Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: A5zO+DokBbmskeDWcrIhpdWfycIuBBKnUnaRSt6FSqI=
Subject key identifier: A8:4B:95:C1:84:ED:47:B6:6F:CE:1D:1B:23:FC:42:D1:F6:D1:57:95
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 01974968125B89BF7E046415882716F130AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 0629
Signing time: Sat 07 Jun 2025 08:00:46 +0000
Manifest this update: Sat 07 Jun 2025 08:00:46 +0000
Manifest next update: Sun 08 Jun 2025 08:00:46 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: dbOJdCXZ2rdR5vZFwWLkzCROnHia/KrGeeWsT5qq2Ok=)
2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=)
3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:12:5b:89:bf:7e:04:64:15:88:27:16:f1:30:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Jun 7 08:00:46 2025 GMT
Not After : Jun 8 08:00:46 2025 GMT
Subject: CN=a84b95c184ed47b66fce1d1b23fc42d1f6d15795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:67:f4:2d:1a:51:a8:fc:85:64:18:95:76:
9a:c6:39:a0:50:e1:42:d6:e6:06:4d:de:d9:a7:25:
89:57:dc:01:f2:ac:6b:df:0c:7e:9d:88:26:d2:8e:
af:ac:90:39:8b:0a:de:64:10:dd:a3:48:bf:96:11:
df:a6:47:24:43:ec:49:ec:c4:c3:14:99:fb:a3:6c:
56:01:ad:c9:df:d9:43:87:41:f7:6f:31:65:46:4c:
47:98:c1:89:60:57:18:ef:b6:36:d6:fd:0e:af:31:
77:d4:f2:37:09:56:c0:7c:f3:55:ae:85:90:99:52:
12:72:b9:0d:7f:80:56:5c:6f:4a:b3:91:00:a1:92:
84:75:fa:8b:92:ef:f7:e5:58:dd:e7:b3:5a:81:95:
34:ce:9f:81:96:fa:95:5c:9e:c0:4a:04:a8:ea:3f:
7d:67:5e:a4:92:08:25:4a:ce:8c:70:39:bc:00:dc:
56:c2:4d:88:3e:d1:03:db:41:57:30:de:2f:22:48:
75:4f:b8:c4:b7:ae:22:c8:dc:b8:1c:82:a5:b7:9b:
bf:45:17:c5:db:e6:5b:c7:27:80:8a:ca:10:7e:75:
3a:28:da:5f:e5:ec:b9:a0:e3:68:2c:e6:b3:96:82:
18:6c:f7:0d:49:07:82:e0:98:a9:cf:9d:4b:bb:41:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:95:C1:84:ED:47:B6:6F:CE:1D:1B:23:FC:42:D1:F6:D1:57:95
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:70:ae:52:8f:67:af:bc:fe:02:48:f0:bc:35:41:b1:20:37:
c2:c8:30:d4:bf:1c:be:6b:47:d8:5d:dd:02:44:a5:f1:4f:53:
02:ca:a2:5e:ba:4b:b3:ed:50:f4:b9:54:e4:ab:08:dd:36:4f:
2d:6d:09:30:3d:c6:ec:66:6a:92:60:3f:7d:da:e2:68:31:9d:
39:7c:53:a3:a2:14:4c:e3:d5:88:8d:d0:de:57:bc:8a:88:58:
41:85:40:a2:b7:75:76:9e:13:b5:07:eb:fc:62:61:ba:f5:4f:
54:ef:16:6f:01:64:e4:33:1d:27:ae:88:0c:41:8b:c1:a7:c0:
43:5a:ed:b4:80:14:d0:f1:21:89:60:2e:82:c3:bb:c3:d8:84:
25:21:a3:6d:88:83:a1:3b:bb:37:4a:65:70:60:0e:83:c8:50:
da:8c:30:ec:49:2d:6f:b2:b2:4e:96:ec:f8:db:44:b2:c9:14:
5e:e8:67:c5:27:38:60:a5:b0:dc:c5:95:9a:ba:32:81:49:f4:
86:59:b9:1e:69:54:8b:31:18:c8:aa:7f:43:6b:fb:f4:62:95:
00:2f:90:42:c5:5b:24:16:77:4a:29:62:07:d7:4c:05:8e:b6:
2d:44:25:52:36:a8:2b:09:87:86:c4:18:11:14:70:c8:58:c6:
ea:ad:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:19 2025 by rpki-client