Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File: 5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier: OZBVxKrqBpHXyGK3luWZqDCbMFBKnDrehvxnDnknYVE=
Subject key identifier: D2:AD:26:EA:7C:13:AA:93:59:90:0D:F4:CB:08:B5:A1:B2:B7:42:7A
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 01974F3344672F75B7AE508841A8F67EA2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number: 0559
Signing time: Sun 08 Jun 2025 11:00:49 +0000
Manifest this update: Sun 08 Jun 2025 11:00:49 +0000
Manifest next update: Mon 09 Jun 2025 11:00:49 +0000
Files and hashes: 1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: 1qFtSH/Ty2mrnuk7GdojNqMZ4g3vV2M1ezOQG8FmshQ=)
2: DhNK6wzjByDnasFkDiVozXApAMA.roa (hash: axPPgHJK+DsZDTes1Z8jvmiFkJ86vZLUMhnI7D0ebHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:44:67:2f:75:b7:ae:50:88:41:a8:f6:7e:a2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Jun 8 11:00:49 2025 GMT
Not After : Jun 9 11:00:49 2025 GMT
Subject: CN=d2ad26ea7c13aa9359900df4cb08b5a1b2b7427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:10:27:12:93:17:e6:1d:58:38:28:8b:47:
d0:46:a2:c5:09:8f:1b:9d:5e:10:d9:1c:7d:c5:0b:
7d:72:5b:f2:af:4d:ed:52:39:09:97:e4:94:d5:43:
51:ac:d5:92:38:9f:06:ea:ca:8d:ab:9f:ff:66:cc:
58:67:9c:d6:77:1d:90:13:17:f0:a2:49:fc:65:58:
26:7f:e4:c8:44:d3:41:40:b2:69:53:13:9b:3e:db:
09:1a:d0:ef:74:15:bf:47:aa:9b:5c:4a:16:05:b4:
fd:76:8e:95:b6:b8:b1:33:4b:6e:66:8c:4f:b2:17:
37:ae:65:b4:fd:81:73:2e:6f:09:f2:dd:25:bd:ef:
51:2b:e8:5f:09:f9:24:e6:db:4d:b8:74:dd:39:c4:
5d:8f:ba:e0:5b:2b:a8:cd:1e:6e:3e:b1:df:bb:e5:
b7:fb:52:82:9f:5f:2c:ad:cf:8f:90:00:6e:06:18:
7e:91:ca:be:fc:3b:95:f1:b5:8c:8b:91:c9:b0:c8:
26:a3:48:f6:e0:21:64:c8:93:2c:eb:87:96:5b:c8:
7d:20:f4:b8:c5:f3:d5:5b:a7:c4:82:7c:1d:00:c8:
4b:bc:1b:1a:cb:16:4c:ad:8e:b1:64:83:49:06:5f:
22:d8:59:8e:29:b2:c9:03:df:1f:36:8c:f4:77:e8:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:26:EA:7C:13:AA:93:59:90:0D:F4:CB:08:B5:A1:B2:B7:42:7A
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d7:1b:a6:ed:3a:9b:06:ea:78:2f:49:75:53:93:84:94:3b:
87:4e:c0:3f:a4:d9:a8:1b:af:46:0e:f1:3a:51:7f:7f:4f:fb:
28:0f:45:02:0f:b2:6d:96:cb:5b:fc:1d:57:80:6a:bf:1a:a8:
18:49:d1:b9:34:f6:cc:e8:7b:7e:5a:53:e7:7b:9d:81:7d:4b:
cf:b7:b3:22:ba:f4:28:a9:3a:b2:3f:ca:7c:e5:a9:57:dd:aa:
d9:02:c1:a1:bb:3d:bd:96:02:9a:47:8c:7c:8d:61:29:3d:2f:
82:5e:82:8e:44:89:9b:80:6f:af:51:30:57:dc:c6:82:25:57:
a7:65:46:30:e4:fb:49:47:b8:45:98:8c:21:88:6b:ec:49:ea:
da:fa:a4:6a:a8:5d:e0:12:b1:13:46:5b:0c:ab:3b:f7:df:59:
09:a5:f8:a7:ff:19:e3:6c:5f:dd:41:56:d2:47:8b:8b:7e:f8:
f1:ba:e2:ad:98:1b:df:6e:f3:26:91:81:dc:ce:47:a4:a9:c6:
a4:59:7a:d2:2e:bc:b2:d7:56:f2:e4:37:da:e2:dd:a9:aa:47:
ea:c5:b8:c3:ad:b3:b1:cb:53:2b:1e:1d:f1:94:20:9d:cb:0a:
31:ad:62:ff:f7:91:3e:4f:f1:4d:b6:53:1e:3a:e8:d5:c7:69:
59:d5:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:03:28 2025 by rpki-client