Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: eQSFIv8I2kcu/Z5YSC8MGIkRzzwsLoFa0EgT8JECuZw=
Subject key identifier: C1:42:BC:B3:09:2F:1C:63:1F:A9:B3:9F:AB:29:AE:44:43:D9:DD:55
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 01974DB2E9FA43DCA9642D77F2728D0698D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 0238
Signing time: Sun 08 Jun 2025 04:00:59 +0000
Manifest this update: Sun 08 Jun 2025 04:00:59 +0000
Manifest next update: Mon 09 Jun 2025 04:00:59 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: KQQ+fW5BsiyjGwHygeJVBDxWF8Pd8cjICeGHILajW5s=)
2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:e9:fa:43:dc:a9:64:2d:77:f2:72:8d:06:98:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Jun 8 04:00:59 2025 GMT
Not After : Jun 9 04:00:59 2025 GMT
Subject: CN=c142bcb3092f1c631fa9b39fab29ae4443d9dd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d7:c4:f9:64:a8:47:5d:8c:99:8d:7f:1b:bb:
53:62:5b:db:16:a3:3a:23:ad:0e:2e:75:e5:07:ba:
4d:6b:50:bf:1c:e6:eb:b1:2c:4f:89:6e:ac:50:43:
5d:5c:57:94:92:e4:6b:c8:5d:b5:c9:bc:a5:db:e0:
e8:5b:ae:d8:23:1b:4d:11:ee:bc:fa:68:38:29:b7:
a9:08:9a:db:7b:ce:9f:d9:8c:44:f8:46:5e:a1:c3:
78:4e:c9:a3:29:be:a1:c6:cb:57:68:fc:b8:e4:20:
09:03:03:f9:c4:48:4f:53:97:b4:48:9a:84:13:59:
cf:e2:e5:49:3d:f5:45:29:7f:ed:c2:17:be:33:ac:
71:15:69:c2:86:d1:33:48:d6:6b:0a:66:ff:d8:e4:
55:79:07:97:db:ab:3f:33:e2:cd:89:45:e1:3d:79:
71:93:d4:a6:82:b8:56:c5:79:d5:d0:da:19:50:32:
dd:78:69:68:80:03:12:6b:52:65:92:48:1f:07:6f:
07:71:d2:f5:98:e0:a6:0c:d0:df:7c:e6:d3:ca:da:
95:6c:34:85:28:68:4d:7b:03:e9:03:73:78:29:72:
12:76:86:7c:9d:88:5f:0b:dc:9d:f9:e2:ad:12:2f:
fe:c9:17:56:0f:5e:3f:4d:9f:1c:dc:34:0f:2f:35:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:BC:B3:09:2F:1C:63:1F:A9:B3:9F:AB:29:AE:44:43:D9:DD:55
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8e:68:fd:5f:ba:e2:4d:1e:a6:b1:69:86:c4:9e:2d:5d:de:
7b:d2:71:9e:b9:b4:9d:d6:1e:ec:67:c2:c1:11:29:4e:b7:2d:
1d:dd:6b:d5:66:d3:d7:4e:8d:2a:a9:89:f3:c9:6e:e9:79:b2:
ba:a7:f7:42:38:b8:48:24:9a:f3:b9:43:2a:d6:d8:d4:e0:02:
9d:e2:ea:36:03:9e:19:82:5f:cb:18:2e:c2:00:0f:ab:6a:44:
d7:09:25:47:be:ff:be:ed:d2:ba:d0:cc:dd:ba:4a:69:8e:8e:
9c:d8:94:22:80:4f:a8:13:82:ad:51:f6:c8:ab:62:dd:2c:18:
c3:de:1c:ba:a4:81:dd:25:9b:8b:c8:71:c2:48:42:c4:68:34:
aa:e3:7d:d3:b3:5c:df:69:05:a9:76:db:f0:ef:b1:ad:a3:8c:
82:df:aa:d1:cf:01:9d:0f:46:45:6d:0c:b3:14:46:17:14:c7:
57:8b:7c:cd:91:8c:f9:e8:85:58:c9:05:06:7a:a0:5b:82:12:
05:59:01:13:60:07:43:07:da:e9:55:e3:ab:1b:7c:e8:fc:97:
a0:2c:67:78:3a:8e:d6:bf:44:e2:75:af:e2:b2:24:ad:8b:26:
a9:ad:f9:6b:c5:57:d2:35:a8:fd:83:db:d6:75:b7:5a:93:26:
45:06:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:50:09 2025 by rpki-client