Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: 86LGja4rAxYAsnmkHmxSINM6PLJQwemyuttRQnVO8nY=
Subject key identifier: 16:F6:02:21:60:11:67:19:6B:8B:D8:66:27:72:16:2C:14:2B:18:B0
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 019742C1E6BD75ACB07A7312D433039904C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 0D71
Signing time: Fri 06 Jun 2025 01:01:33 +0000
Manifest this update: Fri 06 Jun 2025 01:01:33 +0000
Manifest next update: Sat 07 Jun 2025 01:01:33 +0000
Files and hashes: 1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: cXoeEV1BZrvQd8QsDejJXcz0l0ZKSJz4RLtiIH+4eYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:c1:e6:bd:75:ac:b0:7a:73:12:d4:33:03:99:04:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Jun 6 01:01:33 2025 GMT
Not After : Jun 7 01:01:33 2025 GMT
Subject: CN=16f60221601167196b8bd8662772162c142b18b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:a1:f4:6f:ca:ca:92:e4:b9:1a:1c:4e:f3:
59:67:76:d0:39:49:e7:32:49:51:d4:89:12:a7:3e:
99:47:4e:df:df:63:08:c7:93:7f:a4:98:61:aa:44:
20:31:86:64:05:09:87:9f:f1:64:44:9f:5f:43:33:
48:af:dd:f4:fd:bf:47:8f:b7:47:62:11:99:08:7d:
7d:b0:b5:8a:54:7b:30:57:05:b1:94:49:26:05:89:
71:ae:de:b8:5c:ae:04:de:af:4b:d2:b9:c3:22:eb:
8e:42:29:90:95:c6:f3:b3:f0:8e:bd:55:bb:db:86:
f1:fb:87:f1:45:4e:8d:0c:9a:63:4e:34:ce:50:81:
5c:95:5a:60:58:f6:b9:27:81:f9:c5:83:b2:00:88:
6a:ca:91:67:1e:1e:ac:e2:19:52:f4:92:72:61:89:
8e:da:02:40:5d:e4:e6:a7:c9:46:46:dc:71:8f:0a:
6c:a9:5c:95:58:dd:58:53:a8:cb:a5:0d:7b:10:c6:
fd:b0:6e:b9:0e:0b:b6:a0:2c:c1:d8:15:11:28:ce:
4c:15:b8:9a:60:26:9c:c1:82:cd:5f:80:20:ba:01:
27:a0:65:74:84:ac:ef:a0:c2:c3:57:90:38:e0:2c:
8d:61:e0:81:dc:bb:d8:98:63:e8:14:fa:a8:49:c9:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:02:21:60:11:67:19:6B:8B:D8:66:27:72:16:2C:14:2B:18:B0
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7f:48:8e:8a:ad:c7:75:82:f6:d0:06:02:94:21:98:2f:73:
5d:b1:89:73:44:8f:cf:e7:ce:b1:08:e8:7a:35:d3:02:3f:71:
93:c0:cd:68:66:3f:24:6d:2c:10:59:21:80:ac:b8:b6:99:0d:
bd:b0:3c:81:fe:59:1d:9e:ff:36:8b:a6:0b:1b:9d:78:fb:84:
aa:8f:cc:82:26:21:12:9f:f0:bb:3c:ca:4f:57:2e:0d:c6:8d:
0e:01:27:f6:da:3c:84:fc:d1:e2:c2:6b:cd:a1:c0:73:6f:6a:
9e:2b:81:21:f9:38:b8:95:c8:4f:a9:9f:4b:f6:f4:58:c3:fa:
a7:f0:ac:49:aa:e5:8e:ea:32:d3:43:55:be:31:6b:01:49:c7:
c9:0b:85:63:60:b9:75:9a:e4:ac:0b:da:40:60:df:f7:81:dd:
1e:87:2d:82:01:5b:af:9f:33:f0:13:51:21:2c:b7:f6:3a:fe:
99:c0:93:9e:5c:01:a6:86:6c:79:2f:4a:09:40:f2:87:b7:d8:
2e:5a:25:95:c7:e1:88:37:a9:ee:97:b3:bb:d3:2f:b1:89:11:
dc:5d:5b:bf:f0:da:fd:12:06:3e:b3:b0:9b:40:a8:a3:4a:7f:
98:59:48:ca:c1:65:2a:de:0d:f3:6b:80:fa:2e:62:f0:50:c1:
e1:77:d9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:30:44 2025 by rpki-client