Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: Mi8QZlq/g+eBItA6mb74sUNYLs6FF/EKCnJ7binRy6M=
Subject key identifier: DC:FA:01:E8:00:10:A6:B9:AA:21:77:FB:BB:82:D2:A4:24:CE:AF:45
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 019758002E0A3B6C1E1153F275AAF085AE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 0526
Signing time: Tue 10 Jun 2025 04:01:36 +0000
Manifest this update: Tue 10 Jun 2025 04:01:36 +0000
Manifest next update: Wed 11 Jun 2025 04:01:36 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: bfz//R1T7ERWu29oezQw4MTcaeBKRbi79ggTUMStYuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:2e:0a:3b:6c:1e:11:53:f2:75:aa:f0:85:ae:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Jun 10 04:01:36 2025 GMT
Not After : Jun 11 04:01:36 2025 GMT
Subject: CN=dcfa01e80010a6b9aa2177fbbb82d2a424ceaf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:9a:0b:91:1c:c6:fe:0c:b1:15:b6:fc:2c:
8e:19:c4:a2:76:30:38:eb:5d:d8:4a:98:d1:e4:e4:
93:53:f7:99:20:e6:f3:7c:09:e9:af:c4:eb:48:47:
ab:92:1c:d9:29:86:fb:4f:0f:c2:d7:8e:c1:70:4e:
02:ae:b4:86:e6:17:c2:38:f8:b1:46:74:d1:99:6e:
2d:fe:7f:38:31:8f:02:a3:74:61:56:e9:93:ba:e5:
fe:9e:c9:33:ab:5b:bc:67:a7:52:92:a6:e7:40:0b:
e1:21:fa:ec:39:94:40:9e:37:f9:d6:d9:c5:8b:df:
ec:38:67:aa:84:5e:27:08:c2:6c:63:c4:2e:a9:24:
61:b9:f9:ab:87:b8:7d:aa:2f:1c:ca:23:05:10:26:
7a:62:ba:23:09:08:a0:00:a0:66:05:b1:5e:eb:33:
7a:8f:3b:4f:22:5d:4b:20:6f:00:29:de:84:3f:86:
f6:26:27:41:ac:31:9e:4f:52:fe:46:0d:75:ca:0b:
6b:61:8e:04:79:30:70:6c:0e:b1:e6:04:36:8e:1a:
51:41:18:09:01:dc:92:6a:a1:45:ac:bf:3e:3b:4d:
bd:17:64:ec:00:0b:db:f1:f9:0d:bf:63:47:21:6b:
b5:76:f6:13:bf:3a:72:75:59:44:bd:3c:31:d3:59:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:01:E8:00:10:A6:B9:AA:21:77:FB:BB:82:D2:A4:24:CE:AF:45
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:46:4d:03:b2:55:d1:c2:b0:30:4c:a2:48:a5:03:c5:9a:
09:cb:e4:32:00:45:85:85:be:9d:63:8c:34:a9:22:fd:97:7f:
93:d9:1b:7b:9e:db:e5:ec:48:5e:a7:59:d6:b0:f1:a6:d4:67:
95:c6:eb:4e:9e:20:25:20:f5:72:85:83:12:76:77:88:1f:51:
17:24:82:75:7e:9e:5e:37:aa:a3:b7:c8:89:76:b9:4d:9e:00:
53:cb:46:7f:81:d2:9b:be:3c:8f:e0:26:23:ad:ba:0e:0a:c1:
5e:94:90:99:59:59:d5:c7:f4:5d:df:71:ec:2e:c3:12:59:29:
ea:8e:e1:76:8e:87:d2:c5:c7:6b:7c:8b:b0:ed:a0:c4:9e:a2:
02:27:33:e6:7e:e9:53:11:bf:c8:ab:04:0b:48:83:c7:ae:e0:
a2:5d:00:c0:29:ef:74:c3:d0:df:f0:33:c0:44:df:a8:ea:22:
78:21:f2:d9:91:9e:d6:71:17:b1:ee:11:73:54:50:ab:c1:3e:
8d:80:ef:dc:cd:c6:04:da:fc:73:db:bd:38:3c:30:a8:6f:f3:
ae:de:e7:cf:61:3b:7f:34:56:3f:91:7f:53:03:d0:93:3c:a0:
2b:5c:f1:33:c3:c5:5a:ca:90:72:b6:ba:1e:53:18:42:a6:6e:
a1:a8:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:31:11 2025 by rpki-client