Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: HfneNzPtQMPJSgqrISlGx0kEYt9fTAzWC3UwMbRrUC8=
Subject key identifier: FA:DD:52:82:B8:27:A8:AF:7C:AD:F6:67:BE:18:6E:7F:C2:29:6F:A8
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 019748F9E4BA41DDACDAF7068161CB9E5BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:25 +0000
Manifest this update: Sat 07 Jun 2025 06:00:25 +0000
Manifest next update: Sun 08 Jun 2025 06:00:25 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: HxLMFOAYQgyj6+/0nKlVMfDIALMidp9xMEUr68NeRwU=)
2: uY1QhTOWxV4UKC9D82RM9yb0zNE.roa (hash: Bvx8t4Oi0CQUF3Zey6rE/7ccr+hwq753xh5wAVW5P6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e4:ba:41:dd:ac:da:f7:06:81:61:cb:9e:5b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Jun 7 06:00:25 2025 GMT
Not After : Jun 8 06:00:25 2025 GMT
Subject: CN=fadd5282b827a8af7cadf667be186e7fc2296fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:34:d7:d4:f3:e1:6f:29:53:4d:05:7b:dd:
db:26:1d:42:29:4a:f3:73:50:b0:1c:50:ca:d0:60:
65:ff:80:bb:a5:f4:73:14:fd:d9:8d:da:46:40:0a:
e4:fe:83:66:31:5f:dc:0e:c9:b8:d7:bb:69:a1:b5:
8d:bc:03:11:f2:c3:2f:c8:db:8b:ad:65:4d:c9:51:
2a:d8:9d:d6:3e:2f:c8:eb:b4:a5:0a:c6:44:8f:c8:
72:50:7f:7b:40:3f:06:a1:ab:6a:78:3e:b7:8d:30:
47:cc:93:df:0a:3a:85:23:03:e7:24:8d:de:45:a5:
a6:44:70:5d:e1:ed:b0:98:0c:61:e9:b1:87:12:9c:
9a:70:15:c7:81:17:d7:32:ff:f0:62:a8:42:fb:75:
b3:f9:f9:bf:99:6d:63:ed:15:a3:45:36:85:1a:4a:
1b:4d:dc:30:8e:8b:14:74:0f:cd:cc:2a:1b:b2:5b:
4c:f3:96:8a:c3:cf:26:b5:35:c6:df:1a:be:99:ed:
07:cf:84:d1:73:29:c7:59:a6:5f:8e:3b:bb:d1:c9:
3e:8e:2e:ec:24:a5:31:3b:02:ea:b1:82:79:57:80:
a0:00:fb:92:6d:50:47:08:80:4c:ed:6e:f3:06:b3:
db:da:32:30:99:73:5a:bd:78:06:c2:06:1e:ed:0e:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DD:52:82:B8:27:A8:AF:7C:AD:F6:67:BE:18:6E:7F:C2:29:6F:A8
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:74:10:8a:c4:e3:31:a1:da:64:98:36:37:14:54:9b:57:0b:
46:22:ab:c2:11:c8:b6:38:d6:b1:8d:c2:15:bd:6c:1a:00:79:
91:06:4a:7a:8d:71:1a:07:c5:d0:3c:97:6a:36:16:b0:13:42:
37:1b:87:de:83:25:ca:f8:49:c6:1a:e3:f6:b3:a7:ad:04:83:
f2:75:90:a5:43:71:a4:c3:d0:44:e9:d5:dc:32:6c:2c:23:59:
4e:cf:04:85:09:3c:11:c2:6c:7f:16:5f:3b:32:19:9c:c5:91:
11:6f:d4:e7:56:94:b7:d5:55:da:12:67:ff:e4:17:74:5d:b2:
57:e6:a6:c4:ce:2a:d0:e9:f8:c1:e7:22:4a:4b:3d:21:7a:9a:
31:af:11:a4:11:3b:c3:8a:11:40:ac:56:09:0b:8d:c4:06:c0:
32:d9:11:67:83:b3:b5:c9:cf:83:41:9c:a3:d6:bf:bf:b9:02:
ac:dc:63:62:d8:a2:d0:e5:39:9b:4b:27:bd:33:9b:ab:bc:3a:
0e:08:c0:7d:e3:1c:26:78:87:96:c1:9b:de:a1:60:1d:c6:60:
c1:50:ba:34:49:17:d9:06:4c:71:42:ae:81:bd:1b:b7:27:70:
ca:31:1c:df:0b:b9:04:ac:34:a0:4a:a3:30:e0:66:74:2f:d4:
f1:ce:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:46 2025 by rpki-client