40:ea:e7:e4:d7:e3:
4e:24:56:58:df:a6:51:62:d0:4a:bd:7b:2f:8e:40:d6:b2:97:
5c:49:6c:fb:0a:f3:94:21:75:44:f6:08:84:91:8a:ba:29:30:
48:40:df:55:ed:97:55:2c:aa:35:cb:d4:77:71:1c:4f:01:d2:
67:d5:49:a8:bf:a3:ff:b4:c4:75:b8:cf:e5:3d:a6:be:1d:3b:
55:d9:cf:b9:a8:8a:84:66:65:27:ad:c5:ef:ad:2b:4b:dc:c9:
19:05:a6:0b:40:68:d7:c2:e3:8e:fa:e7:e6:42:af:02:35:9d:
e9:7d:de:c5:e4:28:97:9a:1d:1d:1f:27:2e:aa:de:36:fa:1a:
f8:a7:a5:7f:f1:ad:ec:17:3b:62:09:c1:c4:fd:b8:9b:e2:67:
da:4b:cd:ac:6c:71:70:e4:50:82:a0:4b:db:8b:8c:f0:8f:22:
9c:1d:76:e7:b8:84:ce:12:b2:bb:86:3c:34:66:b5:04:55:6c:
f1:05:02:be:20:92:48:7b:18:23:3c:da:4a:44:66:21:1e:88:
b6:42:b9:22:79:84:d3:36:65:be:7a:a5:14:e0:99:14:1e:2c:
c8:26:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:11 2025 by rpki-client