Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier: 2I3Vs8aCF+oSLTgLkSVBPVGK6C98VRrOYTBZERgAylg=
Subject key identifier: A2:2B:0E:56:53:1D:74:8A:33:74:53:D0:36:DF:D4:B9:C8:4A:07:82
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial: 01974A7B1EC3BF59102951048CF922B2BFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number: 10BD
Signing time: Sat 07 Jun 2025 13:01:12 +0000
Manifest this update: Sat 07 Jun 2025 13:01:12 +0000
Manifest next update: Sun 08 Jun 2025 13:01:12 +0000
Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=)
2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: r+qMoQWy3J5kXyhyXI1bsWAxwbSrxNIeSzgV4vjEpzk=)
3: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:1e:c3:bf:59:10:29:51:04:8c:f9:22:b2:bf:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Validity
Not Before: Jun 7 13:01:12 2025 GMT
Not After : Jun 8 13:01:12 2025 GMT
Subject: CN=a22b0e56531d748a337453d036dfd4b9c84a0782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:fd:08:9b:59:5d:99:bb:9b:76:b8:79:8c:
a1:03:97:2e:9d:9b:d8:2a:6a:34:bc:7a:fc:66:2f:
29:87:3d:8e:47:2a:e8:d8:08:75:16:53:60:d6:55:
0f:4f:ed:97:b5:bd:04:2d:0e:32:2c:14:18:73:da:
7e:e7:05:ed:30:1b:b6:aa:e7:11:f5:56:50:d1:d6:
1f:17:25:4f:83:07:0c:6c:f0:83:c2:6d:c7:9b:45:
5e:c2:3d:93:a1:2b:8f:0e:0b:1d:3a:e9:95:98:d4:
bd:78:7d:22:74:09:0b:d4:f7:17:a4:2a:1f:cf:d5:
47:ae:85:4f:c7:34:c0:28:2a:76:38:65:ff:df:7d:
8c:cd:1a:99:2c:53:15:ca:3d:5c:fc:50:13:3b:a2:
d4:8d:2b:84:ac:5d:25:3c:be:a7:98:ca:6c:8f:e1:
7b:ee:a5:23:9a:36:b0:0f:92:6c:90:7a:66:17:31:
15:a3:62:db:6a:51:04:f9:ba:ec:bd:12:0c:22:c0:
42:b3:e0:17:67:c6:ba:f6:61:51:82:73:71:4a:7d:
d3:73:75:a8:f2:27:70:4e:20:e3:fc:2e:95:7b:ea:
91:fe:ec:05:8f:37:ae:e3:6a:f1:da:46:36:5a:48:
ee:fe:8a:e9:53:ef:17:5e:87:d7:a0:dd:5c:af:3c:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:0E:56:53:1D:74:8A:33:74:53:D0:36:DF:D4:B9:C8:4A:07:82
X509v3 Authority Key Identifier:
keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:23:d5:3e:19:18:8b:30:a1:6d:78:af:ff:52:7e:e9:99:e4:
2f:f4:bb:12:18:14:6a:f0:7c:6b:1b:a9:1c:ec:da:bd:c8:2f:
5d:69:e7:9c:33:5a:d0:e9:d8:e4:27:b8:60:f0:d6:04:e7:ef:
15:bc:61:20:ac:ec:5e:61:88:89:bf:ad:3d:a6:97:a0:63:4a:
a3:4d:da:7f:5b:12:33:16:98:8c:f5:bd:cf:e4:31:ad:14:3f:
6b:40:ce:a7:0e:61:08:21:e4:e3:fc:b1:86:3e:23:2e:cb:eb:
f3:17:8a:cb:d4:95:7f:11:71:72:26:7a:8e:c3:b8:06:3e:1e:
f7:56:59:91:7d:65:98:55:c2:fa:00:d0:a2:e2:4b:0b:e4:fd:
93:38:25:cf:88:6a:90:fa:fb:c1:10:53:50:71:08:db:e0:77:
02:2b:8a:0e:4b:b7:01:ab:fe:0f:3d:4f:17:b5:10:1d:70:b3:
ab:e9:f9:dd:ee:b7:58:3e:2b:86:ed:b4:eb:e6:5c:3f:48:22:
98:47:36:cf:1a:64:1d:22:40:01:ca:77:e8:ee:ad:20:3e:dc:
52:46:4b:99:fe:bf:09:9b:58:be:91:16:97:05:f5:93:2d:f9:
5c:4f:32:a2:d8:2d:fe:85:30:8e:61:ca:e8:6f:b3:74:e6:78:
bc:88:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:51 2025 by rpki-client