Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: jG70+zQ0JCJ65UV0Y7eM5A8b1fb1dDT2QyMmkDYmABI=
Subject key identifier: 57:2A:47:60:7C:C5:43:1A:1A:E4:48:61:46:62:C5:DF:B7:7F:02:83
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 0197658402AB47B64E213F02B12993DF9137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 052D
Signing time: Thu 12 Jun 2025 19:00:39 +0000
Manifest this update: Thu 12 Jun 2025 19:00:39 +0000
Manifest next update: Fri 13 Jun 2025 19:00:39 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: Cuq6/Bv+8z6bHk3/WTxGbRXEOUkOdCKIclzepl5YwnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:84:02:ab:47:b6:4e:21:3f:02:b1:29:93:df:91:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Jun 12 19:00:39 2025 GMT
Not After : Jun 13 19:00:39 2025 GMT
Subject: CN=572a47607cc5431a1ae448614662c5dfb77f0283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:b3:33:db:73:ec:d3:92:1f:7d:bb:42:e8:
26:40:8c:95:1b:d2:10:71:34:41:28:a4:6c:45:00:
68:53:67:45:d5:23:4c:bf:1a:61:a7:53:52:16:3e:
d7:58:2c:88:44:2f:93:6f:da:34:16:7e:bf:2f:d8:
8e:b0:40:df:ba:84:a6:df:5c:e7:bc:21:8c:eb:c9:
31:9e:8c:3c:6d:c3:54:37:a0:51:54:c4:2e:84:d4:
7b:64:cf:af:67:7b:1a:14:4e:f1:02:d0:78:b8:b2:
b7:00:4d:7b:0d:49:75:bb:6d:df:53:09:22:de:32:
80:ce:aa:dc:fd:e2:7b:2c:b1:5e:ec:8c:64:e9:ec:
2d:18:40:75:26:37:08:f9:0f:b5:5e:7d:88:05:a7:
94:cc:75:e8:33:29:2a:6a:a3:a4:ba:a6:4c:e9:0d:
a2:20:4b:33:93:51:4a:9a:74:5d:01:8a:2c:e4:d0:
c6:0d:05:db:1b:84:b8:dc:88:e3:fb:01:6f:8e:40:
2a:d6:8d:8c:bf:9f:d6:2c:81:0d:2b:41:5e:59:75:
6c:27:c7:db:4f:a6:8e:3f:c3:a8:4a:51:14:58:51:
b9:6d:f0:1d:4d:7d:09:f6:d0:bd:44:39:3f:b8:02:
d2:78:96:77:d2:45:9c:2d:2c:ed:ee:84:ae:42:8a:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2A:47:60:7C:C5:43:1A:1A:E4:48:61:46:62:C5:DF:B7:7F:02:83
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b1:41:e2:fa:f3:1e:ac:5d:94:d4:c8:b3:82:4c:6d:63:ce:
d2:d3:9d:d8:ad:86:6c:09:4c:31:4f:39:a7:be:7b:4f:a2:9c:
04:e0:9d:35:18:98:27:52:2f:a0:ba:5b:f0:59:76:04:3f:8f:
31:4a:4e:f0:08:64:16:94:de:83:73:01:c4:81:63:55:de:a6:
ba:48:ca:e6:57:6b:b3:8d:aa:0d:03:46:db:25:47:3c:9f:3b:
d1:bc:29:5b:25:72:f5:14:c2:fe:87:7d:5f:54:9a:b9:84:68:
fa:8d:de:c5:a6:27:c2:b6:3b:0f:d8:ea:ae:30:5d:b0:63:4f:
75:cb:1a:aa:e0:9e:3e:09:bb:77:0d:e5:f4:b2:08:9a:7b:e4:
1d:c1:5f:ce:58:6b:ee:3d:69:1f:15:6d:71:1b:41:4e:e1:2c:
1d:94:97:75:65:fa:06:0c:fe:39:61:17:aa:e8:9c:d7:d9:de:
be:40:09:69:06:73:77:20:2a:32:e8:e7:63:7d:43:fb:e5:aa:
56:5c:9d:3e:2e:ea:f0:42:5d:38:48:45:cc:37:b8:22:de:a6:
ef:a3:51:f2:a9:a0:ae:88:58:06:16:a6:92:2f:ff:1b:3b:62:
0c:13:a7:79:16:df:c8:e4:93:5e:c9:6a:bb:42:cf:c3:91:45:
24:d2:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:36:25 2025 by rpki-client