Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: jHaxDvUIE4ka6r0nj8GjHRdIpTF9icWoM6YnxBg/Z6s=
Subject key identifier: D4:E1:59:9C:73:ED:08:D1:72:A0:74:B1:A0:FC:58:F5:11:61:07:02
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 01974C690AC2DF7657F92E6929353A311790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 024C
Signing time: Sat 07 Jun 2025 22:00:41 +0000
Manifest this update: Sat 07 Jun 2025 22:00:41 +0000
Manifest next update: Sun 08 Jun 2025 22:00:41 +0000
Files and hashes: 1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: DXDpA+gVqFSb/LUJrvxfi4XpoAAWzdjGX292tLahW/A=)
2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:0a:c2:df:76:57:f9:2e:69:29:35:3a:31:17:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Jun 7 22:00:41 2025 GMT
Not After : Jun 8 22:00:41 2025 GMT
Subject: CN=d4e1599c73ed08d172a074b1a0fc58f511610702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:b4:61:5b:b5:ba:27:f8:76:0a:cc:f7:52:
64:a1:31:33:23:f0:f0:04:2f:71:f5:ae:a2:54:17:
0b:9d:c6:9f:10:ab:2f:a1:24:a1:ee:65:52:66:ef:
6f:94:4a:ea:a4:af:4d:33:98:1f:0f:17:19:8a:af:
8a:e2:30:21:9f:7a:b1:90:0b:90:61:1c:1c:e7:99:
4a:1c:c4:d4:45:a2:f9:ad:fc:86:bf:eb:bf:0d:95:
9e:5d:8b:77:d3:0e:50:de:be:9d:58:ab:c4:4f:ce:
6e:4c:5b:ee:a2:9f:5b:96:18:84:03:c4:22:f1:fe:
bf:92:4e:26:99:0f:d6:eb:2f:9b:bb:2e:ed:b7:80:
38:d7:51:59:e4:80:84:83:71:7c:1c:ab:4f:eb:7a:
25:a9:b0:7a:33:16:e5:c6:6a:8d:02:f4:bb:45:b7:
ea:6e:0e:78:10:52:ff:91:4f:8c:7c:5f:81:74:ee:
5f:6f:f4:7d:c6:96:fa:f5:bb:c7:ec:0d:00:70:57:
08:9a:56:95:fc:34:10:49:a7:4e:d8:3c:44:98:f3:
cf:d4:26:b7:e1:3b:91:9c:c1:a3:a7:45:54:2a:0f:
33:39:a0:da:cb:87:34:23:01:e4:f7:b3:5e:f8:d1:
b8:36:90:97:e2:eb:f9:e0:6a:f0:39:aa:d5:2e:5a:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E1:59:9C:73:ED:08:D1:72:A0:74:B1:A0:FC:58:F5:11:61:07:02
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ea:70:71:f6:f0:35:3f:bb:bc:2a:a0:6f:36:34:d5:6e:6d:
95:06:1b:8b:0c:56:2f:9d:bd:43:7b:a1:93:22:37:13:ba:cb:
d5:40:95:45:74:ca:2d:a6:5e:15:2f:30:3f:7b:21:76:92:be:
44:f0:cc:a3:ec:97:72:c8:58:f4:a2:11:44:c0:1e:9a:00:bb:
b9:ec:1d:be:35:a7:fe:e3:10:28:04:a9:ba:a0:59:fb:1d:1c:
48:dc:2b:13:1f:07:92:e7:54:2f:c4:b6:0b:49:2c:30:5e:0f:
95:8e:9a:c2:08:bd:cf:96:76:2c:9c:02:20:1b:f9:21:49:9c:
9b:c6:71:91:10:0e:8d:ef:dc:27:52:03:ab:bb:04:1c:d0:c9:
8e:24:a0:7e:0a:f9:bf:8b:ef:09:5b:7b:2d:1b:25:d9:65:9b:
25:cf:de:cc:58:8c:32:c6:02:10:bf:4e:93:56:c1:5a:10:2d:
ae:7d:4b:ff:1f:0e:2d:9c:9f:87:df:02:b3:3b:c1:12:35:32:
b4:9b:b0:44:90:4b:6e:e7:ca:05:dc:17:31:c7:02:32:03:0c:
14:bb:fc:3a:07:36:c3:81:cf:a3:fd:a2:ed:8e:07:09:6e:a3:
7b:79:91:ad:6c:96:59:4a:63:47:0e:3e:ea:f6:60:13:84:69:
f3:d2:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:25:24 2025 by rpki-client