
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier: AsYUa4bbyTGSPKTtjU87IM/hv6Tc0vkAUoGVw8iZj0g=
Subject key identifier: E3:64:CE:E8:FF:E8:C8:5D:81:98:57:92:D9:43:82:F8:60:89:98:7E
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer: /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial: 0197518F38267CC7DEA053CB66BCBA9AEB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number: 36
Signing time: Sun 08 Jun 2025 22:00:29 +0000
Manifest this update: Sun 08 Jun 2025 22:00:29 +0000
Manifest next update: Mon 09 Jun 2025 22:00:29 +0000
Files and hashes: 1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: nT/rCvWlTom4qfaLrntg780ulkdPtCBFAN8wm/WRsi8=)
2: NM7UvKaTOGBhqz3Waw4Aop_d3I8.roa (hash: CuECrw6IivHOvgLxpf0LZMc5frIWOtpPKmC4FcLgXSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:38:26:7c:c7:de:a0:53:cb:66:bc:ba:9a:eb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
Validity
Not Before: Jun 8 22:00:29 2025 GMT
Not After : Jun 9 22:00:29 2025 GMT
Subject: CN=e364cee8ffe8c85d81985792d94382f86089987e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:93:c2:cb:05:06:4a:b1:8c:6e:8e:b3:17:
cd:17:be:39:b3:9a:72:67:d0:34:11:54:fc:e3:5b:
4b:87:7e:40:50:4c:3e:b3:f8:0b:be:8c:28:af:21:
56:a6:01:1f:62:76:ff:4f:fd:16:8b:2c:d9:6d:c8:
c2:2d:23:ac:23:79:10:1d:7e:c3:7d:8c:80:e4:4c:
d4:f3:ac:e6:e8:d6:f7:71:ac:08:28:47:92:ba:60:
95:41:70:e1:06:3e:8c:c2:da:5c:30:ca:f0:78:8e:
e7:5a:6e:17:60:52:29:d4:d7:0c:46:8f:b1:87:8c:
0e:1e:0d:f2:99:df:2e:82:d2:76:ae:87:11:13:5d:
62:35:9f:b3:be:07:f6:d5:e9:76:cc:9d:35:1c:90:
fc:ae:88:1d:80:95:f7:14:9f:b8:f2:23:85:af:74:
4f:90:e8:c3:df:be:8d:95:73:10:e5:8f:37:2f:aa:
36:03:21:36:b7:d3:c3:31:8d:f6:9b:92:43:34:67:
87:7a:9f:46:f7:d6:65:67:69:57:f4:7b:14:bd:fd:
6b:0b:1e:27:f7:f0:5f:a0:b2:42:c5:fd:00:4e:18:
ba:4a:26:0c:4f:38:fe:80:28:97:cf:0f:8b:7f:36:
57:51:cf:09:a4:d0:38:22:ee:5f:23:c6:b1:e1:0f:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:64:CE:E8:FF:E8:C8:5D:81:98:57:92:D9:43:82:F8:60:89:98:7E
X509v3 Authority Key Identifier:
keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:09:87:39:bd:b1:ce:91:77:86:a5:bb:93:d7:88:de:c7:0d:
16:ef:66:06:84:c0:9e:f8:f7:51:78:6e:33:bc:55:88:8f:60:
d9:bb:cc:ae:a7:2f:1e:59:b0:3f:03:ab:8a:ad:a0:56:64:72:
79:c9:08:1a:9c:34:5b:19:81:4d:23:9c:a3:bb:95:88:6f:72:
ea:b7:e8:a3:42:7d:a1:7f:dc:44:c7:ef:3e:1c:10:00:37:aa:
e6:54:47:8f:f6:cf:68:1b:c3:58:39:84:b2:4d:f5:51:3e:4f:
75:1c:eb:4a:70:13:0c:48:5e:ac:8c:8e:15:d9:63:75:45:4e:
3f:3d:91:81:f3:ab:eb:1b:2c:77:3f:43:64:01:54:6c:e3:72:
ec:fa:a9:53:03:b0:a7:df:aa:c5:e9:7d:cf:44:70:8b:47:14:
c5:dd:a7:b3:8c:99:07:6c:cd:31:e5:89:06:f6:52:ef:e1:04:
4b:01:95:e0:d8:b0:a1:4f:98:86:60:cc:f0:91:68:76:73:7d:
16:ff:70:a6:32:1d:fd:0f:01:51:54:3f:c9:61:b3:77:e2:2b:
19:40:9d:0b:16:e1:a1:c8:27:b2:ec:85:e2:58:76:95:6f:b3:
cf:12:1b:2b:70:d5:7b:d2:1c:b3:a7:0f:d1:50:9e:a9:43:65:
9e:bc:65:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:43:15 2025 by rpki-client