Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: B6R+8ZEIzgFN5SCCzVJ98mKWkgFmrl0kkctmkm7UVdY=
Subject key identifier: CE:4D:FE:40:33:4A:2D:1C:E6:7E:3F:90:52:47:4C:59:78:43:02:54
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 01974A43FBE512F416B660C081653CB9930D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 12:00:58 +0000
Manifest this update: Sat 07 Jun 2025 12:00:58 +0000
Manifest next update: Sun 08 Jun 2025 12:00:58 +0000
Files and hashes: 1: 1F7uxkd5CHW5Nl3RYcymdv41PuQ.roa (hash: CcbwxJuJRF3/aA4m69pX7txPfcLVx2hNzHSkmTtnNVg=)
2: 6OJY_cLGBp28NDNyp5KhfLaq0T4.roa (hash: Q7dSDBkkqsY0c5wjzpyUd8BOdypnvTRmRZWsgkhxLKs=)
3: lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa (hash: yGaK09dhA4d1XHm7tuZO0sTpyctbGTSJ/ciNb0ty54Q=)
4: myG4Sawx0LfJTRmA5fYEdv4-s1g.roa (hash: YBdxt4BRgQWeWo/h8hkYVlVlmJP13HxJ2W8fQJqxi34=)
5: q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa (hash: aR28mDR0AXgw+ne2p9IcwrnOZCQ+luqP2WRf/HY4Z7Q=)
6: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: L9ZLrYovnS56wL1Z9D4D/GT9kQOzY2SWB1myXIYLVj4=)
7: vn8OwjKW13Vvv7-w646PZQwlT1g.roa (hash: SQoW5zSKhm7XP9vCmJ5BfcEIft5q/8KQA6dRhI8YlXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:fb:e5:12:f4:16:b6:60:c0:81:65:3c:b9:93:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jun 7 12:00:58 2025 GMT
Not After : Jun 8 12:00:58 2025 GMT
Subject: CN=ce4dfe40334a2d1ce67e3f9052474c5978430254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:92:df:e4:ad:ec:de:f3:f4:a7:20:11:ec:
28:1a:ba:fb:a9:2c:c0:44:05:6d:a8:1c:e0:48:b5:
ac:9c:01:e7:0b:22:5c:1b:87:0a:9f:fa:1e:aa:56:
f3:41:d3:a1:c3:a0:e1:b2:83:fa:c3:fa:36:0d:af:
41:86:37:48:f0:4f:f6:3a:16:e0:56:dc:f0:a9:6a:
10:be:07:be:a0:2f:a5:20:81:96:2d:57:76:2e:45:
29:40:88:42:9b:03:ff:64:1e:08:e6:cf:03:3c:39:
dd:d9:98:86:9c:22:0e:bf:3b:53:9f:92:61:37:16:
dc:fa:0c:65:ce:f5:a3:02:b3:ec:09:12:d4:59:e0:
80:ff:c1:0a:44:75:12:7d:e0:3b:88:d4:99:32:c9:
23:91:81:07:f0:04:d6:10:18:fd:e3:a6:dd:dc:16:
19:f8:4e:96:83:b0:5f:4e:72:48:6f:33:52:29:88:
1f:81:4e:bd:69:7a:28:9f:47:03:3c:66:14:05:62:
59:b6:6f:35:b0:0b:3b:bf:1a:2c:5a:05:e0:3e:db:
24:8e:ee:1c:fe:35:7e:a1:0a:46:7f:b1:c0:ff:b6:
4d:91:95:6c:c5:68:61:0a:e2:f8:f7:db:f8:ba:02:
9a:0d:d4:1a:5b:c7:f6:c9:9c:42:49:f1:b3:5c:48:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4D:FE:40:33:4A:2D:1C:E6:7E:3F:90:52:47:4C:59:78:43:02:54
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:83:b4:7b:74:a5:44:13:6e:a2:5e:60:72:b1:f4:91:62:1a:
95:ff:58:f4:1d:34:4a:0b:91:15:81:8c:ec:28:eb:e7:c7:2b:
cb:78:9e:6a:1e:74:92:3b:fa:a4:d1:80:9a:e0:e3:8a:1b:3d:
89:0e:6f:a8:fc:40:15:4a:ac:ad:fd:54:88:55:0d:4d:81:66:
af:dd:1d:70:51:69:cc:c0:74:0b:33:45:40:16:15:47:d4:05:
7f:4d:10:dd:24:92:e2:5d:c8:2d:d6:ab:7e:af:c7:02:c1:9d:
1e:bb:47:e2:0b:9c:39:20:65:d3:63:6f:14:d8:23:3c:a0:be:
62:87:62:59:95:ca:01:dd:eb:1b:4d:f6:1f:cc:69:c6:93:10:
8d:ce:32:ac:77:40:d1:1b:62:72:3b:25:77:92:83:37:6b:13:
bd:1d:b9:a1:c2:6f:6b:49:44:3d:9b:9e:ee:24:9e:81:9a:b7:
31:a0:48:66:d8:1b:41:90:6a:71:8b:0c:84:02:6b:ef:fd:03:
df:85:d6:46:ee:84:80:3d:5d:9c:6f:7a:b1:07:c2:a5:b1:a1:
3b:88:fc:cc:27:75:8c:53:69:49:cb:97:59:4f:08:5d:e9:9e:
01:c8:bb:9c:0d:a2:08:f0:3a:87:66:f0:bf:fd:cf:d8:f1:59:
65:17:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:01:26 2025 by rpki-client