Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: DSZX3ZfStGDsOe6JTMfMhy6yopL3g/1ta8MlDKGYGKM=
Subject key identifier: 1A:9B:7F:25:09:A4:ED:BD:21:F6:6A:9A:4B:1F:94:78:00:76:85:F5
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019748FAB6AF3F3768F4EEEF4178E6612F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0C09
Signing time: Sat 07 Jun 2025 06:01:19 +0000
Manifest this update: Sat 07 Jun 2025 06:01:19 +0000
Manifest next update: Sun 08 Jun 2025 06:01:19 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: oY/TuoEbVAJfO3hdvdRGF6udyfMjrU8Aoy5YkS89DvY=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:b6:af:3f:37:68:f4:ee:ef:41:78:e6:61:2f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Jun 7 06:01:19 2025 GMT
Not After : Jun 8 06:01:19 2025 GMT
Subject: CN=1a9b7f2509a4edbd21f66a9a4b1f9478007685f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5a:22:cf:27:c4:57:c7:74:81:19:98:f8:4d:
43:fc:0f:77:46:c8:73:36:fb:36:99:1b:89:6e:e1:
e8:88:b8:21:98:b6:d0:0b:e2:8e:98:a2:e3:c5:b1:
e7:3c:ba:ab:23:8e:d9:dc:84:39:85:29:3f:7d:32:
ec:16:72:b5:ca:67:f3:a8:f2:c7:1b:f9:bc:f5:19:
d0:68:94:ff:d4:7e:1e:3d:f0:76:2e:3d:f2:1b:57:
98:82:da:de:a3:7d:b7:d1:4c:6d:64:85:ef:16:b3:
d4:fa:fa:5a:ea:6d:b0:e8:c7:c2:62:c0:5a:d8:0b:
32:cb:2c:6e:10:a4:64:1a:ed:b3:98:ba:19:a7:df:
e5:3e:d3:a1:74:d8:eb:81:36:56:e3:1a:a7:00:3b:
ec:a2:98:13:c0:f8:69:33:54:bd:60:8d:74:0d:a8:
44:01:75:00:64:ab:a6:c3:7f:11:03:1b:c8:65:31:
80:21:32:7a:37:8f:1e:a0:c7:8f:aa:d0:69:fc:3c:
26:a7:6b:13:bf:1d:65:6d:2e:3d:d9:17:1e:95:f0:
f4:b7:a3:3a:0c:2c:60:4c:85:f9:34:29:0e:b2:e7:
97:42:84:99:40:a8:fb:44:54:81:9a:7d:7e:b0:55:
ba:ee:74:26:b0:47:a5:f9:05:f5:43:fb:db:08:b8:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:7F:25:09:A4:ED:BD:21:F6:6A:9A:4B:1F:94:78:00:76:85:F5
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0c:5f:5b:b6:2f:f3:79:6f:8e:87:32:fa:a6:a9:85:79:8b:
38:3a:cf:55:ae:fe:2c:db:e1:87:a2:6c:17:83:2c:aa:f8:79:
a4:f2:cc:cf:14:f2:b7:08:51:dd:6b:34:58:67:61:8e:3c:81:
92:c3:cf:9e:de:ee:9e:ad:23:0f:9d:ad:ae:35:53:d8:54:15:
a2:9f:7d:5d:06:11:1a:74:f2:79:2e:c9:5a:bf:44:27:06:86:
3a:58:b6:65:38:9b:1c:41:88:21:82:b9:7b:b8:81:97:d3:78:
6a:d9:f1:e0:1d:57:c9:2e:95:ae:09:78:c8:9a:38:5a:db:ea:
0d:ae:68:8c:0b:6a:2d:c9:11:57:99:be:1c:e3:01:9d:90:4f:
b4:cb:e1:20:ba:2e:51:64:8e:89:58:dc:d5:5c:0d:d9:a9:70:
21:21:fe:6b:28:51:69:03:97:00:63:9d:ba:10:a2:fa:52:08:
42:7d:39:51:54:ca:24:a0:39:52:7c:2f:df:aa:0d:61:56:1c:
1b:db:96:f7:e1:0b:18:60:bb:97:e7:34:5e:c0:3b:24:20:74:
98:d9:ef:63:43:eb:9e:fb:97:1d:09:5f:a3:44:84:ee:31:8c:
74:22:8f:2e:7d:d2:d8:be:46:fe:9a:d5:b3:84:06:81:c0:f3:
50:09:ef:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:32:52 2025 by rpki-client