Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: jDRFxU0VDpEQm0QFZKdiBu2UaEIW20taz1WWXhZKzu8=
Subject key identifier: 5B:67:01:B4:3C:75:4A:E3:61:9C:18:BC:CD:64:C3:44:E2:45:11:7F
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 0197542317B4635AEC05C50ACF6B671DCBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 1213
Signing time: Mon 09 Jun 2025 10:01:15 +0000
Manifest this update: Mon 09 Jun 2025 10:01:15 +0000
Manifest next update: Tue 10 Jun 2025 10:01:15 +0000
Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=)
2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: FRY0h2aUZ9BJbj283WjQEWly4kagf+Xq8ovFUltvA1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:17:b4:63:5a:ec:05:c5:0a:cf:6b:67:1d:cb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Jun 9 10:01:15 2025 GMT
Not After : Jun 10 10:01:15 2025 GMT
Subject: CN=5b6701b43c754ae3619c18bccd64c344e245117f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:b5:53:03:31:b8:ee:87:6c:60:da:8d:26:
66:cd:12:66:a6:e2:02:a3:45:8f:0e:ab:1e:fb:9c:
c3:e3:83:cc:a6:7f:7f:65:0a:69:35:79:a8:3e:1b:
8d:b1:16:f8:d7:62:6d:3b:77:91:27:b3:a0:59:a8:
ed:ef:0b:13:ac:ce:00:37:6e:a3:49:ab:17:b3:82:
76:0a:7d:1d:72:d9:31:8a:7e:43:6b:9d:ec:13:ba:
b9:ed:fe:c8:2e:d4:79:07:a4:26:68:63:e4:60:79:
81:33:1c:dd:4b:3a:16:60:ea:5b:d6:64:2f:35:bc:
1f:77:6f:e1:b5:e1:85:e9:79:fa:bc:5c:8d:af:39:
61:c8:26:55:06:c3:03:44:17:1d:29:57:c5:3c:e2:
3d:e7:d7:9e:27:5c:5a:2b:fa:47:0f:3f:bd:e0:b0:
36:1b:ec:34:dc:e5:cf:49:98:e8:a0:4d:9a:db:b9:
4e:36:73:b6:0c:06:91:04:e2:2f:b3:91:0b:4f:79:
78:22:25:8e:1e:d7:eb:55:d9:45:4d:51:63:92:56:
6f:6d:0f:05:b7:14:82:5f:dc:c5:f1:39:0c:d7:17:
38:f7:5b:bf:74:cf:76:e3:42:b9:f2:3f:a5:11:b0:
b4:08:1b:e7:60:6d:00:3d:b0:a5:5b:7e:bd:d6:25:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:67:01:B4:3C:75:4A:E3:61:9C:18:BC:CD:64:C3:44:E2:45:11:7F
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4d:dd:82:c7:22:9b:0a:15:61:f4:e8:ae:fd:6c:ab:eb:00:
55:b0:c6:32:fa:7d:74:eb:5e:d9:4c:d2:10:59:3f:98:83:4f:
95:a0:ad:17:98:cb:fd:32:e5:4f:a8:a0:50:65:26:09:a9:aa:
d4:f1:4c:21:a7:3a:2f:14:5a:a2:cb:9d:75:7a:d1:85:54:1c:
2d:fe:18:99:93:3d:c9:c8:ea:71:dc:85:1a:39:68:bd:f1:4d:
16:e9:de:fd:c8:b5:40:c9:f7:e0:09:c1:3d:69:11:c5:fe:39:
32:f9:c9:c1:2a:47:00:02:5f:33:af:66:f1:31:14:27:93:22:
c9:bb:e2:45:58:a9:3b:fe:75:e1:f2:3f:bc:69:f4:25:e4:20:
cb:fa:1c:04:da:e2:f5:83:14:42:fc:d8:64:f4:e2:14:20:0e:
6e:0d:eb:6d:77:8e:1e:cd:f6:95:80:e2:24:24:a7:ba:06:bb:
ca:e0:4d:90:11:e0:18:85:60:2d:c8:68:81:8f:fd:e1:bb:77:
15:67:e5:02:88:98:a6:b4:a2:d7:0a:23:5f:57:be:37:10:c2:
25:44:a2:b6:fd:f9:6e:8f:33:0e:66:f9:ec:0a:7b:fe:f4:9b:
bc:a7:bc:d5:7f:83:ee:e5:a6:9a:38:1f:06:4e:28:e0:46:db:
08:81:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:45:04 2025 by rpki-client