Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: fycHLmEQ/hCq0auQe/3AhJmcRER3wIRHDo6GcZk7bgo=
Subject key identifier: 3E:5D:BD:3A:BE:FA:26:68:4B:3D:27:53:AF:57:50:73:BD:0E:84:E5
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 01974A7AF393A8CA6A9B4EC7E8EF7763C604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 107A
Signing time: Sat 07 Jun 2025 13:01:01 +0000
Manifest this update: Sat 07 Jun 2025 13:01:01 +0000
Manifest next update: Sun 08 Jun 2025 13:01:01 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: rlI75fScLSPx/3haPtQrIWIgXvWafvkEG5+YWkdtEmk=)
2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:f3:93:a8:ca:6a:9b:4e:c7:e8:ef:77:63:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: Jun 7 13:01:01 2025 GMT
Not After : Jun 8 13:01:01 2025 GMT
Subject: CN=3e5dbd3abefa26684b3d2753af575073bd0e84e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d8:84:ae:f0:95:fb:ad:58:8c:dd:09:91:0a:
b9:f9:e3:35:79:12:ea:e2:bd:d7:ba:12:c7:4a:8c:
40:61:5b:39:41:b3:e6:a9:83:be:54:88:1f:4e:cc:
41:a3:b9:2c:ec:4b:f1:2c:6d:6f:d9:5a:9b:78:eb:
2c:e5:a4:00:6f:84:c1:16:a7:7f:ce:ab:2d:df:92:
92:f1:4d:a3:3e:82:48:de:29:d4:14:f1:95:e9:ca:
f9:12:67:79:18:01:f4:5f:21:65:49:a2:79:99:43:
45:93:9b:c8:2f:86:00:89:e0:a9:5d:24:02:a7:de:
2b:1e:0a:08:91:70:a0:5b:5e:aa:f0:0c:3d:df:fe:
7d:c3:a5:fc:e3:3f:37:32:30:36:28:61:42:71:8d:
ca:96:c5:73:4e:15:2e:ee:40:ca:c6:c4:fe:66:c7:
0d:62:97:01:d7:cc:86:31:84:79:2c:fd:82:e2:40:
84:a0:f1:7d:cd:0b:38:c0:f0:89:a3:a2:07:20:f7:
0e:86:31:93:88:cb:64:07:99:26:2f:e3:7e:99:15:
e4:b3:2a:6e:f2:45:54:71:62:12:f2:4d:60:f9:2c:
3b:a6:1d:85:e6:e6:9f:c4:ac:e9:da:8a:61:9c:66:
a6:37:03:83:f2:30:49:4e:40:f2:e9:bd:a3:ca:fa:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5D:BD:3A:BE:FA:26:68:4B:3D:27:53:AF:57:50:73:BD:0E:84:E5
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:08:63:20:28:80:58:0f:28:56:10:16:85:40:c6:26:29:69:
f8:38:95:0e:49:13:d0:db:9e:0e:f2:4e:66:e8:cb:74:51:a2:
f8:eb:eb:a9:be:7f:c7:da:ab:2f:02:01:69:21:a0:46:83:3a:
34:13:0c:cf:4d:3c:d5:0f:7c:f5:bb:43:98:33:f8:90:53:29:
f6:19:e5:ce:41:12:5a:58:87:18:6b:0a:8e:2d:b4:a2:04:80:
1a:d2:09:b4:6a:cc:55:7f:cc:82:49:c4:d6:f0:e9:b4:10:78:
1d:ef:77:fc:bf:b6:91:76:99:8e:26:31:38:64:d0:95:b7:40:
4e:8b:2a:78:0e:9b:44:fb:a5:9d:16:22:76:c8:05:52:5e:02:
28:fb:0f:e5:af:88:b2:29:f6:0b:48:85:64:34:25:f6:b2:5b:
1a:0b:79:b2:ff:c8:06:14:be:18:33:4a:dc:d8:be:eb:66:d9:
f8:1f:94:c1:0d:81:60:29:d4:b1:13:22:a5:c9:04:79:2a:6b:
f2:6e:81:56:89:e3:83:2c:99:fb:5f:e4:ae:32:a8:0d:cb:cb:
7c:85:2f:6a:bf:02:ff:e2:d0:95:6b:0d:78:5a:68:97:16:99:
41:32:0f:c8:b4:90:11:a2:9c:80:ed:0f:fa:77:2c:a1:17:28:
31:5d:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:57:55 2025 by rpki-client