Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
File: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft (raw, json)
Hash identifier: qAPEjwQ6t/nSvI2ANWgA+VH9TJpGB7bzMX2ARFo1ogg=
Subject key identifier: D5:23:0C:4B:32:33:56:B7:8F:AA:4B:50:27:9B:D4:C5:B0:13:C0:56
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 01974A0C85C1D5C481D3B4F196FD6FDFB9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
Manifest number: 1060
Signing time: Sat 07 Jun 2025 11:00:23 +0000
Manifest this update: Sat 07 Jun 2025 11:00:23 +0000
Manifest next update: Sun 08 Jun 2025 11:00:23 +0000
Files and hashes: 1: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl (hash: /p5rV5sfTCzZTR6xq9BCTS0VJuC3A17s2k7U8udJ3ZA=)
2: WFOxXq8-woghob55sftxvTt6FdI.roa (hash: hwAy54H63vrYPhBgVny9CWYFBq69ABYXgCXp7pxF/eQ=)
3: nMthV73xKQot_nDw1BjaSeVp1wM.roa (hash: TYeby9qItlQuzOaWwKV9Jy5leKuAxnH4NPibMj98Eco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:85:c1:d5:c4:81:d3:b4:f1:96:fd:6f:df:b9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Jun 7 11:00:23 2025 GMT
Not After : Jun 8 11:00:23 2025 GMT
Subject: CN=d5230c4b323356b78faa4b50279bd4c5b013c056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:28:49:c1:f2:cc:dd:f4:c7:66:aa:26:0b:
a2:ac:a2:1a:91:89:f7:3a:db:ca:67:d4:dd:1e:1e:
61:42:0c:1d:e5:57:6b:f6:e4:38:b9:2f:39:5e:24:
a4:27:d0:2d:e6:1d:32:4e:70:aa:80:1b:4b:0a:3f:
f3:15:3d:1a:49:ef:eb:31:22:a1:72:8d:41:4d:02:
d8:2f:22:22:5d:5a:e4:c5:87:82:3e:09:34:45:19:
32:1a:82:ef:a0:0a:b2:64:20:3b:32:fc:b1:f4:8a:
3b:9d:b2:e5:05:2f:b7:da:c8:5c:84:69:a8:18:90:
bf:e2:b1:ad:c2:e5:96:48:4c:7f:5a:09:1a:33:f3:
d3:34:96:3f:ff:25:f7:1a:f9:73:01:e4:be:62:85:
10:fc:66:9c:d1:5a:93:b2:f2:71:5d:68:03:8c:c6:
de:70:08:0f:60:f6:5e:64:3a:f9:b8:b1:cc:00:44:
fe:1a:54:22:19:35:f3:65:b8:68:64:69:9d:73:78:
80:a4:c4:19:bf:25:9d:cf:cd:30:07:af:85:f1:85:
e0:b4:31:97:7b:12:87:e7:e7:46:79:9a:5b:8c:44:
41:89:64:00:d9:17:7a:b2:9c:fe:ec:b0:b0:f8:5b:
7e:c1:35:17:76:1a:43:2d:8d:98:ad:04:75:5b:e0:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:23:0C:4B:32:33:56:B7:8F:AA:4B:50:27:9B:D4:C5:B0:13:C0:56
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:49:96:98:85:ce:ee:d1:4d:7a:14:c1:a6:b7:89:5e:aa:8a:
d9:5d:21:4e:f3:95:77:59:8e:05:cc:17:e0:4d:25:1b:5c:02:
72:11:f5:84:f7:19:49:a2:8b:10:3b:a2:07:ea:5e:d3:61:b1:
88:92:96:ed:6d:c3:51:29:58:f1:8f:f5:84:48:41:f7:59:b1:
6e:b1:90:99:86:f7:0d:9a:ca:7f:81:26:73:0e:65:79:b9:5d:
5d:90:26:f0:25:d4:c7:9e:0f:c9:b0:9d:35:4d:33:45:c1:86:
a8:ca:6e:e4:29:87:93:74:70:0c:85:69:8e:38:53:9f:c3:65:
92:1d:ac:10:44:b4:75:20:3d:c5:6c:19:86:d0:20:49:e7:3b:
a8:70:2b:cb:a5:0f:c8:c2:f3:3b:85:86:9a:3f:4a:76:a5:74:
09:cb:ea:c4:fa:5b:5a:61:33:86:ac:00:62:bc:b6:5e:b1:64:
3e:5d:4b:c6:e4:e3:eb:34:e3:88:96:19:b4:1b:6f:47:61:47:
ce:d0:59:bc:ae:9f:3d:bf:bb:ca:2a:46:5d:21:86:27:63:fc:
5c:1a:e3:b6:a8:5d:b7:9b:ef:8e:72:57:71:4c:17:4d:00:7f:
81:09:3f:e2:05:76:c7:c4:94:c2:47:11:09:0a:de:06:fb:1f:
58:eb:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:16:40 2025 by rpki-client