Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: lAOvJnxJmqDXgsOCVrdHZNfc4PTo0iOxuz+fwbCjHbo=
Subject key identifier: F8:85:F7:CF:83:3F:C2:5B:61:39:1D:3D:F1:58:2A:9D:8B:38:44:20
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 019747428FCD887860277B13F1E1F1A71A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 22:00:33 +0000
Manifest this update: Fri 06 Jun 2025 22:00:33 +0000
Manifest next update: Sat 07 Jun 2025 22:00:33 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: UQBxbrlEg3UeaJyN7lBZ9FmVVh2mduIUELECz2MEeEc=)
2: CK8AO5cGK3UQexwKT4OQnvAc618.roa (hash: FFxKHiRId03ta3Wbr3GQyhjQH1qxb15B+KbsuejkB8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:8f:cd:88:78:60:27:7b:13:f1:e1:f1:a7:1a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Jun 6 22:00:33 2025 GMT
Not After : Jun 7 22:00:33 2025 GMT
Subject: CN=f885f7cf833fc25b61391d3df1582a9d8b384420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:e6:92:ec:0a:33:84:1e:e2:9c:0e:47:59:
b3:77:74:d7:5f:9f:78:6a:02:0a:f2:a4:9e:d6:7a:
6b:7d:cc:1b:f7:cd:44:ce:ec:0f:1e:92:9f:dd:06:
f7:b9:7b:f7:1d:77:3c:82:80:c4:38:b5:aa:ab:16:
03:ab:5b:aa:c6:eb:f6:17:1b:74:fb:55:b6:e1:9e:
84:05:4d:12:db:7f:88:87:a7:9d:d5:fb:09:db:76:
78:92:e8:d4:fd:d2:9e:55:48:00:64:36:9e:25:09:
99:b5:72:03:14:52:b0:89:ef:36:9a:a9:f4:ca:f4:
d2:3f:10:fd:3b:fe:c1:13:cd:f3:77:4c:77:e0:d4:
7c:76:f9:e4:76:1e:b4:55:f9:b4:da:26:96:3f:9c:
61:19:87:28:ea:8e:32:05:4d:50:ce:b3:eb:09:e6:
21:62:bf:fe:61:08:96:8f:35:d4:96:e5:18:12:e9:
ca:a2:0b:d7:15:93:9e:af:b9:a2:21:b6:0e:09:e4:
2c:c9:89:53:99:da:46:76:e6:f2:e5:7d:4a:bd:65:
c5:4e:4a:6f:a8:6c:ce:e4:ea:df:1f:3b:dd:7b:27:
e2:c3:86:3f:0e:3e:f6:7c:66:50:03:42:a8:9e:a2:
59:27:ec:78:a6:47:9c:7b:ca:3a:7e:2d:7f:69:84:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:85:F7:CF:83:3F:C2:5B:61:39:1D:3D:F1:58:2A:9D:8B:38:44:20
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b4:86:c4:31:2b:28:bd:eb:c2:c4:84:ee:1e:f1:c4:6b:08:
12:c4:27:27:0d:65:03:dc:78:3f:5e:ce:fb:53:6b:46:75:c8:
d5:1a:55:8c:96:98:e4:a0:88:3e:e1:4f:d9:19:49:10:62:6b:
7f:a3:57:e7:68:17:e4:61:2d:f9:1e:71:ec:6f:df:f8:82:b5:
86:b8:c8:94:37:be:fe:d4:66:56:cc:32:17:3d:c4:7b:68:2b:
78:d6:04:d5:af:42:7a:33:b9:da:b8:b3:c1:4a:83:1f:a7:46:
d1:13:a7:8c:16:51:1c:57:14:73:e9:83:c7:c6:17:b4:b5:f9:
aa:79:da:a2:e4:bd:ac:d7:7b:09:10:c1:f1:db:63:6d:b6:5b:
99:a5:28:84:c0:c4:34:b8:81:ba:f7:45:f7:e6:78:18:2e:8e:
7c:b2:d5:a8:d4:cf:ac:30:dd:c1:85:79:98:04:84:a4:0f:5d:
b3:13:41:0a:05:8b:92:dd:37:c9:e7:ec:74:fc:6d:b7:09:e2:
f1:2c:23:15:77:aa:51:b6:93:6e:88:88:11:10:81:7f:c0:8f:
d3:49:6a:ff:dd:a1:41:d0:93:e3:14:ee:b4:50:6d:e7:cd:4a:
b4:4d:73:b6:91:e5:ea:da:ea:76:eb:c9:c0:b4:ff:88:17:56:
a3:0c:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:20:55 2025 by rpki-client