Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: sGoo9241RUjH0GVgvIVBrrcaPUSXZ48E+TcAXoH6/vI=
Subject key identifier: 15:64:7A:41:EC:BD:E0:05:A8:FD:C6:9F:F7:37:DA:AA:9B:07:D2:F3
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 01976D3D94E99629D8BE7BE64F6CB3B252E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 1220
Signing time: Sat 14 Jun 2025 07:00:41 +0000
Manifest this update: Sat 14 Jun 2025 07:00:41 +0000
Manifest next update: Sun 15 Jun 2025 07:00:41 +0000
Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=)
2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: 0ydqRv7TTAHBVvfK3GvsrVtUsjp3av174A3uosD9NWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:94:e9:96:29:d8:be:7b:e6:4f:6c:b3:b2:52:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Jun 14 07:00:41 2025 GMT
Not After : Jun 15 07:00:41 2025 GMT
Subject: CN=15647a41ecbde005a8fdc69ff737daaa9b07d2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:9e:4b:1a:a0:a8:8d:e7:5a:3b:f7:66:3b:
3a:dd:2f:45:d6:c0:41:6a:b2:aa:6e:9e:1c:70:24:
a5:e3:74:c3:c6:fd:22:0a:1e:3f:5d:34:e5:c8:5b:
53:c8:46:70:1d:12:89:44:33:ac:9b:5b:50:ac:ee:
f9:4d:2d:1e:24:43:53:c1:f1:a6:e2:ef:7d:9e:62:
49:65:1a:8e:b0:20:8f:21:27:27:ee:25:31:f1:8d:
74:8f:e4:b2:b3:ad:9c:4b:54:96:40:0c:2b:74:10:
81:51:21:f1:af:b0:87:a1:3c:03:c9:51:23:5d:09:
0c:a9:6b:18:fa:44:5f:4d:58:a3:e5:ba:6c:c7:12:
5a:4d:a5:7e:06:6e:66:b3:05:af:09:04:94:67:a3:
01:a4:a2:c1:c1:be:5f:ad:3e:bb:90:0f:57:1a:15:
06:08:84:31:a3:d3:45:b5:e8:9c:06:e0:b0:7e:0a:
13:68:d3:db:dd:24:9f:1b:f1:f8:dc:c9:24:05:c0:
40:0b:a8:64:e0:99:c1:27:2f:5b:0b:8a:37:6d:3d:
61:26:88:9d:1e:76:9f:ce:d3:c0:43:e8:b0:67:c4:
cf:cb:a4:a7:6e:c2:e1:70:95:2c:00:f5:2f:a0:40:
8b:22:8e:9e:15:f8:f0:14:53:8e:87:4b:7d:ad:61:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:7A:41:EC:BD:E0:05:A8:FD:C6:9F:F7:37:DA:AA:9B:07:D2:F3
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6d:b7:e1:cc:98:29:2c:c5:6a:72:fb:17:09:d5:60:7d:30:
a6:4f:1f:93:7d:78:bf:ec:6f:7b:f7:63:93:06:3b:52:c1:b1:
9d:20:5c:9c:11:9e:40:cc:ef:dc:6a:e2:b5:7e:8f:82:7e:35:
a9:da:56:6f:df:7b:b7:af:16:b6:52:5d:52:ac:f7:19:14:81:
53:77:2e:b3:92:aa:f6:bb:04:7d:9c:58:f3:c3:42:2c:87:b6:
83:6f:33:20:ac:24:e9:40:7d:98:c2:e2:86:a1:4e:67:43:48:
28:bc:90:1e:c2:3c:ff:72:c2:d5:8d:0a:6d:d9:9d:2a:c8:d2:
16:ed:30:e1:9a:44:ab:3c:a0:89:b9:bb:2e:78:a0:6a:f4:16:
3e:2a:2d:0b:43:74:5f:33:ef:42:7e:cb:f2:0b:11:4c:aa:ce:
30:96:00:b3:72:21:58:f3:2f:64:23:76:41:c5:23:d8:6e:b8:
f6:4a:76:8f:74:54:b2:51:d2:cc:33:ff:e9:07:c2:81:17:a7:
3e:72:fb:0a:5a:6f:50:e4:c3:7c:45:36:b8:b2:af:cd:74:3d:
86:8c:ee:20:69:33:ff:7a:c4:4f:bf:aa:35:10:8c:d8:ea:2f:
d7:dd:ac:e0:d5:88:23:e7:9a:4b:7f:30:1a:93:73:43:bb:d3:
90:67:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:43:12 2025 by rpki-client